Privacy
Privacy policy.
v0.1 (draft) · last updated 2026-05-24
Pending legal review.
This page reflects our intended policy and serves as a placeholder so links don't 404. The final, legally-binding version lands before public launch after Legal's formal review. For customer-facing contracts in the interim, contact [email protected].
Who we are
HexxLock Inc., the company behind Ligarbo, is the data controller for information you share when you create a Ligarbo account, visit our website, or contact us. For contacts you upload into Ligarbo to email or message, HexxLock Inc. is the processor and you (Customer) are the controller.
What we collect
Account data: name, work email, password hash, organisation, and billing details. Usage data: pages viewed, features used, error logs. Customer data: contacts and campaigns you create inside Ligarbo — owned by you and processed on your behalf.
Legal basis (GDPR Art. 6)
We rely on contract (Art. 6.1.b) for the account-creation and service delivery use, legitimate interest (Art. 6.1.f) for product analytics, and consent (Art. 6.1.a) for any marketing or cross-product personalisation.
Retention
Account data is retained for the duration of the subscription plus 30 days after cancellation. Audit logs are retained for 7 years per the platform's tier-1 security baseline. Customer-uploaded contact lists are deleted on request or subscription termination (whichever first).
Sharing
We share data only with the sub-processors listed on /security, each bound by a Data Processing Agreement. No third-party advertising networks receive your or your contacts' personal data.
Your rights
You may request access, correction, erasure, restriction, portability, or objection at any time. Email [email protected] and we will respond within 30 days.
Updates
Material changes are notified 30 days in advance via email and a banner inside the Ligarbo app.