PRIVACY POLICY

Privacy Policy

Effective Date: March 15, 2026Last Updated: March 15, 2026legal@lytus.co

Plain English summary: We collect only what we need to run the service. We don't sell your data. We don't share it with third parties for advertising. We monitor public data sources on behalf of our users — not private accounts or personal devices. You can request deletion of your data at any time.

1. Who We Are

Lytus AI ("Lytus," "we," "our," "us") operates the Lytus Outreach platform, including the C.O.R.E (Cognitive Outreach & Research Engine) system, accessible at lytus.space and related subdomains.

C.O.R.E is a B2B lead intelligence platform that monitors publicly available digital signals — including job postings, funding announcements, company news, and public review platforms — to surface buying intent indicators for our customers.

By using our Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services.

Contact: legal@lytus.co

2. What Data We Collect

2.1 Data You Provide to Us

  • Account information: Name, business email address, company name.
  • Waitlist applications: Business type, deal size, outreach challenges, reason for applying — used to evaluate eligibility.
  • Payment information: Processed entirely by Paystack. We never store card numbers or payment credentials.
  • Avatar / ICP profiles: Descriptions of your ideal customer profile that you configure in the platform.
  • Feedback: Bug reports, ideas, and reviews submitted through the in-app feedback system.
  • Communications: Emails or messages you send to us directly.

2.2 Data We Collect Automatically

  • Usage data: Pages visited, features used, session duration, button clicks.
  • Device and browser data: Browser type, operating system, screen size, IP address.
  • Performance data: Page load times and errors, collected via Vercel Speed Insights.
  • Analytics: Aggregate usage patterns via Vercel Analytics. No cross-site tracking.

2.3 Public Data We Monitor on Your Behalf

As part of the C.O.R.E signal engine, we collect and process publicly available business data from sources including:

  • Job boards and company career pages
  • Funding databases and press releases
  • Public business review platforms (G2, Trustpilot, Google Reviews)
  • Company websites and news pages
  • Public ad transparency libraries (Meta, Google)
  • Other indexable public sources

This data is about businesses and their public activity — not about private individuals. We do not access private profiles, private social media content, or any data that requires a login to view.

3. How We Use Your Data

  • To provide, operate, and improve the C.O.R.E platform
  • To process waitlist applications and communicate approval decisions
  • To activate and manage your subscription
  • To send transactional emails (onboarding, lead alerts, billing notifications)
  • To respond to support requests
  • To send product updates and new feature announcements (you can opt out at any time)
  • To comply with legal obligations
  • To detect and prevent fraud or abuse

We do not use your data for advertising, profiling for third-party purposes, or sell it to any third party under any circumstances.

4. Third-Party Services We Use

ServicePurposeData Shared
SupabaseDatabase and authenticationAccount data, usage data
PaystackPayment processingEmail, payment details (not stored by us)
ZeptoMailTransactional email deliveryEmail address, name
AnthropicAI signal analysisPublic business data only — no personal data
VercelHosting and analyticsIP address, usage data (anonymised)
TrustpilotReview collectionEmail, name (only on invitation)

All third-party processors are contractually required to protect your data in accordance with applicable privacy law.

5. Data Storage and Security

Your data is stored on Supabase infrastructure hosted on AWS. We implement the following security measures:

  • 256-bit SSL/TLS encryption for all data in transit
  • Row-level security (RLS) — users can only access their own data
  • Passwords are hashed using industry-standard algorithms — we never store plain-text passwords
  • Access to production databases is restricted to authorised personnel only

While we take security seriously, no system is perfectly secure. If you believe your account has been compromised, contact us immediately at security@lytus.co.

6. Data Retention

  • Active accounts: Retained for as long as your account is active.
  • Cancelled accounts: Data retained for 90 days after cancellation, then deleted.
  • Waitlist applications: Retained for 12 months from submission.
  • Payment records: Retained for 7 years as required by applicable financial regulations.
  • Feedback submissions: Retained indefinitely unless deletion is requested.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate data.
  • Erasure: Request deletion of your data ("right to be forgotten").
  • Portability: Request your data in a machine-readable format.
  • Objection: Object to processing based on legitimate interests.
  • Opt-out of marketing emails: Use the unsubscribe link in any email or email us directly.

To exercise any of these rights, email legal@lytus.co. We will respond within 30 days.

8. Cookies

We use essential cookies required for the platform to function (authentication sessions, preferences). We also use analytics cookies via Vercel to understand how users interact with the platform.

We do not use advertising cookies or sell cookie data to third parties.

See our full Cookie Policy for details.

9. Children's Privacy

Lytus is a B2B platform intended for businesses and professionals aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has submitted data, contact us at legal@lytus.co and we will delete it immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page and, where changes are material, notify active users by email.

Continued use of the Services after changes constitutes acceptance of the updated policy.

11. Contact Us

Lytus AI

Email: legal@lytus.co

Website: lytus.space

For data deletion requests, billing disputes, or security concerns, please use the relevant email and include your account email address so we can locate your data.