Privacy Policy

This policy is issued by Lytbub Technologies LLC ("Lytbub", "we", "us"), an Arizona LLC operating the Lytbub Studios brand at lytbub.studio and the Lytbub HQ client portal.

For privacy questions, contact admin@lytbub.com or write to us at Phoenix, AZ.

You give us: account info (name, email, phone, business name, hashed password), lead form submissions, project content (files, messages, notes), payment info (processed by Stripe — we never see full card numbers), communications.

Automatic: IP address, browser type, basic device info, site usage, first-party cookies. NO Google Analytics, Meta Pixel, TikTok Pixel, or similar third-party trackers.

From third parties: Stripe (payment events, customer metadata you gave them), OAuth providers (name + email if you use them to log in).

To: provide the service, communicate with you, improve the service (aggregate analytics only), stay legal (taxes, audits), and protect against fraud.

We do not sell your data, share with advertisers, use it for ad targeting, or train AI models with it.

We use Anthropic's Claude API to help draft emails, summarize info, and operate Elby. We send Anthropic only the data needed for each specific task. Anthropic does not train on data sent via paid API access.

If you prefer no AI assistance, email admin@lytbub.com— we'll flag your account as "no AI".

• Stripe — payments
• Supabase — database, hosting
• Anthropic — AI
• Resend — transactional email
• Vercel — web hosting
• Sentry — error monitoring
• Cloudflare — DNS, CDN
• Google Workspace — email
• Twilio — text message (SMS) delivery

We may also disclose information if required by law (subpoena, court order). We'll tell you when legally permitted.

First-party cookies only — for authentication, preferences, basic security. No third-party advertising or cross-site tracking.

Do Not Track: Because we don't track you across other websites or serve third-party advertising, we treat all visitors the same whether or not your browser sends a "Do Not Track" (DNT) or Global Privacy Control (GPC) signal. We do not sell or share personal information, so there is nothing to opt out of.

• Active accounts: as long as your account is active
• Closed accounts: core records (contracts, invoices) kept 7 years for tax/legal compliance
• Project files: deleted within 90 days of account closure
• Marketing/lead data without conversion: deleted within 24 months
• Logs and analytics: 90 days then deleted or aggregated

Encryption in transit (TLS 1.3) and at rest. Hashed passwords. Row Level Security in the database. Two-factor auth available. Audit logs for every meaningful action.

If we discover a breach affecting your data, we'll notify you within 72 hours by email.

You can request a copy, correction, or deletion of your data anytime by emailing admin@lytbub.com. We respond within 30 days.

California (CCPA): right to know, delete, opt-out of sale (we don't sell), and non-discrimination.

EU/UK (GDPR): all the above plus right to lodge complaint with supervisory authority. Lawful basis: contract performance, legitimate interest, consent.

If you give us your mobile number and check the consent box, we may send you text messages about your project, account, appointments, and invoices. Message frequency varies with your account activity. Message and data rates may apply.

Mobile phone numbers collected for SMS are never sold, rented, or shared with third parties or affiliates for their own marketing or promotional purposes. Mobile numbers and SMS opt-in data are shared only with our messaging provider (Twilio) strictly to deliver the messages you asked for, and with no one else for any other purpose.

You opt in by entering your number and checking the consent box on one of our forms, or by texting START to our number. Consent is never a condition of buying anything from us. Reply STOP at any time to opt out, or HELP for assistance — you can also email admin@lytbub.com to be removed. We keep a record of when and how you opted in so we can honor and prove it.

Not directed at children under 13 (or 16 in EU/UK). We don't knowingly collect their data. Email admin@lytbub.com if you believe we have.

Our infrastructure is primarily US-based. If you're outside the US, your data is transferred to and processed in the US. We rely on standard contractual clauses for transfers from regions with stricter laws.

For material changes we'll email registered users at least 14 days before they take effect.

Lytbub Technologies LLC
Phoenix, AZ
admin@lytbub.com