Privacy Policy

1. Information We Collect

Account Data

When you register for an account we collect your name, work email address, company name, and any profile information you choose to provide. If you sign up through a third-party identity provider (e.g., Google SSO) we receive the information that provider shares with us as permitted by your settings with that provider.

Usage Data

We automatically collect information about how you interact with the Liya Engine platform, including pages visited, features used, session duration, browser and device type, operating system, referrer URL, and IP address. This data is used to operate and improve the service.

API Request Metadata

When you use the Liya Engine API we collect metadata about each request: timestamps, endpoint called, latency, status codes, token counts, model identifiers, and domain pack identifiers. We do not store the content of your API requests or responses beyond what is necessary to detect errors and enforce usage limits, unless you have enabled trace logging in your account settings.

Contact Form Submissions

When you submit a contact, sales inquiry, or support form we collect the information you provide, including your name, email, company, and the content of your message.

Payment Information

We use third-party payment processors to handle billing. We do not store full credit card numbers or bank account details on our servers. Our payment processors collect and store payment information subject to their own privacy policies.

2. How We Use Your Information

• Service delivery: To create and manage your account, process API requests, provide customer support, and deliver the features you use.
• Security and fraud prevention: To detect abuse, investigate suspicious activity, and protect the integrity of the platform.
• Communications: To send transactional emails (password resets, invoices, service notices) and, where you have opted in, product updates and marketing communications.
• Compliance and legal obligations: To comply with applicable laws, respond to legal process, and enforce our terms.
• Analytics and improvement: To understand usage patterns and improve the platform using aggregated and de-identified data.

3. Data Sharing

We do not sell, rent, or trade your personal information to third parties. We share information only in the following limited circumstances:

• Infrastructure providers: We use cloud hosting and infrastructure providers (including Vercel for web hosting) that process data on our behalf under data processing agreements.
• Payment processors: Billing information is processed by third-party payment processors who are subject to their own privacy and security standards.
• Sub-processors: We maintain a list of sub-processors in our Data Processing Agreement. We notify customers of material changes to that list.
• Legal requirements: We may disclose information where required by law, subpoena, court order, or to protect the rights, property, or safety of Liya Engine, our users, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to the same protections described here.

4. Data Retention

We retain account data for as long as your account is active. Upon account deletion, we retain your data for 90 days to allow for error correction and to comply with legal obligations, after which it is deleted from our systems in accordance with our deletion schedule. Aggregated and de-identified usage data may be retained indefinitely.

API request metadata is retained for 90 days by default. If you have enabled extended trace logging this period may be up to 1 year, configurable in your account settings.

5. Your Rights

GDPR Rights (EEA, UK, and Switzerland)

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the following rights under applicable data protection law:

• Access: You may request a copy of the personal data we hold about you.
• Rectification: You may ask us to correct inaccurate or incomplete data.
• Erasure: You may ask us to delete your personal data, subject to legal retention obligations.
• Portability: You may request your data in a structured, machine-readable format.
• Objection: You may object to processing based on our legitimate interests.
• Restriction: You may ask us to restrict processing in certain circumstances.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

CCPA Rights (California Residents)

California residents have the right to know what personal information we collect and how we use it, the right to request deletion of their personal information, and the right to opt out of the sale of their personal information. We do not sell personal information. To exercise your rights, contact [email protected].

6. Cookies

We use only essential and functional cookies — no advertising, tracking, or analytics cookies. Essential cookies are required for the platform to function (authentication sessions, CSRF protection). Functional cookies remember your preferences (e.g., UI theme). For full details, see our Cookie Policy.

7. International Data Transfers

Liya Engine is based in the United States. If you are located outside the United States, your information may be transferred to and processed in the United States or other countries where our infrastructure providers operate. Where required by law, we rely on the EU Standard Contractual Clauses (SCCs) as the legal mechanism for transferring personal data from the EEA. To request a copy of the applicable SCCs, contact [email protected].

8. Security

We implement industry-standard security measures including encryption at rest (AES-256), encryption in transit (TLS 1.2+), access controls, and audit logging. For a full description of our security posture see our Security page. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

The Liya Engine platform is intended for business and enterprise use. We do not knowingly collect personal information from individuals under 16 years of age. If you believe we have inadvertently collected such information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email or in-app notice. Your continued use of the service after such notice constitutes your acceptance of the updated policy.

11. Contact Us

For privacy-related questions or to exercise your rights, contact our legal team:

Liya Engine, Inc.
Email: [email protected]