Privacy Policy
This is a draft for legal review, and may change before the service launches.
Lygo Labs (India) provides Project Lens and decides how the personal data in it is used. This policy says what is collected, why, who handles it, how long it is kept and how to use your rights, including under India's Digital Personal Data Protection Act, 2023.
What is collected, and why
- Your account: your name, email address, your workspaces and your role in each, from signing in (through Clerk), to sign you in and show who did what.
- Your work: the ideas you describe, your answers to the scoper's questions, features, POCs and their versions, change requests, settings and the Copilot usage reports you upload, to provide the service.
- Your workspace's model key, if you add one: stored sealed with AES-GCM, shown only as its last four characters, and sent only to Anthropic.
- Approvals: the name and email address of the approver you ask, their decision and comment, and the codes sent to confirm it is them.
- Billing: your plan and the state of your subscription. Razorpay takes the payment: we never see or store your card number or UPI details.
- Service health: how many requests of each kind were answered and how long they took (never what was in them), and error reports cut to the error's type and where in the code it happened, never your content, the page address or who you are.
- Page views: Vercel Web Analytics counts page views and visitors without cookies, to see which pages people use. It gets the page's address cut down first (never an approval link's code, never what follows a "?"), the referring site, and your browser, system and country; it doesn't identify you across days or sites.
There are no advertising trackers and no analytics cookies. The only cookies are the ones that keep you signed in.
AI and your ideas
When you scope an idea, the idea and your answers are sent to Anthropic's AI model to draft the scope, either on our account or on your workspace's own key. They are never used to train a model. Costs are computed by the estimator, not by the AI.
Who handles data for us
These services process data for us, under contracts that keep it confidential and use it only to provide their service. They store data in the United States (Razorpay in India), so your data is transferred there.
- Vercel: hosting the app, storing the reports and workbooks you download, and counting page views.
- Neon: the database that holds your workspace's records.
- Clerk: signing in, and your name, email address and workspaces.
- Anthropic: the AI model that drafts scopes.
- Resend: sending approval requests and codes by email.
- Sentry: error reports, without your content.
- Razorpay: taking payments in Indian rupees and sending receipts; it stores data in India.
- GitHub: keeping the nightly backups of the database, encrypted so that only we can open them.
Personal data is never sold, and never shared for advertising.
How long it is kept
- Your workspace's records: while the workspace exists. Ask at info@lygolabs.com to delete them, and they are deleted within 30 days.
- Your name and email address: removed when you delete your account.
- Approval links: 14 days. Confirmation codes: 10 minutes. Download links: 5 minutes.
- Request counts for service health: a week. Error reports: up to 90 days.
- Invoices and payment records: as long as the law requires.
- Backups of the database: 14 days, encrypted. Records you delete leave the backups as they expire.
Security
Data is encrypted in transit and at rest. Each workspace's records are kept apart, and its members are the only people who can see them. Model keys are sealed, and links and codes are stored only as fingerprints.
Your rights
You can ask for a summary of your personal data and how it is used, to correct or complete it, to have it deleted, to withdraw a consent you gave, and to name someone to act for you. Write to info@lygolabs.com; you'll get an answer within 30 days.
If you aren't satisfied with the answer, you can complain to the Data Protection Board of India.
Children
The service is for people aged 18 and over, and doesn't knowingly collect children's data.
Changes to this policy
We'll post any change here with a new date, and tell you by email or in the app before a change that matters to you applies.
Contact and Grievance Officer
Lygo Labs, India. For privacy questions, requests and grievances, email info@lygolabs.com.