Local mode
Lisorto does not scan a drive from the web, store your customer files, or perform file moves remotely. The app accesses one folder you select, at supported depth, and asks for approval for each exact move.
Web account and billing data
Web accounts use a verified email address and a one-way password hash. Lisorto stores session and one-time-link token digests, along with account usage, access, and billing records. Raw passwords and one-time-link tokens are not stored. After password reauthentication, deleting an account cancels any active subscription and removes the account, authentication records, invitations, sessions, entitlements, usage, and account-linked billing records from Lisorto’s active database. A recovery marker containing only the random account ID is retained for 121 days and applied before a restored database serves traffic. Encrypted backup copies may contain older account data for up to 120 days. This does not delete local files or history on your Mac. A payment provider may keep its own records under its terms and applicable legal requirements.
Support requests remain stored while open or in progress and are deleted 12 months after a request is marked resolved. Processed billing-event identifiers are retained for 90 days after processing for duplicate-event protection; raw payment webhook bodies are not stored. Payment providers may keep their own accounting records under their terms and applicable requirements.
Account email delivery
Lisorto sends account-verification and password-reset emails through Sequenzy, operated by Nic Tech Solutions, LLC. Sequenzy has confirmed that these required account-security messages, including their single-use link, are permitted for the Lisorto workspace. The message contains the recipient email address and a link with a token that expires after 30 minutes. Lisorto does not send your password or file contents. Sequenzy's data processing agreement lists AWS for outbound email transmission and includes standard contractual clauses for applicable international transfers. Its public agreement does not specify a numeric retention period for backup copies. Review Sequenzy's terms and privacy policy for current details.
Cloud Assist
Cloud Assist is off by default. If you enable it, the app may send a bounded text excerpt, MIME type, truncation flag, and an optional filename only after the separate consent. It does not send absolute paths, adjacent filenames, raw files, credentials, or a complete inventory.
External-beta gate
Cloud Assist is unavailable to external beta users until its processor, subprocessors, and retention terms are published here.
What remains local
- File paths, folder bookmarks, digests, proposals, and operation history.
- Undo and recovery evidence, including when an account or cloud service is unavailable.
- Local data until you clear it; clearing history can remove undo evidence.
Limits
Sensitive-document heuristics can miss things. Cloud Assist is not a DLP guarantee, and already transmitted text cannot be recalled after consent is revoked.