Privacy notice

This notice covers Liidis customers, their users and people who request an invitation. The Finnish text is binding; the English text is a translation.

1. Controller

The details of the controller will be published on this page once the company that provides the service has been founded. Until then the service is limited to invited users as a free trial. For data protection matters, contact support@liidis.com. You can also make a request with the privacy request form. When the controller changes or is named, we will announce it.

The notice for people whose business contact details appear in leads is separate: privacy notice for contacts in leads.

2. What data we process

• Invitation request: name, company, email, phone (optional), industry and region as free text, an optional message, and when you accepted the privacy notice and which version.
• Account and joining with an invitation code: company name, business ID (optional), your name, your email (your username), phone (optional), your password (only as a hash), a free-text note, when you accepted the terms and the privacy notice, the invitation code you used, and your language and appearance choices.
• Targeting and sales profile: what you sell and to whom, industries, regions, company size and exclusions (names, business IDs and domains).
• Use of the service: lead statuses, notes and outcomes, calendar events, offers and deals with their amounts, the names and emails of team members, and notification choices.
• Technical data: your session (a hash, its validity and last use), the server request log (time, path without query parameters, status and IP address), and browser error reports (the error message, a rounded window size, and the browser name and major version; no user, company or address).
• Requests and reports: contact, targeting change and test report requests you send in the service as free text and Liidis's reply to them, error reports about leads (the reason, a note and a snapshot of the lead at the time of the report), and the records of how they were handled.
• Privacy requests: if you make a privacy request using the form: your name, reply address, the type and description of the request, and the records of how it was handled.
• Support: when Liidis staff open your company's data in read-only mode, the opening is logged, and you can see it in Settings.

3. Purpose and legal basis

• Performance of a contract: providing the account and the service, and the trial.
• Steps before a contract at your request: handling your invitation request.
• Performance of a contract and legal obligation: handling requests and error reports, and handling privacy requests and being able to show how they were handled.
• Legitimate interest: security, preventing misuse and developing the service (the request log, rate limits and browser errors).

4. Cookies and browser storage

We use strictly necessary cookies only. liidis_session keeps you signed in (up to 30 days for customers, and 14 days of inactivity ends the session). liidis_locale remembers your language choice (1 year). Your browser's local storage remembers your appearance choice (liidis-theme) and is not sent to the server. We use no analytics, advertising or tracking cookies and no third-party scripts. Fonts are served from our own server.

5. Retention

• Sessions: up to 30 days, or 14 days when inactive. An administrator's session lasts 12 hours.
• Read notifications are deleted after 90 days.
• Browser error reports are deleted after 30 days.
• Invitation requests: a request nobody handles is marked rejected 90 days after it arrives. A handled request (invited or rejected) is anonymised 180 days after handling: the name, company, email, phone and message are removed.
• The server request log (including the IP address): we keep it only as long as security and investigating misuse require.
• Requests, error reports and privacy requests with their records: we keep them for the duration of the customer relationship, and the records of a privacy request for as long as needed to show that the request was handled.
• Other data: we keep account and service data for the duration of the customer relationship. After it ends, we delete or anonymise the data at your request without undue delay.

6. Recipients and processors

• Server: a Hetzner data centre. Hetzner provides the server machine, and Liidis manages the application and the database.
• Messages sent to the support address pass through Cloudflare's email forwarding. Cloudflare also hosts the DNS records of the service's domain.
• We do not use a payment provider, an email service, WhatsApp or analytics. We do not disclose your data for sales or marketing. We disclose data to authorities only as required by law.

7. Your rights

You have the right to access your data, rectify it, erase it, restrict processing, transfer the data to another service, object to processing and withdraw any consent you have given. You can correct your own details in Settings. You can send erasure and other requests to support@liidis.com or you can make a privacy request using the form. We reply within one month. You have the right to complain to the Finnish Data Protection Ombudsman.

8. Security

Passwords are stored only as hashes. Administrators must use two-step verification. Connections are encrypted, forms have spam protection, and sign-in and forms have rate limits.

9. Automated decision-making

We do not make automated decisions about individuals that have legal effects.

10. Changes

We update this notice when needed. Updated 3 November 2026.