Privacy Policy

Information We Collect

When you use Lytms, we collect information you provide directly, such as your email address when you create an account, URLs you submit for scoring, and the marketing copy you enter into the editor.

We also collect usage data automatically, including pages visited, features used, and session duration. This helps us improve the product and understand how our scoring tools are used.

How We Use Your Information

We use the information we collect to provide and improve the Lytms scoring and generation services, process payments, send transactional emails (read delivery, score alerts, invitations), and maintain the security of your account.

We do not sell your personal information to third parties. Marketing copy you submit is processed through AI models for scoring and generation purposes only.

Connected Accounts & Google User Data

Lytms lets you connect third-party analytics and advertising accounts so we can show you how your marketing is performing. Connecting an account is always optional and initiated by you from Settings > Integrations, and you can disconnect at any time.

What Google data we access. If you connect a Google account, Lytms uses read-only Google API scopes only: Google Analytics 4 (analytics.readonly), Google Ads (adwords), and Google Search Console (webmasters.readonly). From Google Analytics we read aggregated reporting metrics such as sessions and conversions for pages on the property you connect. From Google Ads we read your ad creatives, their destination URLs, and performance metrics such as clicks, spend, and conversions. From Google Search Console we read your site's search performance for the verified property you connect: the search queries and pages that bring visitors from Google Search, with clicks, impressions, click-through rate, and average position. We request read-only access only and never create, edit, or delete anything in your Google accounts.

How we use it. We use this Google data solely to provide the features you connected it for: showing how your landing-page changes affected real traffic and conversions, checking whether your ads and the pages they point to are consistent, and surfacing the search queries and pages that bring visitors to your site from Google Search. It is displayed only inside your own Lytms account and to members of your workspace.

How we share, transfer, and disclose it. We do not sell your Google user data, and we do not share, transfer, or disclose it to any third party for that party's own purposes. We never share it with data brokers, advertisers, or ad networks, and we never use it for advertising. We disclose it only to the service providers (subprocessors) that operate Lytms on our behalf, and only to deliver the features described above: Vercel (application hosting and compute) and Supabase (encrypted database storage) for connected-account data generally, and our third-party AI provider for Google Ads creative text only, solely to generate the ad-to-page coherence analysis you request. Google Analytics and Google Search Console data are never sent to any AI provider. Each of these providers is contractually bound to use the data only to provide their service to us, and is prohibited from using it to develop, improve, or train its own AI/ML models.

How we protect it. Google user data is encrypted in transit and at rest. OAuth access and refresh tokens are stored securely with restricted access and are used only to make the read-only API calls described above.

Limited Use. Lytms's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is never used to develop, improve, or train generalized AI/ML models, and is never transferred to any third party for that purpose.

Data Retention & Deletion

We retain Google user data only while the account it came from remains connected to Lytms. When you disconnect an account (Settings > Integrations > Disconnect), we delete the stored OAuth tokens and the associated Google user data (such as synced analytics and ad metrics) from our systems. You can also fully revoke Lytms's access from your Google Account security settings at any time. When you delete your Lytms account, all of your account data, including any connected-account data, is deleted.

You can also request deletion of your data at any time by emailing privacy@lytms.ai. We honor verified deletion requests promptly.

Data Security

We use industry-standard security measures to protect your data, including encryption in transit and at rest. Access to production systems is restricted to authorized personnel only.

Score results and generated content are stored in your account and are accessible only to you and members of your workspace.

Cookies & Analytics

We use essential cookies to maintain your session and preferences. We use PostHog for product analytics to understand usage patterns and improve the product. You can opt out of analytics tracking at any time.

Contact

If you have questions about this privacy policy or your data, contact us at privacy@lytms.ai.