Privacy Policy

This Privacy Policy explains how Lift handles personal data for website visitors, prospects, and customers using our review-first invoice automation services. Customer document processing is also governed by the applicable service agreement and Data Processing Agreement where one has been signed.

Information we collect

We collect information you provide when you contact us, request a pilot, request a proposal, or otherwise communicate with Lift. This may include your name, email address, organisation, role, accounting systems, document volumes, and details about the workflow you want to discuss.

When Lift is configured for a customer, the service may process business documents and related metadata, such as supplier invoices, receipts, statements, credit notes, file names, document dates, supplier details, amounts, VAT or tax information, accounting-system identifiers, and routing or review information needed to prepare the agreed output.

Website analytics

We use Simple Analytics to understand aggregate website activity, such as page views, referrers, device types, and whether key calls to action are being used. Our website analytics setup is cookieless and is used to improve the website, content, navigation, and product positioning. We do not use it to build advertising profiles or track people across other websites.

How we use information

We use information to respond to enquiries, provide proposals, operate and improve Lift, configure agreed workflows, process documents for review-ready outputs, provide support, maintain security, and meet legal or contractual obligations.

Lift prepares drafts, structured outputs, and workflow data for customer review or direct submission where that workflow is enabled. Customers remain responsible for their review, approval, posting, filing, and accounting decisions in their own systems.

Sharing and subprocessors

We do not sell personal data. We may share information with trusted service providers that help us operate the website, host the service, process documents, provide communications, support integrations, or secure the platform. Customer-specific subprocessors, document handling, retention, and security commitments can be set out in the applicable Data Processing Agreement.

Security

We take reasonable technical and organisational steps to protect information against unauthorised access, loss, misuse, or disclosure. No system can be guaranteed completely secure, but security and access scope are considered during each implementation, especially where customer systems such as Google Drive, Dropbox, OneDrive, Microsoft 365, SharePoint, Xero, Business Central, or other platforms are connected.

Retention

We keep personal data only for as long as needed for the purposes described in this policy, to provide the service, to comply with legal or contractual obligations, or to resolve disputes. Customer document retention and deletion periods may be agreed separately in the applicable service agreement or Data Processing Agreement.

Your rights

Depending on where you are located, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data. To exercise these rights, contact us at hello@uselift.app.

Contact

If you have questions about this Privacy Policy or Lift's data handling practices, contact us at hello@uselift.app.