# Privacy Policy

## Last Updated: July 2025

### Overview
This Privacy Policy describes how we, Lyzr, Inc. (referred to as “Lyzr”, “we,” “our,” or “us”), act as a data controller, collecting, using, and sharing your personal information. This Privacy Policy applies to information collected when you visit our website, https://www.lyzr.ai ("Lyzr.Ai"), when you interact with features of our Site, when you interact with us through email, advertising, or social media campaigns, or when you use our services ("Services"). By accessing or using our Site or Services, you agree to this Privacy Policy.

With respect to our Services, we enter into data processing agreements with our customers and those agreements control our obligations. Individuals should refer to our customers’ privacy policies for information about how they collect, use, and share information.

This policy is intended to help you understand:
- Personal Information We Collect, Purpose for Processing & Categories of Third Parties Personal Information is Shared with;
- How We Collect Personal Information;
- How We Use and Share Personal Information;
- Legal Bases for Processing Personal Information;
- Data Retention Periods;
- Your Rights Under Applicable Law;
- How We Protect Personal Information;
- Your Choices With Respect to Your Personal Information; and
- How We Can Make Changes to this Policy.

### Data Subject Categories
We process personal data relating to the following categories of individuals:
- Platform Users: Individuals using our AI development services
- Website Visitors: Individuals browsing our website
- Marketing Contacts: Individuals who have subscribed to our communications
- Customer Contacts: Business contacts at client organizations
- Employees: Current and former staff (covered by separate Employee Privacy Notice)
- Vendors and Partners: Contacts at supplier and partner organizations

#### Personal Information We Collect, Purpose for Processing & Categories of Third Parties Personal Information is Shared with
We collect and process the following categories of personal data:
- **Identity Data**: Name, username, job title, company name
- **Contact Data**: Email address, telephone number, business address
- **Technical Data**: IP address, browser type, device information, operating system
- **Usage Data**: Platform interactions, feature usage, session duration
- **Account Data**: Login credentials, account preferences, billing information
- **Content Data**: Files, documents, and data uploaded to our platform
- **Communication Data**: Support tickets, chat messages, survey responses
- **Marketing Data**: Communication preferences, campaign interactions

#### How We Collect Personal Information
We collect personal information as follows:
- Information that is collected automatically about your interaction with the Site or Service through automatic tracking technologies (e.g., cookies);
- Information that you provide us when you fill out forms or questionnaires, respond to surveys, or interact with our marketing campaigns;
- We may receive information from third parties, including third party marketing and analytics tools;
- We may collect information through our social media accounts.

#### Information we Collect in Connection with Our Services
After establishing a relationship for our services, we may collect the following personal information:
- Name, email address, account and profile information, telephone number

### Legal Bases for Processing Personal Information
We process personal data on the following legal bases under Article 6 of the GDPR:

| Processing Purpose | Legal Basis | Personal Data Categories |
| --- | --- | --- |
| Service delivery and contract performance | Contract performance (Article 6(1)(b)) | Identity, Contact, Technical, Usage, Account, Content |
| Customer support | Contract performance (Article 6(1)(b)) | Identity, Contact, Communication |
| Platform improvement and analytics | Legitimate interests (Article 6(1)(f)) | Usage, Technical (anonymized where possible) |
| Marketing communications | Consent (Article 6(1)(a)) | Contact, Marketing preferences |
| Legal compliance | Legal obligation (Article 6(1)(c)) | All categories as required by law |
| Fraud prevention and security | Legitimate interests (Article 6(1)(f)) | Identity, Contact, Technical, Usage |

#### How We Use Personal Information
We use information collected about you to:
- Present the Site and its contents to you;
- Provide recommendations and customize the Services;
- Communicate with you about upcoming events, updates, or products;
- Validate information about you;
- Analyze the Site and Services;
- Remember your preferences;
- Send you notices, updates, and respond to your questions;
- Fulfill legal obligations and investigate misuses of the Site or Services.

#### How We Share Personal Information
We share personal information with:
- **Service Providers**: For data analytics, marketing, cloud storage, etc.;
- **Marketing Service Providers:** With analytics or social media for marketing;
- **Legal Authorities:** If necessary to enforce our rights or comply with the law;
- **Corporate Transactions:** In connection with mergers or sales of our business;
- **Consent**: with specified third parties.

### Data Retention Periods
We retain personal data for:

| Data Category | Retention Period | Legal Basis for Retention |
| --- | --- | --- |
| Customer Account Data | Duration of contract + 7 years | Legal and financial obligations |
| Marketing Data | Until consent withdrawn or 3 years of inactivity | Marketing purposes |
| Website Analytics | 26 months | Analytics and improvement |
| Support Communications | 7 years after resolution | Customer service records |
| Employee Data | See Employee Privacy Notice | Employment law requirements |
| Legal Documents | 7 years or as required by law | Legal compliance |

### International Data Transfers
We may transfer your personal data outside the EEA to various global locations for various services, ensuring compliance with relevant laws.

### European Data Privacy Rights
If you reside in the EEA, UK, or Switzerland, you have rights including:
- Right of access to personal information;
- Right of erasure when applicable;
- Right to object to processing; and others as per applicable law.

To submit a request, please contact us at [support@lyzr.ai](mailto:support@lyzr.ai).

### U.S. State Privacy Rights
If you live in certain U.S. states, you may have additional privacy rights regarding your personal information.

### Cookies and Similar Technologies
We use cookies for functionality and analytics. You can control cookies through your browser settings.

### Changes to This Policy
We may change this policy from time to time and will notify you of any material changes.

### Contact Us
For questions about our privacy practices, contact us via email at [support@lyzr.ai](mailto:support@lyzr.ai) or reach our Data Protection Officer at [dpo@lyzr.ai](mailto:dpo@lyzr.ai).