Privacy Policy

Last updated: April 2026

What Lorix collects

Lorix collects only the data necessary to provide the service:

  • Your email address and name, via Google OAuth
  • Slack messages from channels you explicitly select and authorize
  • Zoom meeting transcripts from recordings in your connected account
  • Knowledge items extracted from the above — titles, content, and source references
  • Usage data (page views, feature usage) via PostHog analytics

What Lorix does not collect

  • Slack direct messages (DMs) — Lorix never requests access to DMs
  • Channels you have not selected — only explicitly chosen channels are processed
  • Files, attachments, or emoji reactions from Slack
  • Video or audio from Zoom recordings — only transcript text is processed

How your data is used

Your data is used solely to provide the Lorix service to you and your workspace. Specifically:

  • Slack and Zoom data is processed through the Claude API (Anthropic) to extract knowledge items. This processing is ephemeral — raw message text is not stored beyond what is required for extraction.
  • Extracted knowledge items are stored in your workspace's knowledge base in Supabase (a managed PostgreSQL provider).
  • Your data is never used to train AI models.
  • Your data is never sold or shared with third parties for advertising purposes.

Data retention

Knowledge items in your workspace are retained until you delete them or close your account. When you disconnect an integration, Lorix stops processing new data from that source. Previously extracted knowledge items remain in your knowledge base unless you delete them.

If you close your account, all workspace data including knowledge items is deleted within 30 days.

Data storage and security

All data is stored in Supabase (hosted on AWS in the United States). Data in transit is encrypted using TLS. Data at rest is encrypted by Supabase. Row-level security policies ensure workspace data is only accessible to members of that workspace.

Third-party services

Lorix uses the following third-party services to operate:

  • Supabase — database and authentication
  • Anthropic Claude API — AI extraction and Q&A
  • Vercel — hosting and deployment
  • Resend — transactional email
  • Stripe — billing and payments
  • Inngest — background job processing
  • PostHog — product analytics
  • Sentry — error monitoring
  • AssemblyAI — audio transcription (Zoom fallback only)

Your rights

You may request access to, correction of, or deletion of your personal data at any time by emailing hello@lorix.io. We will respond within 30 days.

Contact

Questions about this policy? Email us at hello@lorix.io.