Privacy Policy
Last updated: 4 October 2026
This Privacy Policy explains how Ledvaro collects, uses and protects personal data when you use our platform. We are committed to handling data responsibly and in compliance with applicable privacy laws, including the GDPR.
1. Scope
This policy applies to users of Ledvaro, including organization owners, administrators, employees and invited users. It covers personal data processed when you register, sign in, use the platform or contact us.
2. Data controller
Ledvaro acts as the data controller for account and platform data. For employee and customer data entered by your organization, your organization is typically the controller and Ledvaro acts as a processor on your instructions.
3. Data we collect
We may collect account information (name, email, organization), authentication data, usage logs, device and browser information, and content you upload such as employee records, certificates, schedules and customer details. If you use the AI advisor, this includes the conversations you have with it.
4. How we use data
We use personal data to provide and secure the service, authenticate users, manage organizations, communicate with you, improve the product, comply with legal obligations and prevent abuse.
5. Legal basis
We process data based on contract performance, legitimate interests in operating a secure SaaS platform, compliance with legal obligations and, where required, your consent.
6. Sharing and subprocessors
We do not sell personal data. We may share data with infrastructure providers such as hosting, email and authentication services when necessary to operate Ledvaro. These providers are bound by appropriate data protection agreements. If you use the optional AI advisor, Google (the Gemini API) processes your messages as our subprocessor; see the section on the AI advisor.
7. AI advisor
Ledvaro's AI advisor is an optional feature. When you use it, the messages you write, any pictures or files you attach and the information the advisor looks up in your organization's data to answer you are sent to Google (the Gemini API), which generates the reply on our behalf under Google's data processing terms for the paid API. Google does not use this content to train its models. Conversations are saved so you can return to them: each person can keep up to 10 conversations, they are not shown to other users of your organization, and a conversation is deleted automatically after 60 days without activity. You can delete one conversation, or all of yours, at any time in the advisor. Attached files and pictures are deleted together with the conversation. Changes the advisor proposes are only saved after you approve them. Do not enter personal identity numbers, health information or other special categories of personal data in the advisor. Google may process data outside the EU/EEA; such transfers rely on Google's data processing terms and the EU standard contractual clauses. Where your organization is the data controller, your organization decides whether to use the advisor. The same applies when you let the AI read a travel ticket: the file, with the names and booking details printed on it, is sent to Google (the Gemini API) to be read; we keep only the booking you save and the file you attach to it.
8. Retention
We retain personal data for as long as your account is active or as needed to provide the service, resolve disputes, enforce agreements and meet legal requirements. You may request deletion subject to applicable law and contractual obligations. AI advisor conversations are an exception: they are deleted automatically after 60 days without activity, and you can delete them yourself at any time.
9. Security
We apply organizational and technical measures to protect data, including access controls, tenant isolation, encryption in transit and monitoring. No online service can guarantee absolute security.
10. Your rights
Depending on applicable law, you may have the right to access, rectify, erase, restrict or object to processing of your personal data, and to data portability. Contact info@ledvaro.com to exercise your rights.
11. Cookies and local storage
Ledvaro uses essential cookies and local storage to maintain sessions, remember preferences and keep the application secure. We do not use non-essential tracking cookies without consent where required by law.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version in the application and update the date at the top of this page.
13. Contact
For privacy questions or requests, contact info@ledvaro.com. If you are an employee whose data is managed by a customer organization, you may also contact that organization directly.