This policy explains how Lodol (“we”) handles personal information in Lodol Gov and on gov.lodol.com. Lodol Gov is used by government agencies under an agreement with us. When we handle information your agency puts into Lodol Gov, we do so on your agency’s behalf and under its instructions, as our Terms of Service describe.
1. What we collect
From you and your agency
- Account details: your name, work email address, and the agency and role your administrators give you.
- What your agency puts into Lodol Gov: workflows, the records and files they handle, run history, approvals, audit logs and the legal holds it places.
- Messages you send us, such as support requests.
Automatically
- How the service is used: sign-ins, pages viewed and features used.
- Device and log data: IP address, browser and operating system, kept for security and to keep the service running.
- Cookies and browser storage that the service needs to work: to keep you signed in, protect your account and remember your settings. We don’t use cookies for analytics or advertising, and this website sets none.
From the systems your agency connects
When your agency connects a system such as Microsoft 365, we receive what that system shares with Lodol Gov to run your workflows.
2. How we use it
- To provide Lodol Gov, keep it secure and support your agency.
- To tell you about your account and the service, such as sign-in codes, invitations and alerts about your workflows.
- To meet our legal obligations.
We don’t sell personal information, we don’t use it for advertising, and we don’t use your agency’s information to train AI models.
3. Who we share it with
- The companies that help us run Lodol Gov, listed on our subprocessors page. Each is bound to protect the information.
- The systems and AI providers your agency connects, when its workflows send information to them. Your agency chose those and its own agreements with them apply.
- Authorities, when the law requires it. If someone asks us for your agency’s information, we refer them to your agency and tell it, unless the law forbids that.
4. Your agency’s records
Information your agency keeps in Lodol Gov is your agency’s record and may be subject to public records laws. Requests to see, correct or delete it are handled by your agency. We help your agency answer them. Your agency can also place a legal hold, which keeps what a lawsuit, audit or records request needs from being deleted until your agency lifts it.
5. How long we keep it
We keep your agency’s information while its agreement with us lasts, as your agency’s settings say:
- Run history, and the files runs made, for as long as your agency chooses within its agreement. Each deletion is recorded in the audit log.
- A deleted workflow’s saved versions, for as long as its runs are kept, so each run can still be explained. Then they are deleted for good.
- Audit log entries, including those that name you, for at least two years, and for as long as your agency keeps its run history when that is longer. They are your agency’s record of who did what, so they stay if you delete your account.
- Anything on legal hold, until your agency lifts the hold, whatever the settings above say.
When your agency’s agreement ends, it has 90 days to export its information, and we then delete it within 30 days unless the law requires us to keep it or your agency still has a legal hold in place. The audit log entries of a deleted workspace are kept until they are two years old. If your agency runs Lodol Gov on its own servers, its information stays there, under its own retention rules.
6. How we protect it
We encrypt information in transit and at rest, limit access to the staff who need it, and review our safeguards regularly. If information about you is accessed without authorization, we will tell your agency promptly so it can inform you as the law requires. Our security page has more detail.
7. Where it is kept
Lodol Gov stores your agency’s information in the United States. The exceptions are listed on our subprocessors page.
8. Changes to this policy
We’ll update the date at the top when this policy changes, and tell agencies about material changes before they take effect.
9. Contact us
Questions about this policy or your information: privacy@lodol.com.