Sign In

Privacy Policy (2026-09-07)

Effective Date: Sep 7, 2026
LilysAI, Inc. and its affiliates, including LilysAI Korea Inc. (collectively, "LilysAI," "we," "us," or "our"), respect your privacy. This Privacy Policy ("Policy") explains how we collect, use, disclose, and protect your personal information when you use our websites, mobile applications, and related services (collectively, the "Services"), and the rights and choices available to you.

1. Information We Collect

We collect the following types of personal information:
•
Account information — name, nickname, email address, password (in hashed form), and profile preferences.
•
Sign-in information — when you sign in via a third-party identity provider (e.g., Google, Apple), we receive the information they share with us, such as your email address and a unique identifier.
•
Payment information (paid users) — billing name, billing address, payment card details (processed by our payment providers and not stored by us in full), and transaction history.
•
Content you submit — text, audio, video, links, and other content you submit to the Services for summarization or processing, as well as the AI-generated outputs.
•
Information from apps you connect — when you connect a third-party app or service to your account and use it to bring material into the Services, we receive the items you choose to import and their metadata.
•
Usage and device information — IP address, device identifiers, operating system, browser type, app version, language settings, pages and features accessed, timestamps, and crash logs.
•
Approximate location — derived from your IP address. We do not collect precise GPS location.
•
Communications with us — content of your messages to customer support and feedback you provide.
•
Cookies and similar technologies — see Section 3.
We collect this information directly from you, automatically as you use the Services, from third-party identity providers when you choose single sign-on, and from our service providers (such as payment processors and analytics tools).

2. How We Use Your Information

We use personal information to:
1.
Provide and operate the Services — create and manage your account, authenticate users, deliver AI-generated summaries and other features.
2.
Process payments — handle subscription fees, manage payment methods, and prevent payment fraud.
3.
Provide customer support — respond to your inquiries and notify you about your account.
4.
Improve the Services and develop new features — analyze usage to debug, refine, and build new functionality. We do not use the content you submit to the Services to train foundation AI models without your explicit consent.
5.
Protect security and prevent fraud — detect and prevent abuse, enforce our Terms, and protect our rights and the rights of others.
6.
Send marketing communications — share product updates, newsletters, and promotional materials. You may opt out at any time, and where required by law we will only send marketing communications with your prior consent.
7.
Comply with legal obligations — including tax, accounting, and consumer protection laws.
We will not use your personal information for materially different purposes without notifying you and, where required by law, obtaining your consent.

3. Cookies and Tracking Technologies

We use cookies, SDKs, and similar technologies to operate the Services, remember your preferences, analyze usage, and (where permitted) measure advertising effectiveness. The categories we use are:
•
Strictly necessary — required for authentication and security.
•
Functional — remember your preferences and settings.
•
Analytics — measure performance and usage (e.g., Google Analytics, Firebase Analytics, Mixpanel, Sentry).
•
Advertising — measure advertising effectiveness and, where applicable, deliver personalized ads.
You can manage cookies through your browser settings or, where available, our cookie preferences center. Where required by law, we will request your consent before placing non-essential cookies, and you may withdraw consent at any time. If you disable cookies, certain features may not function properly.

4. How We Share Your Information

We share personal information with the following categories of recipients:
•
Service providers that perform services on our behalf, including:
◦
Cloud hosting (Amazon Web Services, Google Cloud)
◦
Payment processing (Stripe, NICE Payments, Kakao Pay, PortOne)
◦
Analytics (Google Analytics, Firebase Analytics, Mixpanel)
◦
Error monitoring (Sentry)
◦
Customer support (Intercom)
◦
Email delivery (Twilio SendGrid, Loops)
◦
Form data collection (Tally)
◦
AI model providers (OpenAI, Anthropic, Google, Microsoft, Soniox, Groq, pyannote AI), which process content you submit to generate the AI outputs you request
•
Affiliates within our corporate group (LilysAI's U.S. parent and Korean subsidiary), where necessary for the purposes described in this Policy.
•
Professional advisors such as auditors, lawyers, and accountants.
•
Government authorities or other parties when we believe in good faith that disclosure is required by law, necessary to enforce our Terms, or necessary to protect rights, safety, or property.
•
Parties to a business transaction in connection with a merger, acquisition, financing, or sale of assets.
Apps you connect
You can connect third-party applications and services (each, a "connected app") to your Lilys AI account. Connections are made through standard integration methods, including the Model Context Protocol (MCP). The apps available for connection, the methods they use, and the permissions each one requests are shown in the integrations screen in the Services.
When you connect an app, we make the following information available to it, limited to the permissions you grant:
•
the structure and names of your projects and folders;
•
the titles, links, and file names of the material you have saved;
•
notes, transcripts, highlights, memos, and other content you have created or stored in the Services; and
•
your plan, remaining credits, and per-feature usage and limits.
We do not make the following available to connected apps: your account identifiers such as name, email address, and phone number; your password; your payment information; or the contents of your conversations with the connected app.
You choose whether to grant an app read-only access or read and write access. With write access, an app can carry out actions on your behalf that you could carry out yourself in the Services, including adding material (which includes uploading files), creating notes, and creating, renaming, moving, trashing, and restoring projects and folders. A connected app never has more access than you do, and adding material consumes your credits.
We make this information available only after you request the connection and approve it during the sign-in (OAuth) flow, where we identify the app receiving the information and the permissions it is requesting. Once information reaches a connected app, it is handled under that app's own privacy policy, which we do not control. Many connected apps are operated from outside your country; see Section 5 for how we handle international transfers.
You can review your connected apps in the integrations screen, where each app is listed with the permissions you granted and the date you connected it, and you can disconnect any app from there. Disconnecting immediately invalidates that app's access and any tokens issued to it. We keep a record of invalidated tokens to detect reuse and to support security audits, and we delete those records when you close your account.
We do not use information processed through connected apps to train AI models.
We do not sell your personal information for monetary consideration. Some of our analytics and advertising activities may be considered "sharing" or "selling" under certain U.S. state laws; you can opt out as described in Section 8.
We require our service providers to protect your personal information and to use it only for the purposes for which we engage them.

5. International Data Transfers

Lilys AI operates globally. Personal information may be transferred to and processed in countries other than the one where you reside, including the Republic of Korea (where our subsidiary operates), the United States (where many of our service providers are located), and other countries where our service providers operate.
These countries may have data protection laws that differ from those of your country. Where required by law, we implement appropriate safeguards for international transfers, such as Standard Contractual Clauses or equivalent mechanisms. You may request more information about these safeguards by contacting support@lilys.ai.

6. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, unless a longer retention period is required or permitted by law. The criteria we use include:
•
the duration of our relationship with you (e.g., while your account is active);
•
legal obligations (e.g., payment records are typically retained for up to 5 years, and consumer dispute records for up to 3 years, or as otherwise required by applicable law);
•
the existence of legal claims or investigations; and
•
legitimate business needs (e.g., fraud prevention — up to 30 days after account closure).
•
connection activity logs — when you use a connected app, we log your user identifier, the time of the request, the name of the feature called, and the result code. We keep these logs for 365 days for security review, abuse prevention, and usage analytics. They do not contain the content of your material.
When personal information is no longer needed, we securely delete or anonymize it.

7. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. These include access controls, encryption in transit and at rest where appropriate, employee training, periodic security reviews, and vendor due diligence. No system is entirely secure, and we cannot guarantee absolute security.
In the event of a data breach affecting your personal information, we will notify you and applicable authorities as required by law.

8. Your Rights and Choices

Subject to applicable law, you have the following rights regarding your personal information:
•
Access — request a copy of the personal information we hold about you.
•
Correction — request correction of inaccurate or incomplete information.
•
Deletion — request deletion of your personal information.
•
Portability — receive a copy of certain information in a portable format.
•
Object or restrict — object to or request restriction of certain processing, including direct marketing.
•
Withdraw consent — withdraw consent at any time where processing is based on consent (without affecting the lawfulness of prior processing).
•
Opt out of "sale" or "sharing" (U.S. residents) — direct us not to share your personal information for cross-context behavioral advertising. You can do this by clicking "Do Not Sell or Share My Personal Information" in our website footer, sending a Global Privacy Control (GPC) signal from your browser, or emailing support@lilys.ai.
•
Limit the use of sensitive personal information (U.S. residents, where applicable) — direct us to limit our use of sensitive personal information.
•
Lodge a complaint with your local data protection authority.
How to exercise your rights. Email support@lilys.ai or use the in-app request form. We will verify your identity, typically by matching your account email, before responding. We respond within the timeframe required by applicable law (generally up to 30 days, extendable where permitted). You may also designate an authorized agent to submit a request on your behalf, where permitted by law.
We will not discriminate against you for exercising your privacy rights.
You can also opt out of marketing emails at any time by clicking the "unsubscribe" link in any marketing email or by adjusting your account settings.

9. Children's Privacy

The Services are not directed to children under 13 (or the equivalent minimum age in your jurisdiction, such as 14 in South Korea). We do not knowingly collect personal information from children below the applicable minimum age without verifiable parental or guardian consent. If we learn that we have collected such information without the required consent, we will delete it promptly. Parents or guardians who believe their child has provided us with personal information may contact support@lilys.ai
We do not knowingly sell or share the personal information of users under 16.

10. Third-Party Links

The Services may contain links to third-party websites or services. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review their privacy policies before providing them with personal information.

11. Changes to This Policy

We may update this Policy from time to time. Material changes will be posted on this page with an updated "Effective Date," and where required by law, we will provide additional notice (e.g., via email or in-app notice). Your continued use of the Services after the changes take effect constitutes acceptance of the revised Policy.

12. Contact Us

If you have questions about this Policy or our privacy practices, or if you wish to exercise your privacy rights, please contact us:
Made with Slashpage