Summary Of Key Points
This Privacy Policy explains how Livy Labs ("we," "us," or "our") collects, stores, uses, and shares information when you use our website, private beta, APIs, SDKs, documentation, and related services (collectively, the "Services").
If you have questions or concerns, contact us at contact@livylabs.xyz. If you do not agree with this Privacy Policy, please do not use the Services.
What personal information do we process? We may process personal information depending on how you interact with us, the Services you use, and the information you choose to provide.
Do we process sensitive personal information? We do not intentionally collect sensitive personal information through the website or beta onboarding.
How do we process your information? We process information to provide, improve, secure, and administer the Services; communicate with you; prevent fraud and abuse; and comply with law.
When do we share information? We may share information with service providers, business partners, professional advisers, authorities when legally required, and in connection with business transfers.
How do we keep information safe? We use technical and organizational safeguards, but no electronic transmission or storage system can be guaranteed to be 100% secure.
What are your rights? Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, or to withdraw consent.
1. What Information Do We Collect?
Personal information you disclose to us
We collect personal information that you voluntarily provide when you contact us, request beta access, register for or use the Services, join a design partner process, subscribe to updates, or otherwise communicate with us.
The personal information we collect may include:
- names;
- email addresses;
- company names and roles;
- product or integration use cases;
- messages, feedback, support requests, and sales inquiries;
- account, workspace, and team information;
- API, SDK, dashboard, or beta configuration information; and
- wallet addresses, chain identifiers, transaction references, policy configuration, request metadata, approval metadata, receipt metadata, and operational logs when needed to provide the Services.
All personal information you provide must be true, complete, and accurate, and you should notify us of changes.
Information automatically collected
We automatically collect certain technical information when you visit, use, or navigate the Services. This information may include IP address, browser and device characteristics, operating system, language preferences, referring URLs, country or approximate location, pages viewed, timestamps, diagnostics, errors, and usage events.
This information is primarily needed to maintain security, operate the Services, debug issues, measure reliability, understand usage trends, and improve the product.
2. How Do We Process Your Information?
We process information for the following purposes:
- to create, authenticate, and manage accounts and workspaces;
- to deliver and operate requested Services;
- to respond to inquiries and provide support;
- to send administrative messages, product updates, security notices, and policy updates;
- to operate private beta and design partner workflows;
- to evaluate and improve the Services, product experience, marketing, and documentation;
- to identify usage trends and product reliability issues;
- to prevent fraud, abuse, security incidents, and unauthorized activity;
- to comply with legal obligations and respond to lawful requests; and
- to exercise, establish, or defend legal rights.
We process personal information only when we have a valid legal basis to do so, such as consent, contract performance, legitimate interests, legal obligations, or another lawful basis under applicable law.
3. When And With Whom Do We Share Personal Information?
We may share information in specific situations and with third parties who perform services for us or on our behalf. These providers may access information only as needed to perform their work and are expected to protect information they process for us.
Categories of third-party providers may include:
- cloud hosting, storage, and infrastructure providers;
- database and managed Postgres providers;
- email delivery providers, including AWS SES;
- security, logging, monitoring, and observability providers;
- customer support, sales, and communications tools;
- payment processors if paid plans are enabled;
- analytics and product usage tools;
- AI model or API providers where an enabled product feature requires them; and
- blockchain infrastructure providers, RPC providers, wallet tooling, transaction providers, or protocol APIs where an integration requires them.
Known infrastructure used or planned for the Services may include Google Cloud Platform, GCP Secret Manager, Neon, Amazon Web Services, AWS SES, and OpenAI where enabled. This list may change as the Services evolve.
We may also share or transfer information in connection with, or during negotiations of, any merger, financing, acquisition, reorganization, sale of company assets, or similar business transaction.
4. How Long Do We Keep Your Information?
We keep personal information only as long as necessary for the purposes described in this Privacy Policy unless a longer retention period is required or permitted by law.
For beta and product records, retention may depend on the relevant workspace, account, legal obligation, audit need, security need, or product requirement. When we no longer have a legitimate business need to process personal information, we will delete or anonymize it. If deletion is not immediately possible, such as information stored in backups, we will securely store it and isolate it from further processing until deletion is possible.
5. How Do We Keep Your Information Safe?
We use reasonable technical and organizational safeguards designed to protect personal information. These safeguards may include access controls, credential controls, logging, monitoring, least-privilege practices, encryption where appropriate, secret management, and operational security processes.
No electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure. You should access the Services only within a secure environment and protect your own devices, accounts, wallets, signers, and credentials.
6. Do We Collect Information From Minors?
We do not knowingly collect data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18 years old.
If we learn that personal information from a user under 18 has been collected, we will take reasonable steps to delete that information. If you believe we may have collected information from a child under 18, contact us at contact@livylabs.xyz.
7. What Are Your Privacy Rights?
Depending on your country, province, or state of residence, you may have rights to:
- know whether we process your personal information;
- access personal information we maintain about you;
- correct inaccurate personal information;
- request deletion of personal information;
- obtain a copy of personal information you previously shared with us;
- withdraw consent where processing is based on consent;
- opt out of certain processing, where applicable; and
- not be discriminated against for exercising privacy rights.
You can exercise privacy rights by contacting us at contact@livylabs.xyz. We may need to verify your identity before responding to a request. We will consider and act upon requests in accordance with applicable data protection laws.
If you want to review, change, or terminate your account, contact us using the same email address. We may retain some information as needed to prevent fraud, troubleshoot issues, enforce terms, assist investigations, or comply with legal requirements.
8. Controls For Do-Not-Track Features
Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") signal. Because no uniform technology standard for recognizing and implementing DNT signals has been finalized, we do not currently respond to DNT browser signals.
If a standard for online tracking is adopted that we must follow in the future, we will update this Privacy Policy.
9. Do United States Residents Have Specific Privacy Rights?
If you are a resident of a US state with applicable privacy laws, including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Montana, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia, you may have additional rights regarding your personal information.
Categories of personal information we may collect
In the past twelve months, we may have collected the following categories of personal information:
- Identifiers: name, email address, online identifier, IP address, account name, or similar identifiers.
- Customer records information: name, contact information, billing information if paid plans are enabled, and account details.
- Internet or network activity: browsing activity, page views, usage data, diagnostics, and interactions with the Services.
- Commercial information: beta interest, product use case, subscription or payment details if paid plans are enabled.
- Inferences: information derived from usage and interactions to understand preferences, product needs, or account activity.
We may also collect other personal information when you contact support, participate in surveys, join beta programs, receive Services, or ask us to respond to an inquiry.
How we use and share personal information
We use and share personal information as described in the sections above: "How Do We Process Your Information?" and "When And With Whom Do We Share Personal Information?"
We do not sell personal information. We have not sold personal information in the preceding twelve months. We also do not knowingly sell personal information of minors.
We may disclose personal information to service providers and contractors for business purposes under contracts designed to protect that information.
Your rights
Depending on where you live, your rights may include:
- right to know whether we process your personal data;
- right to access your personal data;
- right to correct inaccuracies;
- right to request deletion;
- right to obtain a copy of data you provided;
- right to opt out of targeted advertising, sale, sharing, or profiling where applicable;
- right to limit use or disclosure of sensitive personal information where applicable; and
- right to appeal a decision if we decline a privacy request.
To exercise these rights, email contact@livylabs.xyz. Authorized agents may submit requests where allowed by law, but we may require proof of authorization and may need to verify your identity.
If an appeal is available under your state law and we deny your appeal, you may have the right to submit a complaint to your state attorney general.
California Shine The Light
California Civil Code Section 1798.83 permits California residents to request information about categories of personal information disclosed to third parties for direct marketing purposes and the names and addresses of those third parties. To make such a request, contact us at contact@livylabs.xyz.
10. Usage Of Your Data To Train Large Language Models
We do not use customer data, workspace data, policy data, transaction request data, receipt data, or private beta data to train large language models.
Where the Services use third-party AI model providers for an enabled feature, we aim to configure available non-training or data-protection controls. You may request deletion of your personal information by contacting contact@livylabs.xyz, subject to legal, security, backup, and operational retention requirements.
11. Do We Make Updates To This Notice?
Yes. We may update this Privacy Policy as necessary to stay compliant with relevant laws and to reflect changes to the Services. The updated version will be indicated by a revised "Last updated" date.
If we make material changes, we may notify you by prominently posting a notice or by directly sending a notification. We encourage you to review this Privacy Policy periodically.
12. How Can You Contact Us About This Notice?
If you have questions or comments about this notice, email us at contact@livylabs.xyz.
13. How Can You Review, Update, Or Delete The Data We Collect From You?
Based on applicable law, you may have the right to request access to personal information we collect from you, details about how we have processed it, correction of inaccuracies, deletion, or withdrawal of consent.
To request review, update, export, or deletion of your information, contact contact@livylabs.xyz.