The full, formatted version of this policy lives at lydo.chat/privacy. This in-app copy mirrors the same content for the sign-in flow.
Effective May 9, 2026
This Privacy Policy explains what information Lydo collects, how we use it, who we share it with, and the rights you have over it. It applies to the Lydo mobile apps, web app, the marketing site at lydo.chat, and any related services we offer (together, the "Service").
Lydo is operated by Wisr Labs Inc., a Delaware corporation ("Lydo," "we," "our," or "us"). When your employer or team operates a Lydo workspace ("Space"), they are the controller of the data your team puts into that Space; we process that data on their behalf as described below.
Stripe collects and stores your card or bank details for paid plans. We don't store your full card number — we keep a token that lets us charge you and a record of your billing history.
We do not sell your personal information. We do not share your messages, calls, or Joby interactions with advertisers, brokers, or third parties for their own marketing.
Every Space gets its own Joby — a built-in agent that reads what your team writes and helps in the channels you're already in. To answer questions, summarize conversations, extract action items, translate messages, and remember decisions, Joby processes your team's content.
Joby reads only the content inside the Space it lives in. Joby in one Space cannot read content from another Space. Direct messages between two users are not visible to Joby unless those users have asked Joby into the conversation.
If you turn on AI features for your personal notes (Settings → Joby), Joby may also process the content of notes you own — and notes shared with you — to power semantic search, in-editor AI actions, related-note suggestions, and similar features. The free-text "Your lydo.md" field, when set, is included with each request to your Joby so its responses better reflect your preferences. You can turn any of this off at any time, which stops further AI processing of personal content.
Joby uses large language models and supporting AI services hosted by reputable third-party providers to generate responses, transcribe audio, produce embeddings used for search and ranking, and route real-time media. The current list of these providers — and their data-processing regions — is maintained at lydo.chat/subprocessors and may change as we improve the Service. We have written agreements with each that prohibit them from using your content to train their public foundation models, and we use no-retention or zero-data-retention modes where available.
We do not train external foundation models on your team's content. We may use aggregated, de-identified usage signals (e.g. how long an answer is, what percentage of users mark a summary as helpful) to improve our own product.
The Skills marketplace and Model Context Protocol (MCP) integrations let Joby connect to tools like Notion, Linear, GitHub, Google Calendar, and CRMs. When Joby calls a tool on your behalf, the data needed to fulfill the request is sent to that tool's provider, and that provider's privacy policy applies. Space admins can disable specific Skills at any time.
AI outputs may be wrong. Verify before acting on anything Joby tells you, especially anything involving money, health, legal exposure, or harm to others.
To run the Service we use a small set of third-party providers ("subprocessors") for hosting, real-time media, transcription, AI inference, payment processing, crash reporting, and push delivery. We have written agreements with each binding them to confidentiality, security, and — for the AI vendors — a prohibition on training their public foundation models with your team's content.
The current, authoritative subprocessor list — with each vendor's purpose and data-processing region — lives on its own page so it can be updated independently of this Privacy Policy: lydo.chat/subprocessors.
Enterprise customers receive at least 30 days' advance notice of new subprocessors. Email team@lydo.chat with subject "Subprocessor notice" to subscribe.
When you tap Confidential on a message, we erase it from sender and recipient device caches, the Lydo cloud database, cloud file storage, search and AI indexes, and active backup snapshots (within 30 days). What remains is a tombstone showing a message was sent and erased. We do not maintain a hidden recoverable copy.
You can set a per-conversation timer that automatically erases messages a fixed time after they're sent. The same erasure pipeline as Confidential applies when the timer fires.
We can erase messages from systems we control. We cannot prevent another participant from screenshotting, photographing their screen, or copying text into another tool before erasure.
Encrypted backups are retained up to 30 days then permanently destroyed. When you trigger an erasure, deletion propagates to active databases immediately and to backup snapshots within the 30-day window as snapshots roll over.
Lydo is operated from the United States. If you're in the EEA, U.K., or Switzerland, your information will be transferred to and processed in countries with different data-protection laws. We rely on Standard Contractual Clauses for these transfers. Enterprise customers may request a Data Processing Addendum.
Depending on where you live, you may have the right to access, correct, delete, export, object to processing, restrict processing, withdraw consent, and lodge a complaint with your data-protection authority. Contact team@lydo.chat. California residents have additional CCPA/CPRA rights. We do not sell or share personal information for cross-context behavioral advertising.
Lydo is not intended for children under 13 (or the equivalent age in your jurisdiction; 16 in parts of the EEA without parental consent).
We use cookies and browser storage to keep you signed in, preserve drafts and unread state, and remember your theme. We do not use advertising cookies. We use first-party analytics and do not embed third-party advertising or behavioral-tracking SDKs in the apps.
If you grant permission, we send push notifications. SMS is sent only for verification during sign-up or password reset; standard rates may apply. We do not send marketing SMS without separate consent.
For material changes, we'll give notice in-app or by email at least 30 days before the change takes effect.
All inquiries go to team@lydo.chat. Use a descriptive subject line — for example, "Privacy question," "Data subject request," "DPO matter," or "Security disclosure."
Postal — Wisr Labs Inc., Delaware, United States.