Who we are
Limly is operated by LIMLY LLC, a limited liability company registered in Delaware, United States, with a registered office at 8 The Green, Suite B, Dover, DE 19901. Our operating team is in Lima, Peru, and our European base is in Lisbon, Portugal.
For any question about this policy, or to exercise any of the rights described below, write to pierrebaldera@limly.io.
The short version
Raw audio from your meetings is captured at the operating-system level of your own computer, transcribed and processed on that machine, and then discarded. It is never uploaded to us and never stored by us.
What does leave your device is structured text: transcripts, extracted commitments and AI output. That text is encrypted in transit and at rest so you can search it, share it and reach it from another device.
No bot joins your call. The people you meet with do not have to install anything, and nothing announces itself in the meeting on your behalf.
Information you give us
When you create an account we collect the information needed to open and secure it:
- Your full name
- Your email address
- Billing details, which are handled by our payment processor — we do not store full card numbers
If you contact us for support or sales, we keep that correspondence so we can answer you and follow up.
Information generated by using Limly
Using the product produces meeting content: transcripts, summaries, action items, and the notes and templates you create. This is your content. We process it to provide the service to you and to the teammates you share a workspace with.
We also collect limited technical data needed to keep the app working: application version, operating system, crash reports and error diagnostics, and aggregate usage counts. We use this to fix defects and understand which features are used, not to build a profile of you.
Integrations you connect
Limly can connect to third-party services such as Slack, Microsoft Teams, Gmail, Zoom, Google Meet, Notion, Linear, Figma, HubSpot, Salesforce and Google Calendar.
We use OAuth 2.0 for these connections. We never ask for and never receive your password for a connected service. You grant a scoped token, we use only the access that token permits, and you can revoke it at any time from Limly or from the service itself.
What a connected service does with data on its own side is governed by that service's own terms, not by this policy.
AI processing and sub-processors
Some features send structured text — never audio — to a third-party model provider so that it can be summarised, searched or turned into a draft. That provider acts as our sub-processor under a written data processing agreement, and has no access to your audio.
Your conversations are not used to train Limly's models or any third-party model.
The current list of sub-processors is available on request at pierrebaldera@limly.io.
Legal bases for processing
Where the GDPR applies, we rely on: performance of a contract, to provide the service you signed up for; legitimate interests, to keep the service secure and to fix defects; consent, where we ask for it explicitly, such as enabling an integration; and legal obligation, where we have to retain records.
Where we rely on consent, you can withdraw it at any time without affecting processing that already took place.
International transfers
We operate from Peru and the United States and serve customers in Europe. Where personal data moves out of the European Economic Area, that transfer is covered by the EU–US Standard Contractual Clauses incorporated into our data processing agreement.
Business customers can request a signed DPA covering Articles 28 and 32, sub-processor disclosure, 72-hour breach notification, data-subject rights, retention and deletion, at pierrebaldera@limly.io.
Security
Data is encrypted with AES-256 at rest and TLS 1.3 in transit. Access to production systems is limited to the people who need it.
Limly is not SOC 2 or ISO/IEC 27001 certified. Those attestations are on our compliance roadmap and we will publish them with a date once they exist. We would rather tell you what we can evidence today than imply a certification we do not hold.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
How long we keep things
Meeting content stays available for as long as your account is active, because that is the point of the product. Account and billing records are kept for as long as we are legally required to keep them.
When you delete content it is removed from your workspace and purged from backups on our normal backup rotation.
If you close your account, we delete your content within 30 days except where the law requires us to keep a record.
Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, restrict or object to how we use it, receive a copy in a portable format, or complain to your local supervisory authority.
To exercise any of these, write to pierrebaldera@limly.io. We answer within the deadline set by the applicable law, and within 30 days where no shorter deadline applies. We do not charge for this and we will not treat you differently for asking.
Cookies
Our website uses cookies and local storage to keep you signed in and to remember your language. We do not sell the data we collect, and we do not use cookies to build advertising profiles.
You can block cookies in your browser. Some parts of the site will stop working correctly if you do.
Children
Limly is a workplace tool and is not directed at children under 16. We do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it.
Changes to this policy
We may update this policy as the product changes. When a change is material we will tell account holders by email before it takes effect, and we will update the date at the top of this page.
Contact
Questions, data requests and complaints: pierrebaldera@limly.io
LIMLY LLC · 8 The Green, Suite B, Dover, DE 19901, United States