DRAFT — NOT YET LEGALLY APPROVED. This document is a working draft prepared for system implementation and has not been reviewed or approved by an attorney. It does not bind LiveConneqt or you until an approved version is published.

LiveConneqt Privacy Policy

This Privacy Policy describes what information LiveConneqt, The Operational Truth Platform (the "Service"), collects, how it is used, and the choices available to you. It applies to the LiveConneqt web application and account surfaces.

1. What We Collect

• Account information — your email address, the name you provide, and your password stored only as a one-way cryptographic hash. Account lifecycle events (creation, verification, sign-in related events) are recorded for security and support.
• Organization data — your organization's name, membership, and roles.
• Preserved evidence — the documents, records, and artifacts your organization deliberately uploads into its Matters, together with the provenance metadata and integrity digests the Service records about them. This content is under your organization's control; we hold it to preserve it for you.
• Commercial and billing state — your organization's plan, subscription state, and billing history events. Payment card data goes directly to Stripe, our payment processor, and is never stored by LiveConneqt.
• Operational records — service logs and technical records needed to run the Service securely, such as request metadata and error diagnostics.

2. How We Use Information

• Operating the Service — preserving your evidence, answering Ask questions from it, building Binders, enforcing tenant isolation, and keeping honest operational history.
• Transactional email — verification links, password resets, invitations, and account or billing notices. We do not send marketing email to evidence contacts, and account email is not added to marketing lists without separate consent.
• Billing — creating and maintaining your subscription through our payment processor and keeping the commercial history your organization can inspect.

3. Service Providers

We use a small number of processors, each only for its named purpose:

• Stripe — payment processing. Stripe holds payment credentials and card data; LiveConneqt receives only subscription and payment state, never card numbers.
• Postmark — transactional email delivery (verification, reset, invitation, and account notices).
• Cloud hosting — the infrastructure provider that hosts the Service and its encrypted storage.

[TO BE COMPLETED BY COUNSEL] The approved version of this policy will name the hosting provider and any additional subprocessors, with a maintained subprocessor list.

4. What We Never Do

• We do not sell your data — not account data, not organization data, not evidence.
• We do not use your preserved evidence for marketing, advertising, or profiling.
• We do not read your evidence except as needed to operate the Service at your direction (for example, indexing it so Ask can answer from it), to comply with law, or with your explicit permission for support.

5. Retention and Deletion

Preserved evidence exists to be durable: it is retained until your organization requests deletion. The current product has no self-service deletion of preserved evidence — this is deliberate, so evidence cannot be silently destroyed — and deletion requests are made through support by an authorized owner of the organization. Account and operational records are retained as long as needed for security, legal, and audit purposes.

Evidence is never deleted for billing reasons. Cancellation or suspension of a subscription limits activity, not the preservation of what is already recorded.

6. Security

• Data is encrypted in transit.
• Each organization is a strictly isolated tenant boundary; evidence, Matters, and billing state never cross it.
• Evidence records are append-only: preserved evidence and its history cannot be silently altered, by us or by you.
• Passwords are stored only as salted one-way hashes using framework-standard algorithms; one-time links (verification, reset, invitations) are stored only as digests and expire.

No system is perfectly secure; we will notify affected customers of a security incident involving their data as required by law.

7. Your Rights and Contact

Depending on your jurisdiction, you may have rights to access, correct, export, or delete personal information we hold about you. Requests can be made by contacting support@liveconneqt.com from your account email address; we will verify the request before acting on it.

[TO BE COMPLETED BY COUNSEL] Regional disclosures (including legal bases for processing, international transfer mechanisms, and supervisory-authority contact rights) will be specified in the approved version of this policy.

8. Changes to This Policy

We may publish revised versions of this policy. Each version is identified by a version identifier and content digest, material changes will be notified to account holders, and the version you accepted is recorded in your account history.

9. Contact

Privacy questions and requests: support@liveconneqt.com.