1. Eligibility and business use

Lysia is intended for business and professional use. You must be legally capable of entering into these Terms and, if you use Lysia on behalf of a company or other organization, you confirm that you are authorized to do so and to bind that organization to these Terms where applicable.

2. The service and beta status

Lysia provides business analytics, forecasting, inventory intelligence, integrations and AI-assisted explanations based on information supplied to or generated within the service. Lysia is currently provided as a beta or evaluation service. Beta features may be incomplete, experimental, unavailable at times, changed without notice, or contain defects. You should not rely on beta availability or functionality as if it were a fully released production service.

3. Your account and company access

You are responsible for safeguarding your account credentials and for activity performed through your account. You must not share credentials in a way that defeats access controls, impersonate another person, attempt to access another company’s workspace, or bypass technical restrictions. Lysia may suspend or restrict access where reasonably necessary to protect the service, other users, customer data, or legal compliance.

4. Your business data and upload authority

You retain your rights in business data, files, records and other content that you upload, enter, connect or otherwise provide to Lysia. You authorize Lysia to host, process, transform and analyze that information as necessary to provide, secure and maintain the service and to fulfill your requests. Where Lysia processes personal data on your behalf as a processor, that data is used only for the agreed service purposes and documented instructions, not as a general license for Lysia to train models or independently improve products.

You are responsible for ensuring that you have the right and authority to provide the information you submit to Lysia, including any personal data, confidential information, customer information, supplier information, platform data or other third-party information contained in an uploaded file or connected integration. You must not upload information where doing so would breach law, contract, confidentiality obligations, intellectual-property rights or another person’s rights.

5. Customer personal data and processing instructions

Where a customer company determines the purposes and means of processing personal data contained in information it provides to Lysia, and Lysia processes that personal data on the customer’s behalf, the customer acts as controller and Lysia acts as processor to the extent required by applicable data-protection law. Lysia will process such personal data on documented customer instructions, including the instructions necessary to provide the service and those contained in the applicable agreement.

Where Article 28 GDPR applies, the controller-processor relationship must also be governed by applicable data-processing terms addressing matters such as confidentiality, security, subprocessors, assistance with data-subject requests and incidents, and deletion or return of personal data when processing ends. Customer company data may also include information for which Lysia acts as an independent controller, such as account, security, legal-compliance and service-administration information; that processing is described in the Privacy Notice.

6. Confidentiality

Lysia will treat non-public customer business information submitted to the service as confidential and will use it only as reasonably necessary to provide, secure and maintain Lysia, comply with law, prevent abuse, and fulfill customer requests. Customer personal data processed by Lysia as a processor is not used for unrelated product or model improvement except where the customer separately instructs or authorizes such processing on a valid basis. Lysia will not sell customer business data. Information that qualifies as a trade secret under applicable law will be handled consistently with the protections applicable to confidential information and trade secrets.

You must also respect confidential information belonging to Lysia or other users and may not attempt to discover, extract or misuse information that you are not authorized to access.

7. AI-assisted features and analytical outputs

Some Lysia features use artificial intelligence to generate explanations, summaries, classifications or other analytical assistance. AI-generated content may be incomplete, inaccurate or unsuitable for a particular decision. Forecasts and recommendations are estimates based on available data and assumptions, not guarantees of future results.

You remain responsible for reviewing outputs, checking important facts and exercising independent judgment before acting on them. Lysia must not be used as the sole basis for decisions where an error could reasonably cause significant financial, legal, safety, employment, credit, healthcare, regulatory or other material harm.

8. Acceptable and prohibited use

These restrictions apply to all use of Lysia, including AI-assisted features and non-AI functionality such as data uploads, analytics, forecasting, inventory tools and integrations. You may use Lysia only for lawful business purposes consistent with the functionality made available to you. You may not use Lysia or any of its features to facilitate unlawful activity, fraud, deception, harassment, discrimination, exploitation, malicious cyber activity, privacy violations, infringement of intellectual-property or confidentiality rights, or conduct intended to cause physical, financial or other serious harm.

You may not attempt to manipulate Lysia into revealing credentials, system instructions, another customer’s data, confidential information, security controls or other information you are not authorized to receive. Lysia may introduce technical safeguards, usage restrictions or topic limitations where reasonably necessary for safety, security or legal compliance.

9. Third-party services and integrations

Lysia may connect with third-party services or rely on third-party infrastructure, including hosting, database, authentication, analytics, integration and AI providers. Your use of a third-party account or integration may also be governed by that provider’s terms and privacy practices. Lysia is not responsible for third-party services outside its control, but will take reasonable steps to select and configure providers appropriate for the service.

10. Feedback and beta testing

If you voluntarily provide feedback, suggestions, bug reports or ideas about Lysia, you give Lysia permission to use that feedback to develop, improve and operate the service without restriction or compensation to you. This does not transfer ownership of your business data or confidential business information.

11. Intellectual property

Lysia’s software, interface, original graphics, layout, branding, documentation and other original materials are owned by or licensed to Lysia and are protected by applicable intellectual-property laws. Except where permitted by law or expressly authorized in writing, you may not copy, reproduce, distribute, publicly display, reverse engineer, commercially exploit, or create derivative works from protected Lysia materials or branding.

12. Availability, changes and suspension

Lysia may modify, add, remove, suspend or discontinue features where reasonably necessary for development, maintenance, security, legal compliance or business reasons. During beta, material changes may occur more frequently. Lysia may suspend or terminate access where a user materially breaches these Terms, creates a security risk, misuses the service, or where continued access would expose Lysia or others to legal or operational risk.

13. Disclaimers

To the extent permitted by applicable law, Lysia is provided on an “as available” basis. Lysia does not warrant that the service will be uninterrupted, error-free, completely secure, or that forecasts, AI outputs or recommendations will be accurate, complete or fit for every purpose. Nothing in these Terms limits rights or remedies that cannot lawfully be excluded or restricted.

14. Responsibility and limitation of liability

You are responsible for business decisions, actions and omissions made using information from Lysia. To the extent permitted by applicable law, Lysia is not liable for indirect, incidental, special, punitive or consequential losses, or for lost profits, lost revenue, lost opportunities or business interruption arising from reliance on beta features, forecasts or AI-generated outputs. Any limitation in these Terms applies only to the extent it is lawful and does not exclude liability that cannot legally be excluded.

15. Ending use of Lysia and company-data deletion

You may stop using Lysia at any time. For the ordinary self-service company-deletion flow, an active company owner can schedule the workspace for permanent deletion. The workspace becomes inactive immediately, and the owner has a 30-day grace period to cancel the request and restore normal access. If the request is not cancelled before the deadline, Lysia permanently removes the company workspace and company-linked active data, including connected-service records, subject to limited residual backup, security, legal or dispute-resolution retention requirements.

This 30-day customer recovery period is separate from privacy-rights requests or other legally required deletion instructions, which may need to be handled on a different timetable. Where Lysia acts as a processor, deletion or return of personal data will continue to follow applicable controller instructions, data-processing terms and law.

Read the full company-data deletion process.

Provisions that by their nature should survive termination — including confidentiality, intellectual property, disclaimers and limitations of liability — continue to apply after access ends.

16. Changes to these Terms

Lysia may update these Terms when the service, applicable law, security requirements or business model changes. Material changes will be identified by an updated version or effective date, and users may be required to accept an updated version before continuing to use the service.

1. Scope

This notice applies to personal information processed when you create or use a Lysia account, use Lysia’s business-analysis features, upload or connect data, communicate with Lysia, or otherwise interact with the service. Business information that does not identify a natural person is not personal data, but Lysia applies confidentiality and security controls to customer business information as described in the Terms and Security & Data Protection page.

2. Controller and processor roles

Lysia may process personal data in different legal roles depending on the context. For account administration, service security, legal compliance, communications and Lysia’s own service operations, Lysia may determine the purposes and means of processing and act as controller. Where a customer company provides personal data and determines why that data is processed through Lysia’s business features, Lysia may act as processor on behalf of that customer.

When Lysia acts as processor, the customer remains responsible for the lawfulness of its instructions and for having an appropriate basis to provide the personal data. Processing is governed by the applicable customer instructions and, where Article 28 GDPR applies, appropriate data-processing terms.

3. Information we process

Depending on the features you use, Lysia may process account information such as your name, work email address, authentication identifiers and company membership; business information you upload, enter or connect; integration identifiers and tokens needed to maintain authorized connections; analytics, forecasting and AI inputs and outputs; communications you send to Lysia; and technical information such as logs, device or browser information, request metadata and security events needed to operate and protect the service.

4. Why we use information

Lysia processes information to create and manage accounts; authenticate users; enforce company-level access controls; provide analytics, forecasts, inventory intelligence and AI-assisted features; process uploaded files and connected data; maintain integrations; respond to support or privacy requests; prevent fraud and abuse; secure and troubleshoot the service; comply with legal obligations; and improve the reliability and functionality of Lysia using Lysia-controlled operational data, feedback, and appropriately aggregated or anonymized information where lawful. Customer personal data processed only on a customer's behalf is used according to that customer's instructions and the applicable data-processing terms.

5. Legal bases

Where the GDPR applies and Lysia acts as controller, the legal basis depends on the activity. Processing may be necessary to perform a contract or take requested steps before entering into one, necessary for Lysia’s legitimate interests in operating, securing and improving Lysia’s own service operations, based on consent where consent is appropriate, or necessary to comply with a legal obligation. Where Lysia acts only as processor for customer-provided personal data, the customer determines the applicable legal basis for that processing.

6. AI processing

Some Lysia features use external AI model providers. When an AI-assisted feature is requested, Lysia may send the analytical context needed to produce the requested output to the configured provider. Lysia is designed to keep account credentials, access tokens and authorization information out of analytical prompts unless processing such information is strictly necessary for a specific authorized function.

AI-generated analysis is used to assist the user, not to determine account permissions or company ownership. Relevant provider and data-processing information may be made available through service documentation, customer agreements or subprocessor disclosures where applicable.

7. Service providers and subprocessors

Lysia uses service providers to operate hosting, databases, authentication, infrastructure, integrations, communications, security and AI functionality. Where a provider processes personal data on Lysia’s behalf in a processor chain, Lysia will address subprocessor obligations as required by applicable law and contractual commitments. Information may also be disclosed where required by law, to protect the security or rights of Lysia or others, or in connection with a lawful corporate transaction. Lysia does not sell customer business data.

8. International transfers

Some service providers may process information outside the country where you are located. Where the GDPR requires safeguards for an international transfer, Lysia will use an appropriate transfer mechanism or rely on another lawful basis for the transfer, as applicable to the provider and processing activity.

9. Security

Lysia uses technical and organizational measures intended to protect information against unauthorized access, alteration, disclosure or loss. These include authenticated access, company-level authorization, database access policies, server-side controls for sensitive operations, protected service credentials and security-focused monitoring and testing. No internet service can guarantee absolute security.

10. Retention and deletion

Lysia retains personal information for as long as reasonably necessary for the purposes described in this notice, including providing the service, maintaining security, meeting legal obligations, resolving disputes and enforcing agreements. Retention may vary by data type and by whether Lysia acts as controller or processor.

During the current single-member beta, ordinary self-service deletion covers both the user's Lysia account and the linked company workspace. Normal account and workspace use becomes inactive as soon as the owner schedules deletion. The account and company remain in a 30-day recovery state during which the owner may cancel the request and restore access. If the request is not cancelled before the deadline, Lysia permanently deletes the company workspace and company-linked active data and then deletes the linked authentication account. Protected backup copies may remain temporarily according to the applicable backup lifecycle and are not a customer restore mechanism after permanent deletion.

Privacy-rights requests and other legally required erasure instructions are handled separately where applicable and are not automatically delayed by the ordinary 30-day recovery period. Where Lysia acts as processor and processing ends, personal data will be deleted or returned according to the controller’s applicable instructions, data-processing terms and legal requirements.

Read the full company-data deletion explanation.

11. Your privacy rights

Depending on applicable law, you may have rights to request access to personal information, correction, deletion, restriction of processing, portability of certain information, or to object to particular processing. Where processing is based on consent, you may be able to withdraw that consent without affecting processing that was lawful before withdrawal. If your request concerns personal data Lysia processes only on behalf of a customer company, Lysia may need to refer or coordinate the request with that customer. You may also have the right to lodge a complaint with the data-protection authority in the country where you live or work, or where you believe an infringement occurred.

12. Children and age eligibility

Lysia is a business service and is not directed to children. The service is intended for users who are legally capable of entering into the applicable agreement or who are authorized to use it on behalf of a business. Lysia does not knowingly seek to collect personal information from children through the service. If you believe a child has provided personal information to Lysia inappropriately, please contact Lysia so the matter can be reviewed.

13. Contact and updates

Questions about privacy, data protection or your rights can be submitted through Lysia’s Contact page. This notice may be updated when Lysia’s services, providers or legal obligations change. Material changes will be identified by an updated version or effective date.