Privacy Architecture

Private conversations stay private.

Even we should not be able to read your private messages.

Your conversations are not our product. Liminal does not sell, mine, or expose client conversations.

Data Ownership

Conversation data is privately owned by the client/user. Liminal operates the infrastructure layer, not conversation ownership rights.

Encryption

Client-side or end-to-end style encrypted payload handling is supported where possible. Dashboard access defaults to redacted metadata views.

Admin Access Limits

Admins and operators see operational metadata only: message count, timestamp, lead status, sentiment/category, and action-needed indicators.

Retention

Liminal stores minimum operational metadata needed to run lead workflows and maintain service quality. Plaintext dashboard retrieval is disabled by default.

Deletion

Data can be removed by workflow controls and retention policy. Legacy plaintext dashboard access is disabled through feature-flag enforcement.