Privacy policy

1. Introduction

This Privacy Policy explains how Lymwave collects, uses, shares, and protects information when you use the website, product, dashboards, integrations, free tools, and related services. Lymwave is operated by BitFoundry OÜ, an Estonian private limited company with registry code 17352996.

Lymwave helps teams plan, draft, optimize, publish, and monitor content workflows for SEO, AEO, and GEO. Because the service may connect to websites, publishing systems, repositories, analytics tools, and billing providers, we process information needed to provide those workflows safely.

2. Information we collect

2.1 Account and workspace information

We may collect account information such as your name, email address, organization name, workspace details, role, preferences, authentication identifiers, and settings.

2.2 Billing information

If you use a paid plan, payment information is processed by Stripe or another payment provider shown at checkout. We may receive billing status, subscription details, invoices, payment confirmations, plan information, and related account identifiers. We do not store full payment card numbers.

2.3 Content and workflow data

When you use Lymwave, we may process information you provide or connect, including:

website URLs, domains, crawl results, page metadata, and publicly accessible site content;
content briefs, prompts, drafts, article plans, editorial notes, SEO/AEO/GEO review results, visibility reports, and generated recommendations;
repository metadata, file paths, commit context, pull request context, or content files if you connect a Git-based workflow;
CMS, publishing destination, analytics, Search Console, or integration metadata that you authorize;
support messages, onboarding answers, operational preferences, and workflow activity logs.

2.4 Technical and usage information

We may collect technical information such as IP address, browser type, device information, operating system, pages viewed, referrer, request logs, error logs, performance data, authentication events, and security events.

2.5 Cookies and similar technologies

Lymwave may use cookies or similar technologies for authentication, session management, security, preferences, analytics, and product functionality. Some cookies are required for the service to work.

3. How we use information

We use information to:

provide, operate, secure, and maintain Lymwave;
authenticate users and manage workspaces, roles, subscriptions, and billing;
generate content plans, drafts, reports, recommendations, and workflow actions;
connect requested integrations such as publishing destinations, repositories, analytics, or CMS providers;
monitor service performance, debug issues, prevent abuse, and protect accounts;
respond to support requests and communicate about product, billing, security, or administrative matters;
improve product quality, workflows, and user experience;
comply with legal obligations, enforce terms, and protect rights, safety, and service integrity.

Customer content, repositories, drafts, reports, and connected workspace data are not used to train shared AI systems.

4. AI providers and automated processing

Lymwave may use AI providers to generate drafts, summarize context, review content, classify workflow state, or produce recommendations. We send only the information needed for the requested workflow and apply server-side controls where practical.

AI outputs should be reviewed by a human before publication or reliance. The Privacy Policy does not change your responsibility to verify public content, claims, and publishing actions.

We do not sell personal information. We may share information with:

service providers that help us host, secure, operate, analyze, support, email, bill for, or improve the service;
payment processors for subscription and billing workflows;
authentication, infrastructure, database, storage, observability, email, AI, analytics, or integration providers used to provide requested features;
third-party services you connect, such as CMS, repository, analytics, or publishing platforms;
authorities, courts, regulators, or other parties when required by law or needed to protect rights, safety, security, or service integrity;
successors or advisers in connection with a merger, acquisition, financing, reorganization, or sale of assets.

6. Data retention

We retain information for as long as needed to provide Lymwave, maintain accounts, support billing, operate integrations, preserve security logs, comply with legal obligations, resolve disputes, and enforce agreements.

Content workflow data, scan or visibility reports, drafts, integration metadata, and activity history may be retained while your workspace is active or for a reasonable period after cancellation unless deletion is requested and no longer retention is required by law, security, billing, or legitimate business needs.

7. Security

We use technical and organizational measures designed to protect information from unauthorized access, loss, misuse, alteration, or disclosure. Measures may include encryption in transit, access controls, credential protections, tenant scoping, audit logging, monitoring, and secure payment processing through PCI-compliant providers.

No system is perfectly secure. You are responsible for keeping your credentials safe, limiting workspace access to authorized users, and configuring connected third-party services appropriately.

8. International processing

BitFoundry OÜ is registered in Estonia. We and our service providers may process information in Estonia, the European Economic Area, the United States, and other locations where providers operate. Where required, we rely on appropriate transfer safeguards.

9. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to certain processing of personal information. You may also have the right to withdraw consent where processing is based on consent.

To make a privacy request, contact hello@lymwave.com. We may need to verify your identity or authority before fulfilling a request.

10. Customer responsibilities

If you submit or connect personal information about other people, you are responsible for having the rights, notices, consents, and lawful basis needed to do so. If you use Lymwave as part of your own publishing, analytics, repository, or customer workflow, you are responsible for your own privacy notices and compliance obligations.

11. Children's privacy

Lymwave is not intended for children under 18. We do not knowingly collect personal information from children under 18.

12. Changes to this Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the date on this page. If changes are material, we will take reasonable steps to notify users.

13. Contact

Questions about this Privacy Policy can be sent to hello@lymwave.com.