You retain 100% ownership of your client CRM records, timesheet logs, and invoices. We never sell, rent, or broker your business operations data.

Your discovery notes, client briefs, and code repositories are never used to train public AI foundation models. All inference is zero-retention.

Account name, professional email address, client profile records, project milestone deliverables, and status tags.

Logged session durations, hourly rates, custom invoice items, and GST numbers. We never log keystrokes or background activity.

All payment transactions are encrypted and processed by Tier-1 PCI-DSS certified gateways (Stripe & banking switches). We do not store raw card numbers.

Tokens for GitHub, Figma, Slack, and Google Calendar are stored with AES-256 encryption. Token authorizations can be revoked in one click.

Export your entire workspace — clients, timesheets, proposals, and invoices — in standard JSON or CSV format anytime.

Request full account deletion. All active database entries and cached proposals are permanently purged within 30 days.

Contact our DPO at privacy@lancora.com for formal data subject access requests, DPIAs, or privacy inquiries.

Speak to our security team about SOC-2 reports, enterprise DPA agreements, or to report a vulnerability.