Privacy Policy

This Privacy Policy explains how LYM ("LYM," "we," "us," or "our") collects, uses, discloses, and protects information in connection with our website, dashboard, tracking infrastructure, and related services (the "Service"). It applies to Partners, Organizations, and visitors to our site. By using the Service, you agree to the collection and use of information as described here.

1. Information We Collect

1.1 Information You Provide

• Account information: name, email address, password, and role (Partner or Organization).
• Application information: details about your channel, audience, or product submitted when applying to a Program.
• Communications: messages you send us, including support requests and application follow-ups.

1.2 Information From Payment Partners

To connect a Program or receive payouts, Organizations and Partners complete verification directly with Stripe and Wise. Stripe and Wise collect and hold identity, business, and financial details (such as bank details, payout account information, and identity-verification documents) under their own privacy policies. LYM receives limited data back from these providers — such as verification status, account identifiers, and transaction outcomes — needed to operate the Service. LYM does not store full payment card numbers or bank account credentials.

1.3 Tracking and Usage Data

When a tracking link or discount code is used, LYM automatically records data needed to attribute and verify conversions, including the link or code used, timestamp, referring page, approximate location derived from IP address, device and browser type, and — once a purchase is completed — the order amount and status needed to calculate commission. We also collect standard usage data about how the dashboard and website are used (pages viewed, actions taken, log data).

1.4 Cookies and Similar Technologies

LYM uses cookies and similar technologies to keep you signed in, and to attribute a purchase to the Partner whose link or code was used, for up to the attribution window disclosed for that Program (a maximum of 30 days). You can control cookies through your browser settings; disabling them may prevent conversions from being correctly attributed.

2. How We Use Information

• Operate, maintain, and improve the Service, including account creation, Program applications, and the dashboard;
• Attribute clicks and code uses to conversions, and calculate, reconcile, and pay out commission;
• Verify identity and eligibility, and detect and prevent fraud, abuse, or violations of our Terms of Service;
• Communicate with you about your account, applications, payouts, and Service updates;
• Comply with legal, tax, and regulatory obligations, including those imposed on us by our payment partners; and
• Analyze aggregate trends to improve Program design and platform performance.

3. How We Share Information

We share information only as needed to operate the Service:

• With Organizations: a Partner's application details and aggregate performance data (clicks, conversions, commission) tied to that Organization's own Program, so it can manage its Program.
• With Partners: an Organization's public Program terms, brand assets, and the aggregate performance data needed for the Partner to track their own results.
• With service providers: Stripe, Wise, our hosting and infrastructure providers (including Cloudflare), and other vendors who process data on our behalf under contractual confidentiality and security obligations.
• For legal reasons: where required to comply with law, enforce our Terms of Service, or protect the rights, property, or safety of LYM, our users, or others.
• In a business transfer: in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.

We do not sell your personal information.

4. Data Retention

We retain account and transaction information for as long as needed to operate the Service, meet tax and accounting obligations, resolve disputes, and enforce our agreements — generally for the life of your account plus a period afterward required by applicable financial record-keeping law. Tracking data tied to a specific click or conversion is retained as needed for attribution, reconciliation, and fraud investigation.

5. Your Rights and Choices

Depending on where you live, you may have the right to access, correct, delete, or export the personal information we hold about you, or to object to or restrict certain processing. You can access and update most account information directly in the dashboard, or contact us at privacy@lym.sh to make a request. We will verify your identity before acting on a request, and may decline or limit a request where we have a legal or legitimate business reason to retain the information, such as unresolved commission, tax records, or an open fraud investigation.

6. International Data Transfers

LYM and the third-party providers we use may process and store information in countries other than your own. Where we transfer personal information across borders, we rely on appropriate safeguards required by applicable law.

7. Data Security

We use technical and organizational measures designed to protect information against unauthorized access, alteration, disclosure, or destruction, including encryption in transit and restricted access to production systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Children's Privacy

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from anyone under 18. If we learn we have collected such information, we will delete it.

9. Third-Party Links

The Service links to third-party sites and services, including Organization products and payment providers. This Policy does not apply to those third parties, and we encourage you to review their own privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified through the dashboard or by email, and will take effect no earlier than the date stated in the notice. Continued use of the Service after a change takes effect constitutes acceptance of the revised Policy.

11. Contact

Questions about this Privacy Policy or requests regarding your personal information can be sent to privacy@lym.sh.