Privacy Policy

Account data — name, email address, and profile picture. Collected either through Google OAuth when you sign in with Google, or from the details you provide when you register with an email address and password. Passwords are stored only as a cryptographic hash; we never hold your password in a readable form and cannot recover it for you.

Connected tool credentials — OAuth tokens for tools you connect (Gmail, Stripe, and others) stored encrypted at rest using AES-256-GCM. We access your tools only to carry out the operations you configure.

Run and trace data — logs of agent runs, objective outputs, and tool calls executed on your behalf, retained to power your run history and memory.

Billing data — LiminaHub does not currently sell paid plans and collects no payment data. When paid plans launch, card details will be handled by a PCI-DSS compliant payment processor, which we will name in this policy before any paid plan goes on sale. LiminaHub will not store card numbers or raw payment data.

Usage analytics — with your consent, we use Google Analytics on our marketing website to understand which pages people find useful. Nothing is collected until you accept, and you can decline. We do not run third-party analytics inside the product itself.

To authenticate you and operate the LiminaHub service.

To execute agent runs and workflows on the tools you have connected.

To send transactional emails — email verification, password resets, workspace invitations, and referral notices — and, where you opt in, product updates.

To detect fraud, enforce our Terms of Service, and meet legal obligations.

LLM provider data handling (our inference sub-processors, the current list available on request) is governed by their respective privacy policies. We route only the context needed for each task.

We do not sell your data to third parties.

We share data with infrastructure partners under agreements that restrict their use to delivering the service: cloud hosting, LLM inference providers, our transactional email provider, which receives the email address a verification link, password reset, or invitation is sent to, and our website analytics provider, which receives data only from readers who have accepted analytics cookies. The current list is available on request.

We may disclose data when required by law or to protect the rights of LiminaHub and its users.

When you connect a Google service — Gmail, Google Drive, Google Calendar, Google Docs, Google Sheets, or Google Tasks — LiminaHub requests read-only access and uses it solely to power the observability features you configure: reading your data to monitor for what matters, summarise it, and answer your questions. We never send, modify, share, or delete your Google data.

Access & storage — Google OAuth tokens are stored encrypted at rest (AES-256-GCM). Google content is processed transiently to generate the insight shown to you and is retained only as needed to power your run history and memory, per the retention periods below.

Sub-processors — to generate summaries and answers we transmit the minimum necessary content to our LLM inference sub-processors (the current list available on request) under agreements that restrict their use to delivering the feature. We do not use Google user data for advertising, we do not sell it, and we do not use it to train generalised AI/ML models.

Limited Use— LiminaHub's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• Account and workspace data: 90 days after account deletion.
• Financial records: minimum 7 years as required by applicable law.

Access & portability — request a copy of your data at privacy@liminahub.ai.

Update — edit your profile in Settings at any time.

Delete — permanently delete your account and all associated data from Settings.

GDPR and CCPA rights are available to residents of applicable jurisdictions. Contact privacy@liminahub.ai to exercise them.

All data is encrypted in transit using TLS 1.2+ and at rest using AES-256.

Access to production systems is strictly limited and audited.

In the event of a data breach, we will notify affected users within 72 hours as required by applicable law.

We use essential session cookies required to sign you in and keep you signed in. These are necessary for the service to work and cannot be switched off. On our marketing website we also use Google Analytics cookies, but only if you accept them: our cookie banner defaults to declined, no analytics storage is enabled before you choose, and a decline is remembered rather than asked again on the next page. We set no advertising cookies.

We will notify you of material changes at least 14 days in advance via email or in-app notice. Continued use after the effective date constitutes acceptance.

If you have a complaint about how we handle your personal data, you can raise it with our Grievance Officer, who is responsible for answering it.

Grievance Officer — Sachin, grievance@liminahub.ai

Please include the email address on your account and what you would like us to do. We acknowledge complaints within 3 business days and aim to resolve them within 30 days, and we will tell you the outcome and the reason for it either way.

Raising a complaint with us does not remove any right you have to approach a data protection authority in your jurisdiction.

Privacy questions: privacy@liminahub.ai

General: hello@liminahub.ai

LiminaHub Pvt Ltd
Registered office: E603, Capriccio, Sr No 183, Datta Mandir Road, Wakad, Pune, Maharashtra 411057, India