Effective Date: June 16, 2025 · Jacob Pattat d/b/a Groundwork Automation
1. What We Collect
• Account information: Email address, password (hashed), plan selection.
• Company & profile data: Company name, contact name, phone, tagline — entered by you in Settings.
• Client contact data: Names, emails, phone numbers, addresses you store in your Contacts.
• Document usage data: Document count, billing period start date — used to enforce plan limits.
• Custom template data: Template names, settings, and configurations you create.
• Usage logs: Basic request logs maintained by our infrastructure providers for security and debugging.
• Voice data (Pro users): When you use the Voice assistant, audio you speak is transcribed to text — in the web app by your browser's built-in speech recognition, and in the mobile app by your device's built-in speech recognition. On some platforms (for example, Chrome or your mobile operating system) that audio may be processed on the browser or operating-system vendor's servers to perform the transcription. The resulting text is then sent to our AI provider to operate the assistant. We do not store raw audio recordings — only the resulting text is processed to operate the feature.
2. How We Use Your Data
• To provide and operate the Service (generate documents, store contacts, apply settings).
• To enforce plan usage limits and process billing.
• To send transactional emails (account confirmation, password reset).
• To improve the Service and diagnose technical issues.
We do not sell your data. We do not use your data to train AI models.
3. Who We Share Data With
To operate the Service, we rely on third-party providers that perform functions on our behalf — including hosting, AI processing, voice/text-to-speech, payments, and email delivery. We reserve the right to add, remove, or change these providers over time to keep the Service running, available, and secure — including substituting one AI provider for another (for example, to maintain availability during an outage). We require these providers to use your data only as needed to provide their service to us, and we do not sell your data.
The third-party providers we rely on as of June 16, 2025 include:
• Supabase — database, authentication, and storage of your stored data. See supabase.com/privacy.
• Anthropic (Claude API) — text you enter into the Generate form, and your messages to the Voice assistant, are sent to produce document content and assistant responses. See anthropic.com/legal/privacy.
• OpenAI (API) — used to convert the Voice assistant's short spoken replies into audio (text-to-speech). See openai.com/policies/privacy-policy.
• Stripe — payment processing. We do not store your full card number. See stripe.com/privacy.
• Resend — delivery of emails you send or draft through the Service (Pro). See resend.com/legal/privacy-policy.
• Google Drive (Pro users only) — if you connect Google Drive, Lio requests only the drive.file scope and uses it solely to save the documents you generate into the folder you choose. It cannot see or access other files in your Drive. Lio's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. See policies.google.com/privacy.
We do not share your data with third parties for their own independent purposes, such as advertising.
4. Data Retention
Your data is retained for as long as your account is active. Following account cancellation or termination, we retain your data for up to 90 days before permanent deletion. Export your data before closing your account.
5. Cookies & Local Storage
We use browser localStorage to cache your settings and templates for fast load times. We do not use third-party tracking cookies or advertising pixels.
6. Your Rights
You may request access to, correction of, or deletion of your personal data at any time by contacting us. For EU/EEA users (GDPR) and California users (CCPA), you have the right to know what data we hold, request deletion, and opt out of any sale of personal data (we do not sell data). To exercise these rights, email us.
7. Security
We take reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS), hashed passwords, and access controls. No system is 100% secure; we will notify you of any confirmed breach affecting your data as required by law.
8. Children
The Service is not intended for users under 18. We do not knowingly collect data from minors.
9. Changes to This Policy
We may update this Privacy Policy. We will notify you via email or in-app notification of material changes. Continued use after changes constitutes acceptance.
10. Contact
Questions about this policy: Jacob Pattat d/b/a Groundwork Automation · avery@getlio.co
Last updated: June 16, 2025