Ledeform / Service information
Privacy notice
This notice covers the Ledeform website and the Ledeform products you use, including Desk at desk.ledeform.com and Relay at relay.ledeform.com (and its compatibility dashboard at ledeform.com/app). Product-specific descriptions apply only to the features you use. New products or materially different data uses will be explained before they are introduced.
1. Who is responsible
Ledeform and its products are operated by Sensei Minimal Lda, Praceta João de Deus 219B, Massamá, 2745-798, Lisbon, Portugal. VAT number: PT517489058. Contact: info@senseiminimal.com.
We act as controller for our service administration, security and support records. A publisher decides which article content it sends to its own social accounts. Where we process that content on behalf of an external publisher, the publisher remains the controller and the processing must be governed by the applicable service agreement and data-processing terms. The current services are in pilot or beta use; public customer registration and paid plans are not opened by this notice.
2. Data collection: information we handle
- Publication information: publication name, website and Ghost address; article identifiers, titles, excerpts, URLs, feature images, tags and any article text included in a posting recipe.
- Desk research workspace: publication name, topics, sitemap address, approved and disallowed source rules, research and approval settings, submitted ideas, discovered candidate titles and source links, evidence notes and scores, editorial decisions, archived opportunities, research-run summaries and the research-brief queue. Archive preserves a record for possible restoration; it is not erasure.
- Connected accounts (Relay): platform account or Page identifiers, account names, handles, profile links and profile images; authorization permissions, encrypted access credentials and token expiry information where supplied by the provider.
- Publishing operations (Relay): destination settings, posting recipes, scheduled or waiting jobs, delivery attempts, results, external post identifiers and links, error messages, and security/audit records.
- Optional integrations: an encrypted Ghost integration key if the publisher connects Ghost Admin. The RET-only experimental Flipboard Magazine connection stores an encrypted authorized browser session. Flipboard.social uses a separate Mastodon connection.
- Support: contact details and information supplied in an enquiry or data-rights request.
- Technical information: request information, including IP addresses and browser details, may be processed by our hosting provider for delivery, security and diagnostics.
We obtain information from you, publication sitemaps or feeds, research-source services and the integrations you authorize. Desk queries Google News, OpenAlex and Crossref for research leads; those services receive the search terms and request information needed for the query. Desk currently prepares a copyable article brief; it does not send that brief to an AI provider or publish it to Ghost. If you paste a brief into an external AI service, that service handles it under its own terms and privacy notice. Relay does not import a publication’s subscriber list for social distribution. Provider authorization takes place on the provider’s website; the normal social connection flow does not ask you to give Relay your social account password.
3. Why we use information
We use this information to operate the Ledeform product you choose: Desk discovers and groups research leads, maps publication coverage, stores editorial decisions and prepares article briefs; Relay identifies authorized destinations, prepares and distributes the publisher’s chosen content, displays connection and publishing history, and manages retries. We also support the services, prevent misuse and respond to lawful requests. A recipe can include public article text in a social post or follow-up comment; publishers should review that recipe before enabling live distribution.
Our legal bases are performing a contract or taking requested steps before a contract, legitimate interests in securing and operating the service and resolving support enquiries, and compliance with legal obligations. Where a particular optional use requires consent, we seek it separately and allow withdrawal. A platform’s authorization screen controls the access granted to that platform account; it does not authorize unrelated uses of personal data.
We do not sell connected-account data, use it for advertising targeting, or use it to train general-purpose AI models. Relay does not make decisions about individuals with legal or similarly significant effects.
4. Who receives information
Cloudflare hosts the service and provides its storage, queues and, for the experimental connection, browser infrastructure. Authorized service operators can access information when necessary for administration, security and support.
Desk research providers, currently Google News, OpenAlex and Crossref, receive the query information needed to retrieve source leads. Submitted ideas should not contain confidential personal information that is unnecessary for research.
Selected publishing providers (Relay) receive the content, account identifiers and authorization information needed for the destination you enable. These may include Meta (Facebook and Instagram), LinkedIn, Pinterest, the selected Mastodon server, flipboard.social and Flipboard. A destination awaiting activation does not receive a live post merely because it appears in the dashboard. Ghost receives integration requests if you connect Ghost Admin.
Published content is visible according to the destination account’s audience settings and the provider’s policies. External images, links or authorization pages may cause your browser to contact the relevant provider. Those providers control their own services and handle that information under their own privacy notices. We may also disclose information where lawfully required or needed to establish, exercise or defend legal claims.
5. International processing
Cloud hosting and connected social providers may process information outside your country, including outside the EEA. Where we arrange a transfer subject to GDPR, we use the applicable lawful transfer mechanism, such as an adequacy decision or standard contractual clauses, as appropriate to the provider and transfer. Contact us for information about the safeguards applicable to your data. We do not promise that all service data stays in Portugal or in the EU.
6. Storage and security
We use HTTPS, restricted operator access and encryption for stored integration credentials. Relay uses browser session storage to keep its operator sign-in for that browser session; Desk uses its protected application access. Appearance overrides are stored locally in the browser for each product origin; without an override, the product follows the device’s light or dark appearance. Our own pages do not install advertising pixels or third-party marketing analytics. Connected providers may use their own cookies during authorization. No online service can guarantee absolute security.
Credentials are retained while a connection is active. Disconnecting a normal social connection clears its stored credentials and disables that destination. Publication settings, account labels, publishing history and audit records can remain after disconnection. The pilot does not have an automatic timer that erases every record upon disconnection.
We retain other records only for the purposes described here, including retaining a publication’s research library and editorial decisions, operating publishing history, investigating failures, security and lawful recordkeeping. On a verified deletion request we remove or anonymize eligible data that is no longer required. Any limited retention for legal obligations, disputes or security is explained in our response. Recovery copies are restricted and are not used for routine service operations; if a recovery restores deleted data, the deletion must be reapplied. You can ask us for the retention information relevant to your records.
7. Your choices and rights
In Desk, you can change research settings and source preferences, and archive or restore opportunities. Archiving preserves the record; request erasure separately if you want eligible retained information removed. In Relay, you can disable a destination, disconnect it, and revoke access in the provider’s integration settings. Revocation stops the provider authorization; a request to erase retained Relay records is a separate action. See our data-deletion instructions.
Subject to the applicable law, you can request access, correction, erasure, restriction or portability, object to processing based on legitimate interests, and withdraw consent where consent is the basis. Email info@senseiminimal.com. We may request proportionate verification of your identity or authority over a publication. Do not send passwords, access tokens or integration keys.
We respond without undue delay and normally within one month. If an extension is permitted because of a request’s complexity or number, we explain it within the first month. You may complain to Portugal’s Comissão Nacional de Proteção de Dados (CNPD) or your competent data protection authority.
8. Children and changes
Ledeform’s research and publishing tools are intended for adults acting for a publication or business and are not directed at children. Contact us if you believe a child’s information has been provided to the service. We update this notice when service practices change and show the revision date on this page. A materially different use of information will be explained before it is introduced.
9. Contact
Ledeform and its products are operated by Sensei Minimal Lda, Praceta João de Deus 219B, Massamá, 2745-798, Lisbon, Portugal. VAT number: PT517489058. Contact: info@senseiminimal.com.