Privacy & Data Protection

Loro—Transform is a client-onboarding platform. This page explains what personal data we process, where it is stored, how long we keep it, and the rights you have over it.

For your account data (your name, email and organization), Loro—Transform is the data controller. For the form responses your clients submit, your organization is the controller and Loro—Transform acts as a processor on your behalf.

• Account: name, email, organization name, language, role.
• Billing: subscription status and customer ID (card data is handled by Stripe, never by us).
• Projects & templates you create.
• Form responses submitted by your recipients, and their name/email if you add them.
• Operational logs needed to run and secure the service.

Application data is stored in the European Union (Neon Postgres, Frankfurt region). We use the following sub-processors:

• Neon — database hosting (EU).
• Auth0 — authentication.
• Stripe — payments & subscriptions.
• Resend — transactional email.

We keep account and project data for as long as your organization is active. When you delete a project, or delete your organization, the associated data (including form responses and client contacts) is removed. Backups are rotated on a rolling basis.

You can access, export and delete data at any time:

• Export a project's full data as JSON from the project page.
• Delete a project to remove its responses and contacts.
• Delete your organization (Settings → Danger zone) to erase all of its data.

You also have the right to rectification and to lodge a complaint with a supervisory authority.

We use a strictly necessary session cookie to keep you signed in. We do not use advertising or tracking cookies.

Questions about your data? Email hendrik.abicht@hendrikabicht.com.