Data, privacy and GDPR
Who this is for: admins, data protection officers and security reviewers.
Before you start: nothing.
Liitora is built in and for the EU. This page explains what data Liitora holds, where, for how long, and what you can do about it.
Where your data is
Section titled “Where your data is”All Liitora data is hosted in Finland, at UpCloud’s data centres in Helsinki. Our infrastructure only allows Finnish zones. We don’t move your data out of the EU. The list of companies that handle data for us (subprocessors) will be published before launch.
Who is responsible
Section titled “Who is responsible”- For the data your workflows process (for example customer or employee records that pass through a step), your company is the controller and we are the processor. We process it only to run your workflows.
- For the account data we need to run the service (who signs in), the privacy policy will be published before launch. For visits to this website, see the website privacy notice.
What we store
Section titled “What we store”| Data | What it is | How long we keep it |
|---|---|---|
| People | For each person: the sign-in id, email address and display name. Nothing else. | While they have access to your company. When someone is removed and belongs to no other company on Liitora, these are deleted at once. Work they did, such as a workflow version they wrote, then shows “Removed person” |
| Workflows | Every version of each workflow, its tests and approvals | While the workflow exists |
| Runs | Status, times, the input that started the run, step inputs and outputs (with secrets removed), error messages and the result | The input, step data, error messages and result follow your plan’s log retention, counted from when the run finished. The status, times and error codes stay in the run history |
| Run logs | Log lines and the HTTP log of each run, with secrets and credential headers masked | Your plan’s log retention, for example 30 or 90 days |
| Files (artifacts) | Files your steps make, such as CSV reports | 30 days by default |
| Webhook deliveries | The body and non-sensitive headers of each delivery. Signatures, credentials and the sender’s address are never stored | Your plan’s retention, 14 days by default |
| Secrets | The values, in a separate secret store; only names and statuses in our database | Until you delete them |
| Audit log | Who changed what and when | Kept while your company uses Liitora, and it can’t be edited. Erased when the company is deleted |
| Problem reports | The message you send us, with passwords and keys removed, and the page, workflow or run it is about. We also get a copy by email | Kept for now; the period will be set in the reviewed privacy policy |
| Emails we send | The recipients, subject and text of each email Liitora sends, until it is delivered | 90 days after it is sent |
| Usage | How many runs, compute units and emails you used per day | Kept for billing. Erased when the company is deleted |
Retention per plan is in Limits per plan. Liitora deletes expired data automatically every hour. When an admin deletes the company, everything above is erased 7 days later. See Delete your company.
How we protect it
Section titled “How we protect it”- Secret values are removed from every log, output and error, also in encoded forms.
- Each company’s data is kept apart twice: in the application and in the database.
- Our staff don’t look into your company without a reason. When they must, it is time-limited and written to your audit log. See What “managed by us” means.
More in How Liitora keeps you safe.
AI assistants are not our subprocessors
Section titled “AI assistants are not our subprocessors”Liitora has no AI of its own. You connect your own assistant, such as Claude or Copilot. What your assistant sees (workflow YAML, run results, logs with secrets removed) goes to your AI provider under your agreement with them. Secret values never do.
The same goes for an AI model your workflows call. A workflow step sends data to your own AI provider only because your company added that step and a person approved it. That provider is your processor. See AI in workflows.
Your rights
Section titled “Your rights”You and the people in your company have the rights the GDPR gives: to access, correct, export and delete personal data, and to object.
- Most workflow data you can read and download yourself in the app, for example runs and their files.
- To export or delete your company’s data, or one person’s data, see Export or delete your data.
- For any other request, use Report a problem in the user menu (top right) in the app.