Privacy Policy

Last updated: January 2024

Effective date: January 1, 2024

1. Introduction

Lyrox AI, LLC ("Lyrox AI", "we", "us", or "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, share, and protect information when you use our AI-powered customer communication platform.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, company name, phone number
• Payment Information: Billing address, payment method details (processed by our payment provider)
• Business Information: Industry, company size, business needs
• Communication Data: Messages sent through our platform, customer interactions

2.2 Information We Collect Automatically

• Usage Data: Features used, interaction patterns, performance metrics
• Device Information: IP address, browser type, operating system
• Cookies: Session cookies, preference cookies, analytics cookies
• Log Data: Access times, pages viewed, errors encountered

2.3 Information from WhatsApp Business API

• Phone numbers of message recipients
• Message content and metadata
• Delivery and read receipts
• Profile information shared by users

3. How We Use Your Information

We use collected information for the following purposes:

• Service Provision: To operate and maintain our platform
• Communication: To send service updates, respond to inquiries
• Improvement: To enhance features and user experience
• Security: To detect and prevent fraud or abuse
• Compliance: To meet legal and regulatory requirements
• Analytics: To understand usage patterns and optimize performance

4. Data Processing and AI

Our service uses artificial intelligence to process messages:

• Messages are analyzed by AI models (OpenAI GPT-4) to generate responses
• Voice messages may be transcribed using speech-to-text services
• Responses may be converted to voice using text-to-speech services (ElevenLabs)
• AI processing is done in real-time and data is not used to train models

5. Data Sharing and Third Parties

We share your information only in these circumstances:

Third Party	Purpose	Data Shared
Meta/WhatsApp	Message delivery	Phone numbers, messages
OpenAI	AI processing	Message content (anonymized)
ElevenLabs	Voice synthesis	Text for voice generation
Stripe	Payment processing	Payment information
Supabase	Data storage	All platform data

We do NOT sell your personal information to third parties.

6. Data Security

We implement industry-standard security measures:

• Encryption in transit (TLS/SSL)
• Encryption at rest for sensitive data
• Regular security audits and updates
• Access controls and authentication
• Secure data centers with physical security

7. Data Retention

We retain your data as follows:

• Account Data: Duration of account plus 90 days
• Message Data: 12 months or as required by law
• Analytics Data: 24 months
• Payment Records: 7 years for tax purposes

8. Your Rights

You have the following rights regarding your data:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal requirements)
• Portability: Receive your data in a portable format
• Objection: Object to certain processing activities
• Restriction: Request restriction of processing

To exercise these rights, contact us at privacy@lyrox.ai

9. International Data Transfers

Your data may be processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers.

10. Children's Privacy

Our service is not intended for children under 18. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

11. Cookie Policy

We use cookies to:

• Maintain session state
• Remember user preferences
• Analyze usage patterns
• Improve service performance

You can control cookies through your browser settings. Disabling cookies may limit functionality.

12. California Privacy Rights (CCPA)

California residents have additional rights:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of sale of personal information
• Right to non-discrimination for exercising privacy rights

13. GDPR Compliance

For European Union residents, we comply with GDPR requirements:

• Legal Basis: Contract performance, legitimate interests, consent
• Data Controller: Lyrox AI, LLC
• Data Protection Officer: Contact at dpo@lyrox.ai
• Supervisory Authority: You may lodge complaints with your local authority

14. Changes to This Policy

We may update this privacy policy periodically. We will notify you of significant changes via email or through the Service. Review this policy regularly to stay informed.

15. Contact Information

For privacy-related questions or concerns:

Lyrox AI, LLC
Privacy Department
Delaware, United States
Email: privacy@lyrox.ai
Support: support@lyrox.ai

16. Data Breach Notification

In the event of a data breach that may affect your personal information, we will notify you within 72 hours via email and provide:

• Description of the breach
• Types of data involved
• Steps we're taking to address it
• Recommendations for protecting yourself