Last updated: 9 August 2026

1. Introduction

LogicLift (“we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, share, and safeguard your personal information when you use our website at www.logiclift.co.uk and the LogicLift application at app.logiclift.co.uk (together, the “Services”).

By using the Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Services.

2. Data we collect

We collect the following categories of information:

Account and identity data: name, email address, password hash, multi-factor authentication (MFA) secrets, and OAuth provider identifiers (if you choose to sign in via Google, Microsoft, or GitHub).
Organisation data: organisation name, billing email, domain, and role assignments for team members.
Usage and technical data: IP address, browser user agent, session identifiers, timestamps, pages visited, and client-side error logs.
Project and migration data: uploaded source files (e.g. SSIS, Talend, SAP, Informatica), generated translation artifacts, pipeline metadata, table mappings, job configurations, and user comments.
Connection and credential data: details of source control, LLM, and Microsoft Fabric connections you configure, including API keys, tokens, and client secrets stored in an encrypted vault.
Communication data: emails, support tickets, and feedback you send us.

3. How we collect data

Directly from you when you register, create projects, or contact us.
Automatically through cookies, session tokens, and server logs.
From third-party OAuth providers when you choose to sign in through them.
From third-party services you connect (e.g. LLM providers, source control, Fabric)

4. How we use your data

We use your data to:

Provide, operate, and maintain the LogicLift platform and migration services.
Authenticate you, secure your account, and enforce access controls.
Run, translate, and test your data pipelines.
Communicate with you about your account, security, and support requests.
Maintain audit logs for security, compliance, and troubleshooting.
Comply with legal obligations and protect our rights.

We do not sell your personal information. We do not use your project data to train general-purpose AI models.

5. Legal basis for processing (GDPR)

Under UK/EU GDPR, we rely on the following legal bases:

Contract: processing necessary to provide the Services you signed up for.
Legitimate interests: security, fraud prevention, analytics, and improving the platform.
Legal obligation: compliance with tax, accounting, or legal requirements.
Consent: for optional cookies and marketing communications, which you can withdraw at any time.

6. Data sharing

We share data only when necessary:

Service providers: hosting provider (VPS), email delivery service, and payment processor (if applicable).
User-configured integrations: data is sent to LLM providers, source control systems, or Microsoft Fabric only when you explicitly configure a connection.
Legal authorities: when required by law or to protect our rights.

7. International transfers

Our primary infrastructure is hosted in the United Kingdom. If you configure integrations with providers outside the UK/EEA, data may be transferred subject to those providers’ terms and any applicable safeguards such as Standard Contractual Clauses or adequacy decisions.

8. Data retention

We keep your personal data for as long as your account is active or as needed to provide the Services. Project data and job history are retained until you delete the project or close your account. Backup copies may be retained for up to 30 days after deletion. Audit logs are retained for security and compliance purposes for up to 1 year.

9. Security

We encrypt credentials at rest using Fernet AES-128, enforce HTTPS/TLS in transit, use password hashing with bcrypt, and maintain access controls and audit logs. Despite these measures, no internet transmission is 100% secure.

10. Your rights

Depending on your location, you may have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Delete your personal data (“right to be forgotten”).
Restrict or object to certain processing.
Receive a copy of your data in a portable format.
Withdraw consent for optional processing.
Lodge a complaint with a supervisory authority.

11. CCPA / CPRA rights for California residents

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the right to:

Know what personal information we collect and how we use it.
Delete personal information we have collected about you.
Opt out of the sale or sharing of personal information.
Correct inaccurate personal information.
Non-discrimination for exercising your privacy rights.

LogicLift does not sell or share personal information for cross-context behavioural advertising. We may share data with service providers solely to operate the Services.

12. Cookies and tracking

We use cookies and similar technologies for authentication, security, and preference storage. Optional analytics or marketing cookies are only set after you provide consent through our cookie banner. You can manage your cookie preferences at any time via the cookie settings link in the footer.

13. Children

The Services are not intended for children under 16. We do not knowingly collect data from children under 16. If you believe we have collected such data, please contact us and we will delete it.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page with a new “Last updated” date. Significant changes will be notified by email or in-app notice.

15. Contact us

For privacy questions, data access requests, deletion requests, or to exercise your rights, please contact us at:

privacy@logiclift.co.uk

You can also submit a deletion or opt-out request through our Privacy Requests page.