1. Who we are
Ligura is operated by Liberation Softwares LLP, based in Tamil Nadu, India ("we", "us", or "our"). This policy covers the Ligura website at getligura.com, the Ligura app at app.getligura.com, the Ligura connection service that AI apps use at connect.getligura.com, and the help guides at getligura.com/docs. It should be read with our Terms of Service.
We decide how and why your personal data is processed for these services. Under India's Digital Personal Data Protection Act, 2023, we act as the Data Fiduciary. Under the EU and UK GDPR, we act as the controller. When a business uses a team workspace, that business decides who to invite and what to store, and is responsible for having the right to share that information with us.
Questions about this policy can be sent to support@getligura.com.
2. What we collect
Account information. Your email address, which you use to sign in with an email link or code, and the display name you choose. If you do not set a name, we may show the part of your email address before the @ sign. We do not ask for or store a password.
Work you save. The Works, pages, tables, tasks, decisions, handoffs, files, links, and other content that you or your connected AI apps save in Ligura, along with their titles, statuses, versions, and relationships. This content can contain personal data if you include it, such as names or notes about other people.
Team and sharing information. Workspace and team membership, roles, permissions, and the email addresses of people you invite or share with. Ligura does not send sharing invitations by email; you send invitation links yourself.
Connection information. When you connect an AI app, we record which app was authorized, the access granted, when it was created, used, or revoked, and a session reference that keeps the app working in the right workspace.
Activity records. Records of actions taken in Ligura, such as when an item was read, updated, exported, or used as context by you or a connected app, and changes to members, shares, and invitations. We use these to show history, keep work consistent, and protect accounts. We also record setup steps in the connection guides, such as which guide was opened and whether a connection succeeded.
Technical information. Our hosting providers process your IP address, browser details, and request information to deliver the service. We use IP addresses briefly to limit abusive traffic, and our service logs may contain request details for troubleshooting and security. We do not store IP addresses with your account.
Messages to us. If you contact support, we keep your message and our reply.
Payment information. Ligura does not currently charge for any plan. If paid plans are introduced, payments will be handled by a payment provider, and we will update this policy before collecting any billing information.
3. Cookies and analytics
The Ligura app uses only cookies needed for it to work: cookies that keep you signed in, protect forms from cross-site request forgery, remember your selected workspace, and complete a sign-in. These cookies are not used for advertising or tracking across sites.
The website at getligura.com uses Plausible Analytics to count visits and see which pages are used. Plausible does not use cookies and reports aggregate statistics rather than identifying individual visitors. Our help guides are hosted by Mintlify, which may use its own cookies or analytics to operate the documentation site.
4. How we use information
We use personal data to:
- create and secure your account and sign you in;
- store, organize, version, search, and display your saved work;
- provide the access you grant to teammates, invitees, and connected AI apps;
- show activity history and help connected apps continue your work;
- prevent abuse, investigate security incidents, and enforce our terms;
- understand how the website and setup guides are used so we can improve them;
- respond to support requests and send essential service messages; and
- comply with legal obligations.
We do not sell personal data, share it for targeted advertising, or use your saved content to train AI models.
5. Connected AI apps
Ligura does not independently send your saved work to AI models for processing. A connected AI app, such as Claude or ChatGPT, can read or change your saved work only through the connection you authorize and only within the access you have.
When an AI app retrieves your content, that app's provider processes it under its own terms and privacy policy. We do not control how the provider uses, stores, or retains that content. Review the app's policies before connecting it. You can revoke a connection from Connections in Ligura. Revoking stops future access but does not delete copies the app has already retrieved.
6. Why we are allowed to use it
Where the GDPR or similar laws apply, we rely on these legal bases: performing our contract with you to provide Ligura; our legitimate interests in securing, maintaining, and improving the service and the website, balanced against your rights; compliance with legal obligations; and your consent where we ask for it. You can withdraw consent at any time without affecting earlier processing.
Where India's Digital Personal Data Protection Act applies, we process personal data on the basis of your consent, given when you create an account or use the service after being shown this policy, and for legitimate uses permitted by that Act, such as complying with law. You can withdraw consent by closing your account or contacting us. Withdrawing consent means we can no longer provide the service to you.
7. Who we share it with
Service providers who process data for us under contractual obligations:
- Supabase, for the database, sign-in, and sign-in emails;
- Cloudflare, for the connection service, file storage, network delivery, and security;
- Vercel, for hosting the website and app;
- Mintlify, for hosting the help guides; and
- Plausible Analytics, for aggregate website statistics.
People you choose. Teammates, invitees, and recipients of items you share can see the content and the details, such as your display name, that come with the access you grant. Workspace owners and administrators can see membership and access information for their workspace.
AI apps you connect, as described in section 5.
Legal and safety reasons. We may disclose information when required by law or a valid legal request, or when reasonably necessary to protect the rights, safety, or property of our users, the public, or us.
Business changes. If we are involved in a merger, acquisition, or sale of assets, personal data may transfer as part of that transaction, subject to this policy or equivalent protections. We will tell you before your data becomes subject to a different privacy policy.
8. Where data is processed
We are based in India. Our service providers store and process data in the United States and other countries where they operate. Data protection laws in those countries may differ from those where you live. Where the law requires, we rely on appropriate safeguards for international transfers, such as standard contractual clauses offered by our providers, and we will not transfer data to a country restricted by the Government of India.
9. How long we keep it
We keep your account information and saved work while your account is active, or until you delete the content. Uploads that are not completed expire within a short time. When you delete files, they are queued and removed from storage. Records of completed account deletions are removed after 30 days.
When you close your account, we delete or anonymize your personal data within a reasonable period. We may keep limited records where required by law, to resolve disputes, or for security. Our sign-in provider may keep a record of your sign-in identity, and provider backups and logs can take additional time to expire. Content you shared into a team workspace may remain available to that workspace where it belongs to the workspace rather than to you personally.
10. Security
We use reasonable technical and organizational measures to protect personal data, including encrypted connections, access controls on workspaces and shared items, authorization for connected apps, and limits on abusive traffic. No online service is completely secure, and we cannot guarantee that information will never be accessed, disclosed, or lost. Protect access to your email account, because it is used to sign in.
If a personal data breach affects you, we will notify you and the relevant authorities as required by applicable law.
11. Your rights and choices
Depending on where you live, you may have the right to access, correct, update, complete, export, or delete your personal data; to object to or restrict certain processing; to withdraw consent; and to receive a summary of the personal data we process and who we share it with. Under India's Digital Personal Data Protection Act, you may also nominate another person to exercise your rights if you die or become incapacitated.
You can view and change much of your data in Ligura, delete saved items, and revoke connected apps. To request an account export, account deletion, or any other right, email support@getligura.com from the address on your account. We may need to verify your identity before acting. We will respond within the time required by applicable law, and usually within 30 days.
If you live in California or another US state with a privacy law, you have the rights that law provides. We do not sell or share personal information for cross-context behavioral advertising, and we will not discriminate against you for exercising your rights.
If you are unhappy with our response, you can complain to your local data protection authority. In India, you may approach the Data Protection Board of India after first using our grievance process. In the EU or UK, you can contact your supervisory authority.
12. Children
Ligura is not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.
13. Changes to this policy
We may update this policy as the service or the law changes. We will post the new version on this page with a new effective date. For material changes, we will notify you in advance through the service or by email and obtain your consent where required.
14. Contact and grievance officer
For privacy questions, requests, or complaints, contact our Grievance Officer at Liberation Softwares LLP, Tamil Nadu, India, by email at support@getligura.com. Please include "Privacy" in the subject line. We will acknowledge your grievance promptly and aim to resolve it within the period required by applicable law.