Privacy Policy

This policy is issued by Lytbub Technologies LLC ("Lytbub", "we", "us"), an Arizona LLC operating the Lytbub Studios brand at lytbub.studio and the Lytbub HQ client portal.

For privacy questions, contact admin@lytbub.com or write to us at Phoenix, AZ.

You give us: account info (name, email, phone, business name, hashed password), lead form submissions, project content (files, messages, notes), payment info (processed by Stripe — we never see full card numbers), communications.

Automatic: IP address, browser type, basic device info, site usage, first-party cookies. NO Google Analytics, Meta Pixel, TikTok Pixel, or similar third-party trackers.

From third parties: Stripe (payment events, customer metadata you gave them), OAuth providers (name + email if you use them to log in).

To: provide the service, communicate with you, improve the service (aggregate analytics only), stay legal (taxes, audits), and protect against fraud.

We do not sell your data, share with advertisers, use it for ad targeting, or train AI models with it.

We use Anthropic's Claude API to help draft emails, summarize info, and operate Studio Brain. We send Anthropic only the data needed for each specific task. Anthropic does not train on data sent via paid API access.

If you prefer no AI assistance, email admin@lytbub.com— we'll flag your account as "no AI".

• Stripe — payments
• Supabase — database, hosting
• Anthropic — AI
• Resend — transactional email
• Vercel — web hosting
• Sentry — error monitoring
• Cloudflare — DNS, CDN
• Google Workspace — email

We may also disclose information if required by law (subpoena, court order). We'll tell you when legally permitted.

First-party cookies only — for authentication, preferences, basic security. No third-party advertising or cross-site tracking.

• Active accounts: as long as your account is active
• Closed accounts: core records (contracts, invoices) kept 7 years for tax/legal compliance
• Project files: deleted within 90 days of account closure
• Marketing/lead data without conversion: deleted within 24 months
• Logs and analytics: 90 days then deleted or aggregated

Encryption in transit (TLS 1.3) and at rest. Hashed passwords. Row Level Security in the database. Two-factor auth available. Audit logs for every meaningful action.

If we discover a breach affecting your data, we'll notify you within 72 hours by email.

You can request a copy, correction, or deletion of your data anytime by emailing admin@lytbub.com. We respond within 30 days.

California (CCPA):right to know, delete, opt-out of sale (we don't sell), and non-discrimination.

EU/UK (GDPR): all the above plus right to lodge complaint with supervisory authority. Lawful basis: contract performance, legitimate interest, consent.

Not directed at children under 13 (or 16 in EU/UK). We don't knowingly collect their data. Email admin@lytbub.com if you believe we have.

Our infrastructure is primarily US-based. If you're outside the US, your data is transferred to and processed in the US. We rely on standard contractual clauses for transfers from regions with stricter laws.

For material changes we'll email registered users at least 14 days before they take effect.

Lytbub Technologies LLC
Phoenix, AZ
admin@lytbub.com