Privacy Policy

This Privacy Policy explains how Lylu ("Lylu," "we," "our," or "us") collects, uses, and protects your information when you visit aiworkspacelab.com or use our service (the "Service"). By using the Service you agree to the practices described here.

1. Information we collect

We collect the following categories of information:

• Account information — name, email address, and password, provided through our authentication partner Clerk.
• Payment information — billing details processed directly by Stripe. We do not store full card numbers on our servers.
• Usage data — searches performed, filters applied, leads viewed and exported, and timestamps, stored to operate the Service and bill credits accurately.
• Device and log data — IP address, browser type, device identifiers, and access logs collected automatically.
• Cookies — used for authentication sessions and basic analytics. You can disable cookies in your browser, but the Service may not function correctly.

2. How we use information

• To provide, maintain, and improve the Service.
• To process payments and manage your subscription.
• To communicate with you about your account, product updates, and customer support.
• To prevent fraud, abuse, and violations of our Terms of Service.
• To comply with legal obligations.

3. Lead data and public sources

The business records displayed in the Service are aggregated from publicly available sources, including public directories, business listings, and public-facing social profiles. We do not knowingly sell sensitive personal information. If you are a business owner and wish to have your record corrected or removed, contact hello@aiworkspacelab.com and we will respond within 30 days.

4. Third-party processors

We share data only with the service providers needed to operate the Service:

• Stripe — payment processing and fraud prevention.
• Clerk — authentication and identity management.
• Supabase — application database hosting.
• Vercel — application hosting and CDN.

Each provider is contractually bound to safeguard data they process on our behalf.

5. Data retention

We retain account and usage data for as long as your account is active and for a reasonable period afterward to comply with legal, accounting, and reporting obligations. You may request deletion at any time as described below.

6. Your rights

Depending on your jurisdiction (including the EU under GDPR and California under CCPA), you may have the right to access, correct, delete, or port your personal data, and to object to certain processing. To exercise these rights, email hello@aiworkspacelab.com. We will respond within 30 days.

7. Security

We use industry-standard encryption in transit (TLS) and at rest, role- based access controls, and audit logging. No system is perfectly secure; we cannot guarantee absolute protection.

8. International transfers

Lylu operates from the United States. If you access the Service from outside the US, you consent to the transfer of your data to the United States where our infrastructure is located.

9. Children

The Service is not intended for individuals under 16. We do not knowingly collect data from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or via in-product notice. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact

For any privacy-related question or request, contact us at hello@aiworkspacelab.com.