Privacy Policy
Litmiq ("we", "our", or "us") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights regarding that information.
Information We Collect
We collect information you provide directly to us:
- Email address — when you sign up for the waitlist or early access via our website forms.
- Usage data — anonymous analytics about how you interact with litmiq.com (page views, session duration) to help us improve the product.
When you use the Litmiq app (app.html), your OpenAI API key is stored only in your browser's local storage and is never transmitted to our servers. It goes directly from your browser to OpenAI's API.
How We Use Your Information
- To send you product updates, launch announcements, and information about Litmiq (email only, if you signed up).
- To improve our website and product based on coarse consented usage patterns (Acceptors only; not a complete census of all visitors).
- To respond to your inquiries.
Information Sharing
We do not sell, trade, or rent your personal information to third parties. We may share information with:
- Netlify — our hosting provider, which processes form submissions on our behalf.
- Analytics providers — if you Accept optional analytics, coarse consented usage events (pseudonymous session IDs, not anonymous; not all visitors).
Data Retention
We retain your email address until you request removal. You can unsubscribe from emails at any time using the unsubscribe link in any email we send, or by emailing hello@litmiq.com.
Your Rights
You may withdraw analytics consent at any time using “Analytics preferences” on the site (Reject). You have the right to access, correct, or delete your personal data at any time. To exercise these rights, contact us at hello@litmiq.com.
Cookies and local storage
Litmiq does not use advertising cookies or profiling. The waitlist form is handled by Netlify Forms so we can email you product updates about Litmiq (not an automatic subscription to unrelated marketing). The evaluator stores your OpenAI API key and saved prompt configuration in your browser's localStorage only.
We may store a small local preference that records whether you accepted or rejected optional analytics (so we can respect your choice). That preference is not used for advertising.
Optional product analytics
If you click Accept analytics, Litmiq may load a product-analytics SDK and send only coarse funnel events (for example: page view by page id, app opened, eval started/completed/failed with bucketed counts and coarse error codes, export clicked, signup success with plan label). Analytics are off by default. If the site configuration has analytics disabled, Accept does nothing until analytics are enabled by the operator. Reject is as easy as Accept. You can change your mind anytime via “Analytics preferences”. If your browser sends Global Privacy Control (GPC) or Do Not Track, we treat that as opt-out.
We do not send: API keys, prompts, model outputs, test-case text, emails, session replay, heatmaps, advertising identifiers, or full URLs/query strings in analytics properties. Signup emails stay in Netlify Forms only and are not copied into analytics.
Controller and contact
For Litmiq, the individual operator is Devansh Kaushik. Privacy contact: hello@litmiq.com. A full postal address for the controller is not published on this page.
Analytics processor (when you Accept)
Product analytics are processed by PostHog on PostHog Cloud in the US region (us.i.posthog.com / us.posthog.com). Waitlist emails are not sent to PostHog; they remain in Netlify Forms for product updates about Litmiq only (not an automatic marketing subscription to unrelated products).
PostHog publishes a DPA preview at posthog.com/dpa. Per PostHog’s own documentation, that preview is not binding; a DPA becomes effective only after you generate it in app.posthog.com/legal and affirmatively countersign (available on the free plan). PostHog’s Terms (§13) say a customer may request a DPA — it is not automatically incorporated by Cloud signup alone. A countersigned DPA for this Litmiq account is not asserted here (status unverified).
Retention
On the current PostHog Free plan, product analytics events are retained for up to 12 months by default (may be shortened to 1 month only after an explicit owner confirmation). After Accept, client-side analytics IDs use in-memory (session-only) persistence: they are not stored in cookies or localStorage, so they cannot reliably measure return visits across browser sessions or full page reloads. Same-tab, same-page funnel steps can still be correlated while the page stays loaded. Your Accept/Reject preference is stored separately in localStorage so we can respect it later. Pseudonymous analytics IDs are not treated as anonymous.
Consent coverage bias: analytics reflect only visitors who Affirmatively Accept (and who do not send GPC/DNT). Reject, ignore, or GPC/DNT visitors are not measured. We do not claim analytics cover all visitors or the full audience.
What we deliberately do not enable
Session replay, autocapture, heatmaps, advertising pixels, and identifying users by email in analytics are turned off in project settings and in our site script.
Security
We take reasonable measures to protect your information. However, no method of transmission over the internet is 100% secure.
Changes to This Policy
We may update this policy from time to time. We will notify registered users of significant changes by email.
Contact
If you have questions about this privacy policy, please contact us at hello@litmiq.com.