Privacy Policy

Lysnd.io is operated by Lysnd LLC, a North Carolina limited liability company ("Lysnd", "we", "us"). We are the controller of the personal information described in this policy. This policy sits alongside our Terms of Service and Cookie Notice.

Where a company or team uses Lysnd through a workspace, the workspace owner controls the projects and research inside it. We process that workspace data to provide the service on their behalf.

We collect only what we need to run Lysnd:

• Account information. Name, email address, password (stored hashed, never readable by us), and profile details. If you sign in with Google we receive your name, email and profile picture from Google.
• Workspace and project data. Product names, URLs, research questions, settings, saved learnings, combined opportunities, plans, business cases, loop schedules and the notes you add.
• Team information. Email addresses of people you invite, their roles, and invitation status.
• Billing information. Plan, credit balance, transaction history and billing contact details. Card details are collected and stored by our payment processor; we never see or store full card numbers.
• Usage and device data. IP address, browser and device type, pages visited, actions taken in the app, error logs and timestamps.
• Support and communications. Messages you send to support or through our contact form, and records of our replies.
• Public web content. To produce research, Lysnd collects publicly available posts, reviews and comments about products from third-party platforms. These may include the public usernames or words of the people who wrote them. We show short quotes with links back to the original source and do not build profiles of the individual authors.

• To create and secure your account and sign you in.
• To run searches, listening loops and analysis you request.
• To process payments, manage credits and send receipts.
• To send service emails, such as loop alerts, invitations, security notices and changes to our terms.
• To answer support requests.
• To prevent abuse, including blocking disposable emails and limiting free searches per network. For that limit we store a one-way hashed version of your IP address, not the address itself.
• To fix bugs, measure performance and improve the product.
• To meet legal, tax and accounting obligations.

We do not sell your personal information and we do not use it for advertising.

Emails we send. Service emails (sign-in links, password resets, receipts, security notices, invitations and changes to our terms) are needed to run your account and cannot be switched off while it is open. Loop alert emails are sent only for Loops you or your team set up; you can change how often a Loop checks, pause it or delete it at any time, which stops its alerts. We only send product news or marketing emails if you have agreed to them, and every such email has an unsubscribe link.

Invited teammates. When someone invites you to a workspace, we use the email address they gave us only to send the invitation and, if you join, to run your account. If you don't accept, you can ask us to delete your address by emailing support@lysnd.io.

Lysnd uses AI models to group conversations, summarise themes and draft plans. Your project inputs and collected public content are sent to our AI provider only to generate your results. We do not allow your data to be used to train third-party models, and we do not make automated decisions that have legal or similarly significant effects on you.

Where the GDPR or UK GDPR applies, we rely on:

• Contract — to provide the service you signed up for.
• Legitimate interests — to secure the service, prevent abuse, improve the product and analyse public web content.
• Legal obligation — for billing, tax and lawful requests.
• Consent — where required, which you can withdraw at any time.

We share information only with providers that help us run Lysnd:

• Hosting, database and authentication (Lovable Cloud).
• Google, if you choose to sign in with Google.
• Our payment processor (Stripe) for subscriptions and credit purchases.
• Our email delivery provider for service emails and support replies.
• AI model providers that generate summaries and plans.
• Data collection and search providers that gather public web content.

These providers may only use the data to perform services for us. We may also disclose information to comply with the law, to protect the rights and safety of Lysnd and our users, or as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply.

Members of a workspace can see the projects and research shared in that workspace. Workspace owners and admins can see who belongs to it.

We use only essential and preference storage, such as keeping you signed in and remembering your workspace. We use no advertising or cross-site tracking cookies. The full list is in our Cookie Notice.

• Account and workspace data: while your account is active.
• Deleted projects: removed from your workspace straight away.
• Closed accounts: personal information and workspace data are deleted or anonymised within 30 days, and removed from backups within 90 days.
• Billing, tax and fraud-prevention records: kept as long as the law or security requires, usually up to 7 years for financial records.
• Support conversations: up to 2 years after the last message.

You can ask for a copy of your data before closing your account, or within 30 days after, by emailing support@lysnd.io.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your information.
• Receive a copy in a portable format.
• Object to or restrict certain processing.
• Withdraw consent where we rely on it.
• Complain to your local data protection authority.

Email support@lysnd.io with the subject line "Privacy Request". We will verify your identity and respond within 30 days, or sooner where the law requires. We will not treat you differently for exercising your rights.

Residents of California and other states with privacy laws (including Colorado, Connecticut, Virginia, Utah and Texas) have the rights to know, access, correct, delete and opt out. In the past 12 months we have collected the categories listed in Section 2 for the purposes in Section 3. We do not sell personal information, share it for cross-context behavioural advertising, or use sensitive personal information to infer characteristics about you. You may use an authorised agent to make a request on your behalf.

If a quote from your public post appears in Lysnd and you want it removed, email support@lysnd.io with a link to the original post. We will remove it from our results. Deleting the original post also means it will not be collected again.

Lysnd is based in the United States and our providers mainly process data there. When we transfer data from the EEA, UK or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

We use encrypted connections, hashed passwords, access controls, row-level data isolation between workspaces and regular review of our providers. No service is perfectly secure. If a breach affects your personal information, we will notify you and the authorities as the law requires.

Lysnd is not intended for anyone under 13 (or under 16 in the EEA and UK), and we do not knowingly collect their information. If you believe a child has given us information, contact support@lysnd.io and we will delete it.

We may update this policy. For material changes we will notify you by email or in the app before they take effect, and update the effective date above.

Lysnd LLC, North Carolina, United States
Email: support@lysnd.io