Privacy Policy

We use collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve the Service, including account management and subscription fulfillment.
• Authentication & Security: To verify your identity, protect against fraud, and ensure the security of your account and our systems.
• Communication: To send transactional emails (account confirmations, subscription updates, security alerts) and respond to your inquiries.
• Analytics & Improvement: To understand usage patterns, diagnose technical issues, and improve Service functionality and user experience.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests.
• Enforcement: To enforce our Terms of Service and protect our rights, property, and safety, and that of our users.

We may share your information only in the following circumstances:

• Service Providers: We share information with third-party vendors who perform services on our behalf, including:
  • Clerk – Authentication and user management
  • Paddle – Payment processing and subscription management (Merchant of Record)
  • Vercel – Website hosting and edge delivery
  • Analytics providers – Anonymized usage analytics

  These providers are contractually obligated to protect your data and use it only for the services they provide to us.

• Legal Requirements: We may disclose information if required by law, subpoena, court order, or other legal process, or if we believe disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
• Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.
• With Your Consent: We may share information for other purposes if you provide explicit consent.

We implement industry-standard technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These include:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication through Clerk with support for multi-factor authentication
• Regular security assessments and monitoring
• Access controls limiting employee access to personal data
• Secure infrastructure hosted on reputable cloud providers

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Account Data: Retained while your account is active and for a reasonable period thereafter for legal and business purposes.
• Transaction Records: Retained as required by tax and accounting laws (typically 7 years).
• Usage Data: Generally retained in aggregated/anonymized form for analytics purposes.
• Communications: Retained as necessary to resolve disputes and enforce agreements.

Upon account deletion, we will delete or anonymize your personal information within a reasonable timeframe, except where retention is required by law or for legitimate business purposes.

We use cookies and similar technologies for the following purposes:

Most web browsers allow you to control cookies through settings. Note that disabling certain cookies may impact Service functionality.

Depending on your jurisdiction, you may have certain rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Portability: Request a copy of your data in a portable format.
• Objection: Object to certain processing of your personal information.
• Withdrawal of Consent: Where processing is based on consent, you may withdraw consent at any time.

To exercise these rights, please contact us at info@lilibot.ai. We will respond to your request within the timeframe required by applicable law.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Right to Opt-Out of Sale/Sharing: We do NOT sell or share your personal information for cross-context behavioral advertising.

To submit a CCPA/CPRA request, email us at info@lilibot.ai with the subject line "California Privacy Request." We may require verification of your identity before processing your request.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) and similar laws:

• Legal Basis: We process your data based on: (a) your consent, (b) performance of a contract, (c) our legitimate interests, or (d) compliance with legal obligations.
• Data Transfers: Your data may be transferred to and processed in the United States. We rely on Standard Contractual Clauses and other lawful transfer mechanisms.
• Supervisory Authority: You have the right to lodge a complaint with your local data protection authority.

For GDPR-related inquiries, contact us at info@lilibot.ai.

The Service is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at info@lilibot.ai. We will take steps to delete such information.

The Service may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through our Service.

This includes but is not limited to: social media platforms (X/Twitter, Discord, Telegram), payment processors (Paddle, Ko-fi, Coinbase Commerce), and authentication providers (Google, GitHub).

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. There is no uniform standard for interpreting DNT signals. Currently, the Service does not respond to DNT signals, but we do not engage in cross-site tracking for advertising purposes.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. For significant changes, we may also send you an email notification.

Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

We will endeavor to respond to all inquiries within 30 days, or sooner as required by applicable law.

You agree to defend, indemnify, and hold harmless LiliBot, AiGentsy, and their officers, directors, employees, contractors, agents, licensors, and suppliers from and against any claims, liabilities, damages, judgments, awards, losses, costs, expenses, or fees (including reasonable attorneys' fees) arising out of or relating to your violation of this Privacy Policy or your use of the Service.

This Privacy Policy shall be governed by and construed in accordance with the laws of the State of California, United States, without regard to its conflict of law provisions. Any disputes arising under or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the state and federal courts located in California.

Before initiating any formal dispute resolution, you agree to first contact us at info@lilibot.ai to attempt to resolve the dispute informally.

If any provision of this Privacy Policy is held to be invalid, illegal, or unenforceable, the remaining provisions shall continue in full force and effect. The invalid or unenforceable provision shall be modified to the minimum extent necessary to make it valid and enforceable while preserving its original intent.