Privacy Policy

Effective May 29, 2026

This Privacy Policy explains how Livy collects, uses, discloses, and retains personal information when you visit Livy's websites, create a Livy account, use Livy's public-facing features, or use Livy through a participating public agency.

This policy does not replace an agency's own privacy, public-records, public-meeting, or records-retention notices. When an agency uses Livy, the agency may control what information is collected in agency forms, what is published, and how certain records are retained or disclosed.

Information we collect

We may collect:

• Account information, such as name, email address, phone number, username, password or single-sign-on identifier, organization, role, department, and body membership details;
• Public-participation information, such as submissions, attachments, queue or sign-in entries, timestamps, meeting selections, agenda-item selections, and related metadata;
• Agency workspace content, such as agenda materials, attachments, votes, minutes, workflow notes, approvals, publication status, and internal comments;
• Technical information, such as IP address, browser type, device identifiers, cookies, log data, diagnostic data, and usage information;
• Email deliverability information, such as whether messages we send are delivered, bounce, or are marked as spam, so we can keep critical notifications working;
• Support and communications information, such as messages you send to Livy and related contact details;
• Billing and business information for paid customers, such as invoice details and payment status.

This list is non-exhaustive. Specific features available to you depend on your agency's configuration.

We may receive information directly from you, from the agency that manages or invites you to a workspace, from authentication providers, from service providers, and from your use of Livy.

How we use information

We use information to:

• provide and improve Livy;
• authenticate users and manage accounts;
• operate agency workspaces;
• deliver public-participation, meeting, agenda, records, and workflow features;
• send operational notices;
• provide support;
• protect security and prevent abuse;
• monitor performance and troubleshoot issues;
• create analytics and understand product usage;
• comply with law;
• enforce Livy's terms and agreements.

If an agency enables automated or AI-assisted features, your prompts, source materials, and outputs may be processed to provide those features.

Agency-controlled content and public records

If you are an agency user, much of the content in your workspace is processed on the agency's behalf.

If you are a public participant, information you submit through agency-facing forms may be shared with the agency and may become public meeting material or a public record under applicable law.

For example, a written submission, attachment, name, timestamp, or related metadata may be published in a public portal, included in meeting materials, disclosed in response to a public-records request, or retained under agency records rules.

Closing your Livy account does not delete copies already provided to, controlled by, published by, retained by, or disclosed by an agency.

How we disclose information

We may disclose personal information:

• to the participating agency;
• to service providers and subprocessors that help us operate Livy;
• to third-party services you or the agency enable;
• to professional advisors;
• to law enforcement, courts, regulators, or other parties when required by law or reasonably necessary to protect rights, safety, or the service;
• as part of a merger, financing, reorganization, change of control, or sale of assets, subject to appropriate confidentiality and legal protections.

We do not sell personal information or share it for cross-context behavioral advertising.

A current list of subprocessors is available on Livy's subprocessor page.

Automated and AI-assisted features

If automated or AI-assisted features are enabled for an agency workspace, Livy may use AI service providers as subprocessors to process prompts, source materials, and outputs for those features. The current list is on Livy's subprocessor page.

If you submit a comment or other content to an agency, your submission may be processed by these features to help the agency review, summarize, or categorize public input. Any analysis is assistive only; agency staff make all decisions about your submission.

Livy does not use agency data to train Livy's or a third party's general-purpose AI models. Livy will give the agency prior notice and require its explicit consent before changing this practice.

Outputs may be stored in the workspace and may be visible to authorized users or administrators according to the agency's settings.

Cookies, analytics, and similar technologies

We use cookies and similar technologies for login, security, session management, preferences, analytics, diagnostics, and performance.

We use first-party analytics tools to understand usage, improve Livy, diagnose issues, and secure the service. We do not use analytics tools that track you across other sites.

We use Cloudflare Turnstile to detect automated abuse on public-facing forms such as signup, password reset, and public-comment submission. Cloudflare processes a short-lived challenge token and your IP address under its own privacy policy.

Some third-party services embedded or enabled by an agency, such as video, map, identity, or streaming providers, may collect information under their own privacy policies when you interact with them.

Do Not Track and Global Privacy Control

We currently do not respond to browser "Do Not Track" or "Global Privacy Control" signals in a way that changes our practices, because there is no consistent industry standard for doing so across all of Livy's processing. If that changes, we will update this policy.

Retention

We retain personal information for as long as needed to provide Livy, maintain agency workspaces, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud, protect security, and improve the service.

Retention may differ depending on the kind of data:

• In-app notifications that appear in the notification bell are kept for 30 days, then purged. Longer-term history of the same events is preserved in our internal audit and event logs.
• Audit and event logs are retained for as long as necessary to support compliance, security, and dispute resolution, even after account closure or workspace termination.
• Agency workspace content is retained according to the agency's settings and applicable law.
• Account data, technical data, and billing data are retained for the periods needed to provide the service, satisfy legal obligations, and resolve disputes.

Your choices and rights

You may access, update, or delete certain account information through your account settings where available.

To close your account, contact Livy support at support@livygov.com.

If your request concerns agency-controlled data, public submissions, meeting materials, or public records, Livy may direct you to the relevant agency because the agency often controls that data.

Depending on where you live and the laws that apply, you may have rights to access, correct, delete, restrict, or appeal decisions about personal information. Livy will handle requests as required by applicable law.

Marketing communications

Public participants receive operational emails related to their account, submissions, meetings, security, or service changes.

Livy does not use public-participation activity to send marketing emails to public participants unless they separately opt in.

Agency users may receive product, service, administrative, and educational communications. Where required, Livy will provide unsubscribe or preference options for non-operational communications.

Children and minors

Livy is not directed to children under 13.

Minors may use Livy only where allowed by the participating agency and where any legally required parent, guardian, school, or agency permission has been obtained.

If Livy learns that it has collected personal information from a child under 13 without required consent, Livy will take appropriate steps to delete or address that information, subject to agency records obligations and applicable law.

Security

Livy uses reasonable administrative, technical, and physical safeguards designed to protect personal information.

No internet service is completely secure, and Livy cannot guarantee absolute security.

International use

Livy is primarily intended for use by public agencies in the United States. If you access Livy from outside the United States, your information may be processed in the United States or other locations where Livy or its service providers operate.

Changes to this policy

Livy may update this Privacy Policy from time to time. Livy will post the updated version with a new effective date. If changes are material, Livy will provide additional notice where required by law.

Contact

Questions about this Privacy Policy may be sent to support@livygov.com.