Privacy Policy

1. Introduction

LYRA Solutions LLC ("LYRA," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at lyra.solutions and all related services (the "Service"). This policy applies to all users of the Service, including visitors, free-tier users, and paid subscribers.

By accessing or using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with the practices described herein, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you create an account, we collect your name, email address, and authentication credentials through our OAuth provider.
• Profile Information: Business name, industry, target audience, and content preferences you provide during onboarding.
• User Content: Media files (images, videos, audio) you upload, text prompts you submit, and content you create using the Service.
• Payment Information: If you subscribe to a paid plan, payment details are processed by our third-party payment processor. We do not store your full credit card number on our servers.
• Communications: Information you provide when you contact us for support, submit feedback, or communicate with us through any channel.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, actions taken, time spent on the Service, and interaction patterns.
• Device Information: Browser type, operating system, device type, screen resolution, and language preferences.
• Log Data: IP address, access times, referring URLs, and error logs.
• Cookies and Similar Technologies: We use session cookies to maintain your authentication state and preferences. See Section 7 for more details.

2.3 Information from Third Parties

We may receive information from third-party services you connect to your LYRA account, such as social media platforms. The information we receive depends on the permissions you grant and the privacy settings of those third-party services.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide the Service: To operate, maintain, and deliver the features and functionality of the platform, including AI content generation, media management, and analytics.
• Personalization: To tailor content recommendations, AI-generated outputs, and industry insights to your specific business profile and preferences.
• AI Processing: Your prompts and content preferences are processed by AI models to generate text, images, and video content. We may use anonymized and aggregated usage patterns to improve our AI models.
• Communication: To send you service-related notifications, respond to your inquiries, and provide customer support.
• Billing: To process payments, manage subscriptions, and send billing-related communications.
• Security: To detect, prevent, and address fraud, abuse, and security issues.
• Analytics: To understand how users interact with the Service and to improve its features, performance, and user experience.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: We share information with third-party service providers who assist us in operating the Service, including cloud hosting providers, AI model providers, payment processors, and analytics services. These providers are contractually obligated to protect your information and use it only for the purposes we specify.
• AI Processing Partners: Your content prompts are sent to AI service providers (such as Google Gemini, Luma AI, and Creatomate) for content generation. These providers process your data according to their respective privacy policies and data processing agreements.
• Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.
• With Your Consent: We may share your information with third parties when you have given us explicit consent to do so.

5. Data Storage and Retention

Your data is stored on secure cloud infrastructure. User-uploaded media files are stored in Amazon S3 cloud storage. Database records are maintained in a managed database service with encryption at rest and in transit.

We retain your personal information for as long as your account is active or as needed to provide you with the Service. If you request account deletion, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes. Anonymized and aggregated data may be retained indefinitely for analytics and service improvement.

6. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit using TLS/SSL
• Encryption of data at rest in our databases and storage systems
• Secure authentication via OAuth 2.0 with JWT session tokens
• Regular security assessments and monitoring
• Access controls limiting employee access to personal data on a need-to-know basis

While we strive to protect your information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, and you use the Service at your own risk.

7. Cookies and Tracking Technologies

We use the following types of cookies and similar technologies:

• Essential Cookies: Required for authentication, session management, and core functionality. These cannot be disabled without losing access to the Service.
• Analytics Cookies: Used to understand how users interact with the Service, including page views, feature usage, and navigation patterns. This data is collected in aggregate form.

We do not use advertising cookies or third-party tracking cookies for targeted advertising purposes. You can manage cookie preferences through your browser settings, but disabling essential cookies may prevent you from using the Service.

8. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

8.1 General Rights

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal information.
• Deletion: Request deletion of your personal information, subject to certain exceptions.
• Data Portability: Request a copy of your data in a structured, machine-readable format.
• Opt-Out: Opt out of non-essential communications at any time.

8.2 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of your personal information. As stated above, we do not sell personal information.

8.3 European Residents (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including the right to restrict processing, the right to object to processing, and the right to lodge a complaint with a supervisory authority. Our legal basis for processing your data includes your consent, the performance of our contract with you, and our legitimate business interests.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

9. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe we have inadvertently collected information from a child, please contact us at [email protected].

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our servers and service providers are located. These countries may have data protection laws that differ from those in your jurisdiction. By using the Service, you consent to the transfer of your information to these countries. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy.

11. Third-Party Links and Services

The Service may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access through the Service. We are not responsible for the privacy practices of third-party services.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. If we make material changes, we will notify you by posting the updated policy on the Service and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: