The full, formatted version of this policy lives at lydo.chat/privacy. This in-app copy mirrors the same content for the sign-in flow.
Effective May 9, 2026
This Privacy Policy explains what information Lydo collects, how we use it, who we share it with, and the rights you have over it. It applies to the Lydo mobile apps, web app, the marketing site at lydo.chat, and any related services we offer (together, the "Service").
Lydo is operated by Wisr Labs Inc., a Delaware corporation ("Lydo," "we," "our," or "us"). When your employer or team operates a Lydo workspace ("Space"), they are the controller of the data your team puts into that Space; we process that data on their behalf as described below.
Stripe collects and stores your card or bank details for paid plans. We don't store your full card number — we keep a token that lets us charge you and a record of your billing history.
We do not sell your personal information. We do not share your messages, calls, or AI agent interactions with advertisers, brokers, or third parties for their own marketing.
Every Space gets Joby, our built-in agent, and Space admins can connect approved AI agents such as Claude, ChatGPT, Gemini, Grok, or custom agents. To answer questions, summarize conversations, extract action items, translate messages, and remember decisions, Joby and approved connected agents process the content your Space permits.
Joby and approved connected agents read only the content inside the Space, channel, conversation, or tool scope they are allowed to access. An agent in one Space cannot read content from another Space unless your organization has explicitly connected those Spaces. Direct messages between two users are not visible to an agent unless those users have asked that agent into the conversation.
If you turn on AI features for your personal notes (Settings → Joby), Joby and approved connected agents may also process the content of notes you own — and notes shared with you — to power semantic search, in-editor AI actions, related-note suggestions, and similar features. The free-text "Your lydo.md" field, when set, is included with each request so responses better reflect your preferences. You can turn any of this off at any time, which stops further AI processing of personal content.
Joby and connected AI features use large language models and supporting AI services hosted by reputable third-party providers to generate responses, transcribe audio, produce embeddings used for search and ranking, and route real-time media. The current list of these providers — and their data-processing regions — is maintained at lydo.chat/subprocessors and may change as we improve the Service. We have written agreements with each that prohibit them from using your content to train their public foundation models, and we use no-retention or zero-data-retention modes where available.
We do not train external foundation models on your team's content. We may use aggregated, de-identified usage signals (e.g. how long an answer is, what percentage of users mark a summary as helpful) to improve our own product.
Third-party integrations and Model Context Protocol (MCP) connections let Joby and approved connected agents connect to tools like Notion, Linear, GitHub, Google Calendar, and CRMs. When an agent calls a tool on your behalf, the data needed to fulfill the request is sent to that tool's provider, and that provider's privacy policy applies. Space admins can disable specific integrations at any time.
AI outputs may be wrong. Verify before acting on anything an AI agent tells you, especially anything involving money, health, legal exposure, or harm to others.
To run the Service we use a small set of third-party providers ("subprocessors") for hosting, real-time media, transcription, AI inference, payment processing, crash reporting, and push delivery. We have written agreements with each binding them to confidentiality, security, and — for the AI vendors — a prohibition on training their public foundation models with your team's content.
The current, authoritative subprocessor list — with each vendor's purpose and data-processing region — lives on its own page so it can be updated independently of this Privacy Policy: lydo.chat/subprocessors.
Enterprise customers receive at least 30 days' advance notice of new subprocessors. Email team@lydo.chat with subject "Subprocessor notice" to subscribe.
When you tap Confidential on a message, we erase it from sender and recipient device caches, the Lydo cloud database, cloud file storage, search and AI indexes, and active backup snapshots (within 30 days). What remains is a tombstone showing a message was sent and erased. We do not maintain a hidden recoverable copy.
You can set a per-conversation timer that automatically erases messages a fixed time after they're sent. The same erasure pipeline as Confidential applies when the timer fires.
We can erase messages from systems we control. We cannot prevent another participant from screenshotting, photographing their screen, or copying text into another tool before erasure.
Encrypted backups are retained up to 30 days then permanently destroyed. When you trigger an erasure, deletion propagates to active databases immediately and to backup snapshots within the 30-day window as snapshots roll over.
Lydo is operated from the United States. If you're in the EEA, U.K., or Switzerland, your information will be transferred to and processed in countries with different data-protection laws. We rely on Standard Contractual Clauses for these transfers. Enterprise customers may request a Data Processing Addendum.
Depending on where you live, you may have the right to access, correct, delete, export, object to processing, restrict processing, withdraw consent, and lodge a complaint with your data-protection authority. Contact team@lydo.chat. California residents have additional CCPA/CPRA rights. We do not sell or share personal information for cross-context behavioral advertising.
Lydo is not intended for children under 13 (or the equivalent age in your jurisdiction; 16 in parts of the EEA without parental consent).
We use cookies and browser storage to keep you signed in, preserve drafts and unread state, and remember your theme. We do not use advertising cookies. We use first-party analytics and do not embed third-party advertising or behavioral-tracking SDKs in the apps.
If you grant permission, we send push notifications. SMS is sent only for verification during sign-up or password reset; standard rates may apply. We do not send marketing SMS without separate consent.
For material changes, we'll give notice in-app or by email at least 30 days before the change takes effect.
All inquiries go to team@lydo.chat. Use a descriptive subject line — for example, "Privacy question," "Data subject request," "DPO matter," or "Security disclosure."
Postal — Wisr Labs Inc., Delaware, United States.