Lira (“Lira”, “we”, “our”, or “us”) provides an independent payroll verification and control platform.
This Privacy Policy explains how we collect, use, store, and protect information when you visit our website or use our application.
1. Information We Collect
We may collect the following types of information:
Account Information
When users sign in or are invited to Lira, we may collect basic account details such as name, email address, authentication provider, company, role, and login activity.
Company and Payroll Data
Lira may process employee, compensation, payroll structure, salary component, payroll result, costing and reconciliation, anomaly finding, and scenario and simulation data provided by customers or authorized users.
Usage and Technical Data
We may collect technical data such as browser type, device information, IP address, session activity, error logs, security logs, and product usage events.
2. How We Use Information
We use information to:
- Provide and operate the Lira platform
- Authenticate users and manage access
- Verify payroll results, including expected-payroll calculations, costing reconciliation, and anomaly findings
- Simulate the payroll impact of rule changes
- Maintain security, audit logs, and tenant separation
- Improve reliability, performance, and user experience
- Provide support and communicate with customers
- Comply with legal and security obligations
3. Data Access and Permissions
Access to company data is limited to authorized users within the relevant organization. Lira uses role-based access controls and tenant separation to help ensure users only access data they are permitted to view.
We do not sell customer data.
4. Third-Party Services
Lira may use trusted third-party providers for hosting, authentication, database services, infrastructure, analytics, and security. These providers may process data only as needed to provide their services to Lira.
Examples may include cloud hosting providers, authentication providers, and database infrastructure providers.
5. Authentication
Users may sign in using email/password or supported third-party login providers such as Google or Microsoft. When using these providers, they may share basic profile information with Lira, such as name and email address, according to their own privacy policies.
6. Data Security
We take reasonable technical and organizational measures to protect data, including authentication, authorization, access controls, audit logging, encryption in transit, and infrastructure-level security protections.
However, no system can be guaranteed to be completely secure.
7. Data Retention
We retain information for as long as needed to provide the service, comply with legal obligations, resolve disputes, maintain security, and support customer operations.
Customers may request deletion or export of their data subject to contractual, legal, and technical limitations.
8. Customer Responsibility
Customers are responsible for ensuring that they have the legal right to upload, process, and analyze employee and payroll-related data within Lira.
Customers are also responsible for managing which users are invited to their organization and what permissions they receive.
9. International Data Processing
Data may be processed and stored using cloud infrastructure providers located in different jurisdictions. We take reasonable steps to ensure appropriate protections are applied where required.
10. Website Analytics
We use Vercel Web Analytics on our public website to measure visits, understand which pages are useful, and improve the website. This disclosure concerns website analytics, not the payroll data customers provide through the Lira platform.
Vercel receives page-view data that may include the visited URL, referring website, filtered query parameters, visit time, approximate location, browser, operating system, and device type. We receive aggregated traffic reports. Vercel uses a request-derived hash to distinguish visitors, does not use third-party cookies for this service, and discards the visitor session after 24 hours. This session period is not the retention period for aggregated reports.
We do not send contact-form contents or customer payroll data to Vercel Web Analytics as custom events. Browser privacy tools or content blockers may prevent analytics requests.
11. Your Privacy Rights
Depending on the law applicable to you, you may have rights to request access to, correction or deletion of your personal information, receive a copy of it, or object to or restrict certain processing. Where processing relies on consent, you may withdraw that consent without affecting earlier lawful processing. You may also have the right to complain to the relevant data protection authority.
Contact us using the details below to make a request. We may need to verify your identity. Where we process employee data on behalf of a customer, we may refer your request to that customer or assist them in responding, subject to applicable law.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above. Where required by law, we will provide additional notice of material changes.
13. Contact
For privacy-related questions or requests, contact us at: