VeldrisLikan Download

Likan privacy policy

Effective date: [DATE OF PUBLICATION]

Applies to: the Likan desktop application for Windows and Linux, including the version distributed through the Microsoft Store, and its command-line tool.

Who we are

Likan is made by Veldris Ltd, a company registered in England and Wales (company number 17366869), registered office Two Snowhill, Birmingham B4 6WR, United Kingdom ("Veldris", "we", "us"). Veldris is registered with the Information Commissioner's Office as a data controller under reference ZC222667.

Our Data Protection Officer is JB Webb-Benjamin, at jb.benjamin@veldris.io. For anything in this policy, write to privacy@veldris.io or to the Data Protection Officer (both reach the same desk), call 0203 195 3829 (Monday to Friday, 09:00 to 17:00 UK time; from outside the UK, +44 20 3195 3829), or write to us at our registered office.

The short version

  • Likan works on your computer. It reads the files, databases and documents you give it, and everything it does with them happens on your computer.
  • Veldris receives nothing from Likan. There is no account, no sign-in, no licence check, no telemetry, no analytics, no crash reporting, no advertising and no update check. Likan makes no network connection unless you add one in Settings and use it.
  • Likan's AI runs on your computer. Your data is not sent to any cloud AI service.
  • If you connect Likan to other systems, such as your organisation's Midgard platform, a team server or a database, your data goes to those systems, which your organisation or their owner runs, not Veldris.
  • The Microsoft Store handles your purchase and installation under Microsoft's own privacy statement.

What Likan does with the data you give it

Likan helps you describe, check and package data so that it can be loaded into the Midgard data platform. To do this it reads the sources you choose: files you drop or open, databases and APIs you connect, and documents you add. These may contain personal data, such as names, addresses, dates of birth or identifiers.

Likan processes this data only on your computer, and only to do what you ask:

  • Detecting formats, structure, keys, links between files and the kind of data in each field, including whether a field appears to hold personal data;
  • Modelling, mapping and matching your data to the model you build;
  • Checking it at six levels, including whether personal data or secrets are somewhere they should not be;
  • Building and signing a package, which Likan saves to the folder you choose.

Likan is designed to keep personal data out of places it does not need to be. Its records of what happened (audit events) and its logs hold identifiers, counts and hashes, never the values in your data. Values Likan recognises as personal data are kept out of the prompts given to its AI and out of the packages it builds unless your model includes them.

Veldris does not see, receive or have access to any of this data. When your organisation uses Likan, it decides what data is processed and why, and it is the controller of that data under data protection law. Because Veldris has no access to the data, we are not its processor either.

What Likan keeps on your computer

| What | Where | Why | |---|---|---| | Your projects: the model, mappings, rules, labels and packages | The folders you choose | They are your work | | Settings, the connections you add, the AI model and Likan's record of what happened on this computer | Your user profile (on Windows, %LOCALAPPDATA%\Veldris\Likan and %APPDATA%\Veldris\Likan) | So that Likan works the same way next time | | Your signing identity: a key used to sign packages | Windows' own key protection (DPAPI or the TPM); on Linux, the system keyring | So that packages can be shown to come from you | | A searchable index of each project | Inside the project folder (.likan/index.db), encrypted | Faster search and previews | | Credentials for databases or services you connect | Windows' own key protection or the system keyring, never in project files | So that you need not type them every time |

The record of what happened (the audit log) includes the time of each action and who performed it, by the signing identity on this computer, but never a value from your data.

All of this stays on your computer. Removing Likan does not delete your projects, settings or signing identity, so that you do not lose your work by accident. You can delete them yourself at any time by deleting the project folders and the folders named above. The signing identity stays in Windows' key protection until it is removed [STEPS TO REMOVE THE SIGNING IDENTITY: to be confirmed by Veldris].

The Microsoft Store version declares that Windows should not include Likan's data in automatic backups. If your projects hold sensitive data, keep them in a folder that your own backup or sync service (such as OneDrive) does not copy.

The on-device AI

Likan includes an AI model that suggests types, mappings, labels and fixes, and helps it classify and identify data. The model runs on your computer's processor (or graphics card) in a separate process that Windows prevents from using the network at all. Your data is never sent to an AI service, and nothing the model suggests is applied until you accept it. Veldris does not train any model on your data and receives none of it.

If your organisation runs Midgard's own assistant (Mimir) and you choose to use it in Settings, suggestions come from that service instead. It runs inside your organisation's Midgard deployment, under your organisation's policies.

Network connections

Likan makes no network connection by itself. These connections happen only when you set them up in Settings or add a source, and only when you use them:

| Connection | What is sent | To whom | |---|---|---| | Publishing to Midgard (Forge) | The signed package you choose to publish, its audit events and your signing identity's public key | Your organisation's Midgard deployment | | A team server | Shared projects, reviews and comments, audit events | The team server your organisation runs | | Mimir (assistant) | The minimum description of a field or problem needed for a suggestion; personal data values are filtered out | Your organisation's Midgard deployment | | A database or an API you add as a source | The queries needed to read it, and the credentials you give | The database or API you named |

These systems are run by your organisation or by the owner of the data source, under their own privacy policies. Veldris does not operate them and receives nothing from them through Likan.

What Veldris receives

From the application: nothing. Likan contains no telemetry, analytics, usage statistics, crash or error reporting, advertising, tracking, cookies, licence checks or update checks.

When you contact us. If you email us or otherwise ask for support, we receive what you send: usually your name, email address, organisation and the details of your question. We use it only to answer you, on the basis of our legitimate interest in supporting our product (or, for customers, to perform our contract). We delete it when the correspondence is closed, unless a contract or a legal obligation requires us to keep it. If you call us outside office hours and leave a voicemail, we delete it once we have returned your call, or within 30 days, whichever is sooner. Please do not send us samples of personal data; describe the problem instead, or use Likan's own diagnostics (likan doctor), which contain no data values.

The Microsoft Store

If you get Likan from the Microsoft Store, Microsoft processes your purchase, licence, installation, updates, ratings and reviews as described in the Microsoft Privacy Statement (https://privacy.microsoft.com/privacystatement). Microsoft may share with us aggregated reports, such as numbers of installs or sales by market, and the text of public reviews. We do not receive your name, email address or payment details from Microsoft for a Store purchase.

Children

Likan is a professional tool for organisations and is not directed at children.

Security

Likan protects what it keeps:

  • Packages are signed with ML-DSA (FIPS 204) and verified before they are trusted.
  • Signing keys and credentials are held in Windows' own key protection or the system keyring.
  • Project indexes are encrypted.
  • The AI runs in a sandbox without network access.
  • Every installed file is checked against a signed manifest each time Likan starts.

Your organisation remains responsible for the security of the computers and folders where Likan and your projects are kept.

Your rights

Because the application sends nothing to Veldris, we hold no personal data about you from your use of Likan. For data inside your files and projects, contact your organisation, which controls it.

For personal data we do hold, such as support correspondence, you have the right under the UK GDPR (and, where it applies, the EU GDPR):

  • to access it;
  • to have it corrected or erased;
  • to restrict or object to its use;
  • to receive it in a portable form.

To use any of these rights, write to privacy@veldris.io or to our Data Protection Officer at jb.benjamin@veldris.io. We will answer within one month. You may also complain to the UK Information Commissioner's Office (https://ico.org.uk, 0303 123 1113), quoting our registration ZC222667, or to the data protection authority where you live.

We do not sell or share personal information for advertising, and we do not use it for automated decisions that affect you.

Transfers outside the UK

The application transfers nothing. Support correspondence is processed by Veldris on its own infrastructure in the United Kingdom, and is not transferred outside the UK.

Changes to this policy

If Likan's handling of data changes, we will update this policy and its effective date before the change is released. A change that would send data anywhere new will always be something you switch on, never on by default.

Contact

  • Veldris Ltd, registered in England and Wales, company number 17366869
  • Registered office: Two Snowhill, Birmingham B4 6WR, United Kingdom
  • Data controller registered with the ICO, reference ZC222667
  • Data Protection Officer: JB Webb-Benjamin, jb.benjamin@veldris.io
  • Privacy requests: privacy@veldris.io
  • Telephone: 0203 195 3829 (from outside the UK, +44 20 3195 3829), Monday to Friday, 09:00 to 17:00 UK time
  • More about Veldris: https://veldris.io