Privacy notice

Ergira is provided by Infinity Curve LLC, registered in Georgia, which is responsible for the platform and for the personal data described in this notice. Paid subscriptions are sold and billed by our affiliate Likotech Software, a corporation registered in Wyoming, United States, which is the merchant of record for those charges. For questions about personal data, write to [email protected].

Data about you as our customer — your name, your work email, your organisation, your billing records. We are the controller of that: we decide what happens to it, and this notice tells you what.

Data you put into the product — your employees, their leave, their documents, your clients, your contacts. We are the processor of that. You decide what happens to it; we hold it and act on your instructions. The distinction matters because a request from one of your employees about their own record is one you answer, using the export and erasure tools in the product, and we help you rather than acting on our own.

• Account: name, email address, the organisation you belong to, and your password stored as a one-way hash. If you sign in with Microsoft or Google we receive your name and email from them and no password at all.
• Billing: which plan you are on, the status of your subscription, and the country you are billed in. We never see your card. Card details are held by our payment processor; your billing address, and any registration number you choose to put on your invoice, are held by Likotech Software and the processor rather than by us.
• Operational: log records of requests to the service, kept for security and for finding faults, and an audit trail of who changed what inside your own organisation.

• Run the service you asked for — the contract between us is the lawful basis.
• Send you messages about things that happened: an approval waiting, a document expiring, a password reset. These are part of the service and are not marketing.
• Keep the service secure and working, and meet our own legal and accounting obligations.

We do not sell personal data, and we do not use anything you put into the product to train models. We do not send you marketing you did not ask for.

Ergira runs on infrastructure we operate in Georgia. That is a single region, and we do not currently offer per-tenant data residency elsewhere. Billing for paid subscriptions is handled from the United States by Likotech Software, so the contact and billing details for a subscription are processed there. Where data reaches a processor in another country, it is under terms that require an equivalent level of protection.

• Likotech Software — our affiliate, which sells and bills subscriptions. It receives the contact and billing details needed to charge for and invoice your subscription.
• Stripe, Inc. — our payment processor. The checkout runs on their site, so your card details go to them and never to us. See their privacy notice.
• Our email provider — to deliver notifications and the messages you send from the product.
• Services you connect yourself — a mailbox, a signing provider, a bank, a telephony account, your accountant’s books. These are connections you choose to make, with your own credentials, and you can disconnect any of them at any time. The product tells you what each one will be used for before you grant it.

There is no advertising network, no analytics broker and no third-party tracker on this site or in the product.

We set a cookie to keep you signed in and one to remember which organisation you are looking at. Both are necessary for the product to work, and there are no advertising or tracking cookies, so there is nothing here to consent to and no banner asking you.

Account data for as long as your account exists, and for 30 days after you ask us to close it. Billing records for as long as tax law requires us to keep them, which is longer.

Data you put into the product is kept until you delete it. Note that some of it — employment records in particular — is data you may be legally required to retain after somebody leaves, which is why the product pseudonymises rather than deletes on an erasure request and keeps the records that still have to add up.

You can ask us for a copy of the data we hold about you, to correct it, to delete it, or to object to what we do with it. Write to [email protected] and we will answer within 30 days.

You do not need to ask us for an export. Anybody can export their own record from inside the product at any time, without an administrator’s permission and without asking us.

If you are one of our customers’ employees and want your record corrected or erased, ask your employer — they hold it and they have the tools. We will help them, and we will tell you to ask them rather than doing it behind their back.

If you think we have handled your data badly, tell us first; you also have the right to complain to your local data protection authority.

Traffic is encrypted in transit. Credentials for the services you connect — mailboxes, banks, signing, telephony — are encrypted at rest, and are decrypted only at the moment they are used. Documents are held in private storage and are never served from a public address; every download is authorised first and then given a link that expires in minutes.

If we change this notice materially we will tell you by email before it takes effect. The date at the top is when the current version began to apply. The rest of the agreement is in our terms of service.