Privacy Policy

1. What we collect

Account information you provide to sign in (e.g. email), and usage/audit records (logins, reports generated, administrative actions) used to secure and operate the Platform. Authentication is handled by our identity provider (Supabase); we do not store your password.

If you buy a subscription, the organization name and email you enter at checkout, and from our payment provider the identifiers and status of your subscription (plan, billing period, trial and renewal dates, and whether it is active, past due, or canceled). Card details and billing address are collected by Stripe/Link, not by us.

Questions and prompts you enter when generating reports, and the reports produced.

2. What we do not collect

LIMSS analyzes public-domain reporting — including news media, government and intergovernmental data, humanitarian reporting, and, for a limited set of monitored regions, publicly viewable posts from third-party online platforms (e.g. Reddit) — at an aggregate, region level. It does not collect or profile personal data about the individuals referenced in monitored events, and for third-party platform content it does not retain the poster’s username, account identifier, or other individually-identifying information — only the publicly posted text and its region-level topic are analyzed.

[FLAG FOR COUNSEL] Ingesting third-party platform content (e.g. Reddit) sits under that platform’s own developer/API terms, which have their own commercial-use and attribution conditions distinct from this Privacy Policy. Confirm that ingestion complies with the specific platform’s current terms before enabling it for any region.

3. How we use information

To provide and secure the Platform, authenticate users, enforce access and usage limits, maintain an audit trail, communicate with you about your account (including by email), and improve the service.

4. Payment information

Self-serve subscriptions are sold through Stripe’s Managed Payments service, with Link (a Stripe company) as merchant of record. Your payment details, billing name and address, and any tax information are collected on Stripe-hosted checkout and billing pages and processed by Stripe/Link under their own privacy policies — we never receive or store your full card number. Stripe/Link also send your receipts, invoices, and certain subscription emails (such as a trial confirmation) directly, and may offer you a Link account to manage your purchase. We retain limited billing metadata (such as your plan, subscription status, and renewal dates) to operate your account.

[FLAG FOR COUNSEL] Under Managed Payments, Stripe/Link acts as merchant of record — confirm whether it is an independent controller for payment data (so its privacy policy governs) or a processor under a DPA, and add cookie disclosures for the Stripe-hosted checkout and billing pages.

5. Sharing

We do not sell personal information. Information may be processed by service providers acting on our behalf under appropriate obligations — currently our hosting provider, our authentication vendor (Supabase), our email delivery provider, a bot-protection (CAPTCHA) provider on our sign-in pages, and the AI model provider that generates report text from the questions you enter. For paid accounts, payment information is handled by Stripe/Link as merchant of record, as described above.

6. Retention & security

We retain account, billing, and audit data for as long as needed to operate the Platform and meet legal and tax obligations, and apply reasonable technical and organizational safeguards. Deleting your LIMSS account does not delete the transaction records Stripe/Link keep as merchant of record, which are governed by their policies.

7. Your choices

You can delete your own account at any time from your Account page; if you are the only administrator of an organization with an active subscription, cancel the subscription first. You may also request access to, correction of, or deletion of your account information, subject to our legal and operational obligations (including retaining billing records as required by law), by contacting [email protected].

8. Changes & contact

We may update this policy from time to time. Questions may be directed to [email protected].