Privacy policy
Last updated 22 October 2026
Lore helps companies capture the working knowledge of employees who are leaving and make it available to their AI agents. This policy explains what personal data we handle, why, and what rights you have.
Who is responsible
There are two situations:
- Interview data. When a company uses Lore to interview its employees, that company is the controller of the interview data and decides why it is collected. Lore processes it on the company's behalf, under our data processing agreement. If you were interviewed, contact your employer first to exercise your rights. We will help them respond.
- Account and website data. For people who sign up for Lore or visit this website, Lore is the controller.
What we collect
- Interview data: the employee's name, role, team, optional work email and last day, entered by their employer; the interview conversation; and the rules extracted from it, each linked to the employee as its source.
- Account data: name, email address and company membership of the people who use the dashboard, handled through our sign-in provider.
- Website statistics: anonymous page view counts for this website, measured without cookies and without identifying you across sites. No cookie banner is needed because nothing is stored on your device.
- Usage data: questions sent by a company's AI agents to our API, which rules were returned, and technical logs needed to run and secure the service.
We ask interviewees not to share passwords, health information or personal details about customers. Lore's interviewer is instructed to steer away from them.
Why we use it
- To run the interview, extract rules, and let the company review and use them (on the company's instructions).
- To provide accounts, secure the service, prevent abuse and fix errors (our legitimate interest in running a reliable service).
- To bill customers and meet legal obligations.
We do not sell personal data, use it for advertising, or use interview data to train AI models. Our AI provider does not train on data sent through its commercial API.
Who we share it with
We use the following subprocessors to deliver the service:
| Provider | Purpose | Location |
|---|---|---|
| Anthropic, PBC | AI processing of interview text, rule extraction and agent answers | United States |
| Neon, Inc. | Database hosting | EU (AWS Frankfurt) |
| Vercel, Inc. | Application hosting and cookieless visitor statistics | EU and United States |
| Clerk, Inc. | Sign-in and company workspaces for customer staff | United States |
| Resend, Inc. | Sending interview invitations by email | United States |
| Functional Software, Inc. (Sentry) | Error monitoring | EU (Germany) |
Some subprocessors are in the United States. Transfers are covered by the EU Standard Contractual Clauses and, where the provider is certified, the EU-US Data Privacy Framework. Interview text is processed in the United States by our AI provider.
How long we keep it
Interview data is kept until the company deletes the handover or closes its account. Deleted data is removed from our live systems immediately and from backups within 30 days. Account data is kept while the account is active. Technical logs are kept for up to 90 days.
Your rights
Under the GDPR you can ask for access to, correction of, or deletion of your personal data, and you can object to or restrict its processing or ask for a copy to take elsewhere. Interviewees can ask their employer to delete their interview at any time, and the employer can do so in one step. You can also complain to your data protection authority; in the Netherlands that is the Autoriteit Persoonsgegevens.
Security
Data is encrypted in transit and at rest. Interview links and API keys are stored only as one-way hashes. Access within a company is limited by role, and our staff access customer data only when needed to support that customer.
Contact
Lore. Email privacy@keeplore.dev.