Legal

Privacy Policy

Questions about this document? Email lili@heylili.io.

1. Introduction

Welcome to LiLi (“we,” “us,” “our”), an autonomous AI-powered personal branding platform accessible at heylili.io and through our associated applications. LiLi is operated by LiLi AI.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, create an account, or use our services. It applies to all users worldwide, including residents of the European Economic Area (EEA), the United Kingdom, California, and other jurisdictions with specific data protection regulations.

By accessing or using our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, please discontinue use of our services immediately.

2. Information We Collect

2.1 Information You Provide Directly

Account registration data: name, email address, password, and profile information
Professional profile details: job title, industry, company name, professional bio, and personal branding goals
Brand assets: profile photos, logos, brand colors, typography preferences, and voice/tone descriptions
Content preferences: topics of interest, content pillars, target audience descriptions, and posting schedules
Payment and billing information: processed securely through our third-party payment processor
Communications: messages, feedback, support requests, and survey responses you send to us

2.2 Information from Connected Platforms

When you connect your social media accounts to LiLi, we may collect:

Profile information from your connected social media accounts
Post performance data, including engagement metrics (likes, comments, shares, impressions)
Follower and audience demographic data (as provided by the platforms)
Historical content and posting patterns

We only access data that you explicitly authorize through each platform’s OAuth consent flow. You may revoke access at any time through your account settings or directly through the connected platform.

2.3 Information Collected Automatically

Device and browser information: IP address, browser type, operating system, and device identifiers
Usage data: pages visited, features used, click patterns, session duration, and interaction logs
Cookies and similar technologies: as described in Section 9 of this policy
Log data: server logs, error reports, and performance metrics

2.4 AI-Generated and Processed Data

As an AI-powered service, LiLi generates and processes the following data:

Voice profile models derived from your writing style, tone, and content preferences
Content strategies, written content, and creative assets generated by our AI agents on your behalf
Performance analytics and optimization recommendations based on your content history
Interaction logs between you and our AI systems (including approval and feedback data)

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Delivery

To create and manage your account
To generate personalized content strategies, written posts, and visual creatives using AI
To publish approved content to your connected social media platforms
To analyze content performance and refine future strategies through feedback loops
To process payments and manage your subscription

3.2 Service Improvement

To improve our AI models and content generation quality (using aggregated, de-identified data)
To develop new features and optimize user experience
To monitor service performance, uptime, and security
To conduct internal research and analytics

3.3 Communications

To send transactional emails (account confirmations, content approvals, billing receipts)
To send service-related notifications (weekly strategy summaries, performance reports)
To send marketing communications (with your consent, where required by law)
To respond to your inquiries and support requests

3.4 Legal and Safety

To comply with applicable laws, regulations, and legal processes
To enforce our Terms of Service and protect our rights
To prevent fraud, abuse, and security threats

4. Legal Bases for Processing (GDPR)

For users in the EEA and UK, we process your personal data based on the following legal grounds:

5. AI-Specific Disclosures

LiLi uses artificial intelligence extensively to deliver its core services. We believe in transparency about how AI interacts with your data.

5.1 How AI Processes Your Data

Our AI agents analyze your profile, brand voice, industry trends, and content performance to generate personalized content strategies and creative assets. This includes:

Analyzing your writing style and tone to build a voice profile model
Generating content strategies based on your goals, audience, and platform best practices
Creating written posts and visual creatives tailored to your brand
Optimizing content timing and format based on performance feedback

5.2 Third-Party AI Providers

We use third-party AI model providers to power certain aspects of our service, including content generation, image creation, and natural language processing. When your data is sent to these providers:

Data is transmitted securely using encryption in transit
We maintain data processing agreements with all AI providers
Your content is not used to train third-party AI models (subject to our agreements with those providers)
We select providers that offer enterprise-grade data protection commitments

5.3 Automated Decision-Making

LiLi uses automated decision-making for content strategy generation, creative routing, and scheduling optimization. These decisions:

Are subject to your review and approval before any content is published
Can be overridden, modified, or rejected by you at any point in the workflow
Do not produce legal or similarly significant effects on you

You have the right to request human review of any automated decision that materially affects your use of our services.

6. How We Share Your Information

We do not sell your personal information. We share data only in the following circumstances:

Service Providers: We engage trusted third-party companies to perform functions on our behalf, including cloud hosting, payment processing, AI model inference, analytics, and customer support. These providers are contractually obligated to protect your data and use it only for the services they provide to us.

Connected Platforms: When you authorize LiLi to publish content, we share the necessary data (post content, images, scheduling information) with your connected social media platforms through their official APIs.

Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of LiLi, our users, or the public.

Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change and the choices available to you.

With Your Consent: We may share your information for purposes not described in this policy with your explicit consent.

7. International Data Transfers

LiLi operates globally, and your data may be processed in countries other than your country of residence. When we transfer personal data outside the EEA, UK, or other jurisdictions with data transfer restrictions, we ensure appropriate safeguards are in place, including:

Standard Contractual Clauses (SCCs) approved by the European Commission
Data processing agreements with all sub-processors
Encryption of data in transit and at rest
Regular assessment of third-country data protection adequacy

8. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. Specifically:

Account data: Retained for the duration of your active subscription plus 30 days after account deletion to allow for reactivation.

Generated content and strategies: Retained for the duration of your subscription. Upon account deletion, all generated content is permanently deleted within 90 days.

Voice profile models: Deleted within 30 days of account termination.

Usage and analytics data: Retained in aggregated, de-identified form for up to 24 months for service improvement purposes.

Payment records: Retained as required by applicable tax and financial regulations (typically 7 years).

Support communications: Retained for up to 24 months after resolution.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience. We categorize these as:

Strictly Necessary Cookies: Required for the website to function properly (authentication, security, load balancing). These cannot be disabled.

Functional Cookies: Enable enhanced functionality and personalization, such as remembering your preferences and settings.

Analytics Cookies: Help us understand how visitors interact with our website, allowing us to improve our services. These are only placed with your consent where required.

Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness. These are only placed with your explicit consent.

You can manage your cookie preferences at any time through our cookie consent banner or your browser settings. Note that disabling certain cookies may affect website functionality.

10. Your Rights

Depending on your jurisdiction, you may have some or all of the following rights regarding your personal data:

10.1 Rights for All Users

Access: Request a copy of the personal data we hold about you.

Correction: Request correction of inaccurate or incomplete personal data.

Deletion: Request deletion of your personal data, subject to legal retention requirements.

Data Portability: Request your data in a structured, commonly used, machine-readable format.

Withdraw Consent: Withdraw consent for processing based on consent, at any time.

Disconnect Platforms: Revoke LiLi’s access to any connected social media platform at any time.

10.2 Additional Rights for EEA/UK Residents (GDPR)

Restriction of Processing: Request that we restrict processing of your data in certain circumstances.

Object to Processing: Object to processing based on legitimate interests, including profiling.

Automated Decision-Making: Not be subject to decisions based solely on automated processing that produce legal or similarly significant effects.

Lodge a Complaint: File a complaint with your local data protection supervisory authority.

10.3 Additional Rights for California Residents (CCPA/CPRA)

Right to Know: Request disclosure of the categories and specific pieces of personal information collected.

Right to Delete: Request deletion of personal information collected from you.

Right to Opt Out: Opt out of the sale or sharing of personal information. Note: LiLi does not sell personal information.

Right to Non-Discrimination: Exercise your rights without receiving discriminatory treatment.

To exercise any of these rights, please contact us at lili@heylili.io. We will respond within the timeframes required by applicable law (30 days for GDPR, 45 days for CCPA).

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

Encryption: All data is encrypted in transit (TLS 1.2+) and at rest (AES-256).

Access Controls: Role-based access controls and multi-factor authentication for internal systems.

Infrastructure Security: Our services are hosted on enterprise-grade cloud infrastructure with SOC 2 compliance.

Monitoring: Continuous security monitoring, vulnerability scanning, and incident response procedures.

Vendor Assessment: Regular security assessments of all third-party service providers.

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but commit to promptly notifying affected users and relevant authorities in the event of a data breach, in accordance with applicable law.

12. Children’s Privacy

LiLi is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at lili@heylili.io.

13. Third-Party Links and Services

Our website and services may contain links to third-party websites, platforms, or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services before providing them with your personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

Notify you by email: at the address associated with your account.

Display a notice: on our website and/or within the application.

Update the effective date: at the top of this policy.

Your continued use of our services after the effective date of a revised policy constitutes your acceptance of the changes. If you do not agree with the updated policy, you should discontinue use and request deletion of your account.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: lili@heylili.io

Website: https://heylili.io

Operator: LiLi AI

For EEA/UK residents, if you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with your local data protection supervisory authority.

For California residents, you may also designate an authorized agent to submit requests on your behalf by providing written authorization.