Privacy Policy

Last Updated: January 13, 2025

1. Introduction

LYM Inc. ("LYM," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

By using LYM, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our services.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, username, password, profile picture
  • Artist Verification: Legal name, tax information, bank account details, government ID
  • Profile Information: Bio, location, music preferences, social media links
  • Content: Posts, comments, reviews, photos, music uploads
  • Transaction Data: Purchase history, payment information (processed by third parties)
  • Communications: Messages, support tickets, feedback

2.2 Information We Collect Automatically

  • Device Information: Device type, operating system, browser type, unique device identifiers
  • Usage Data: Pages viewed, features used, interaction with content, search queries
  • Location Data: IP address, timezone, general geographic location
  • Cookies and Tracking: Session cookies, preference cookies, analytics cookies
  • Log Data: Server logs, error reports, performance data

2.3 Information from Third Parties

  • Social Media: Information from connected social accounts
  • Payment Providers: Transaction confirmations and status
  • Analytics Partners: Demographic and interest data
  • Music Services: Listening history and preferences (with your permission)

3. How We Use Your Information

3.1 To Provide Services

  • Create and manage your account
  • Process transactions and payments
  • Deliver content and features
  • Enable artist-fan interactions
  • Distribute LYM tokens and rewards

3.2 To Improve Our Platform

  • Analyze usage patterns and trends
  • Develop new features and services
  • Optimize user experience
  • Conduct research and analytics
  • Test and troubleshoot functionality

3.3 To Communicate

  • Send service notifications and updates
  • Respond to inquiries and support requests
  • Provide marketing communications (with consent)
  • Send transaction confirmations
  • Deliver important platform announcements

3.4 For Safety and Security

  • Detect and prevent fraud
  • Monitor for violations of Terms of Service
  • Protect user safety and platform integrity
  • Comply with legal obligations
  • Enforce our policies and agreements

4. How We Share Your Information

4.1 With Your Consent

We share information when you explicitly authorize us to do so, such as when you connect third-party services or share content publicly.

4.2 With Artists and Fans

  • Public profile information is visible to all users
  • Content you post is shared according to your privacy settings
  • Transaction details are shared between buyers and sellers
  • Engagement metrics are shared with artists (anonymized)

4.3 With Service Providers

We work with trusted third parties to provide services including:

  • Payment processing (Stripe, PayPal)
  • Cloud hosting (AWS, Google Cloud)
  • Analytics (Google Analytics, Mixpanel)
  • Email services (SendGrid, Mailchimp)
  • Customer support (Zendesk)

4.4 For Legal Reasons

We may disclose information when required by law or to:

  • Comply with legal processes
  • Respond to government requests
  • Protect our rights and property
  • Prevent illegal activities
  • Protect user safety

4.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Security

We implement industry-standard security measures to protect your information:

  • Encryption: SSL/TLS encryption for data in transit
  • Storage: Encrypted storage for sensitive data at rest
  • Access Controls: Role-based access for employees
  • Monitoring: 24/7 security monitoring and alerts
  • Testing: Regular security audits and penetration testing
  • Compliance: PCI DSS compliance for payment data

Despite our efforts, no system is 100% secure. We cannot guarantee absolute security of your information.

6. Your Privacy Rights

6.1 Access and Portability

You can request a copy of your personal data in a structured, machine-readable format.

6.2 Correction

You can update or correct your information through your account settings or by contacting us.

6.3 Deletion

You can request deletion of your account and personal data, subject to legal retention requirements.

6.4 Restriction

You can request that we limit the processing of your personal data in certain circumstances.

6.5 Objection

You can object to certain processing of your data, including marketing communications.

6.6 Withdrawal of Consent

You can withdraw consent for data processing at any time through your privacy settings.

7. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

  • Right to Know: Request disclosure of personal information collected
  • Right to Delete: Request deletion of personal information
  • Right to Opt-Out: Opt-out of the sale of personal information (we do not sell personal data)
  • Right to Non-Discrimination: Equal service regardless of exercising privacy rights

To exercise these rights, contact us at privacy@lym.app or call 1-800-LYM-CCPA.

8. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation:

8.1 Legal Basis for Processing

  • Consent: You have consented to the processing
  • Contract: Processing is necessary to fulfill our contract with you
  • Legal Obligation: We must process data to comply with law
  • Legitimate Interests: Processing is necessary for our legitimate business interests

8.2 Data Protection Officer

Contact our DPO at: dpo@lym.app

8.3 Data Transfers

We transfer data outside the EEA using appropriate safeguards including Standard Contractual Clauses.

8.4 Supervisory Authority

You have the right to lodge a complaint with your local data protection authority.

9. Children's Privacy

LYM is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected information from a child under 13, we will delete it promptly.

For users aged 13-18:

  • Parental consent may be required in some jurisdictions
  • Certain features may be restricted
  • Additional privacy protections apply

10. Cookies and Tracking Technologies

10.1 Types of Cookies We Use

  • Essential Cookies: Required for platform functionality
  • Performance Cookies: Help us understand usage patterns
  • Preference Cookies: Remember your settings and preferences
  • Marketing Cookies: Used for targeted advertising (with consent)

10.2 Managing Cookies

You can control cookies through:

  • Browser settings
  • Our cookie preference center
  • Third-party opt-out tools

10.3 Do Not Track

We currently do not respond to Do Not Track signals, but you can manage tracking through our privacy settings.

11. Third-Party Links and Services

LYM may contain links to third-party websites and services. We are not responsible for their privacy practices. We encourage you to review their privacy policies.

Third-party integrations include:

  • Social media platforms (Facebook, Twitter, Instagram)
  • Music streaming services (Spotify, Apple Music)
  • Payment providers (Stripe, PayPal)
  • Analytics services (Google Analytics)

12. Data Retention

We retain your information for as long as necessary to:

  • Provide our services
  • Comply with legal obligations
  • Resolve disputes
  • Enforce agreements

Retention periods vary by data type:

  • Account Data: Duration of account plus 30 days
  • Transaction Records: 7 years for tax compliance
  • Content: Until deletion requested or account terminated
  • Analytics Data: 2 years
  • Marketing Data: Until consent withdrawn

13. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including:

  • Standard Contractual Clauses
  • Adequacy decisions
  • Privacy Shield certification (where applicable)
  • Consent for specific transfers

14. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes through:

  • Email notification
  • Platform notification
  • Prominent notice on our website

Continued use after changes indicates acceptance of the updated policy.

15. Contact Information

For privacy-related questions or to exercise your rights, contact us:

Email: privacy@lym.app

Data Protection Officer: dpo@lym.app

Address: LYM Inc., Privacy Department, 123 Music Lane, Nashville, TN 37201

Phone: 1-800-LYM-PRIV

Online Form: lym.app/privacy-request

We aim to respond to all privacy requests within 30 days.

16. State-Specific Rights

Residents of certain states may have additional privacy rights:

  • Nevada: You may opt-out of the sale of personal information (we do not sell data)
  • Vermont: We will not share your information without consent
  • Virginia: Rights similar to CCPA apply
  • Colorado: Enhanced privacy rights under CPA
  • Connecticut: Privacy rights under CTDPA