Privacy Policy

1. Who We Are

Lyks is an AI video generator for Shopify stores, built and operated by iBoson Innovations Private Limited, registered at CDAC ACE 1, 3rd Floor, CDAC Building, Technopark Campus, Kazhakootam, Trivandrum, Kerala, India, 695581.

By using Lyks, you agree to the terms of this Privacy Policy.

5. Shopify Data

We access only: product title, description, images, and price. We never access your customer data, orders, or financial information. Your store access token is stored securely and encrypted. You can revoke access anytime from your Shopify admin panel.

6. App Access & Data on Uninstall

Lyks connects to your Shopify store using a secure access token, stored encrypted on our servers. We access only the data required to generate videos: product title, description, images, and price. We never access your customers, orders, checkout, or financial data.

You can disconnect Lyks at any time from your Shopify admin under Settings > Apps and sales channels. When you uninstall or revoke access:

• Your store access token is immediately invalidated.
• Your synced product data and store token are deleted from our systems within 48 hours.
• Generated videos are not stored by Lyks; they are held temporarily by our video provider and expire automatically.

We retain your name, email, wallet balance, and transaction history while your account is active. If you delete your account, this data is deleted within 30 days; your store access token and synced product data are deleted within 48 hours of uninstall.

7. Data Requests & Compliance

As a Shopify app, Lyks complies with Shopify's data-protection requirements and honours Shopify's data request and redaction webhooks. Lyks does not collect or store your customers' personal data, so no customer data is held to return or erase. When a store uninstalls Lyks, we delete the store's associated data from our systems within the required window. To make a data request, contact us at info@iboson.io.

8. Legal Basis for Processing

We process your personal data on these legal bases under the GDPR:

• Performance of a contract — to create and manage your account, sync your product data, and generate the videos you request.
• Legal obligation — to retain payment and tax records as required by law.
• Legitimate interests — to secure our service, prevent abuse, and provide customer support.

9. International Data Transfers

Lyks is operated from India, and some services we use are located outside your country, including in the United States and China:

• Video generation is performed through Atlas Cloud, which routes your product images and prompts to AI models including Seedance (ByteDance, China) and Google.
• Script generation is performed by Anthropic (Claude), which may process data on servers in the United States.
• Billing is handled entirely by Shopify, which may process data in the United States and other regions.
• Generated videos are held temporarily by Atlas Cloud and deleted automatically after a short period.

Where personal data is transferred outside the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses and transfer only the minimum data required. We never transfer your customer data, orders, or financial information to these services.

Some sub-processors (e.g. Anthropic, Atlas Cloud) process data on servers outside your country, including the United States. We use appropriate safeguards (such as Standard Contractual Clauses) for these transfers.

10. Data Security

We protect your data with encryption in transit and at rest and limit access to authorised personnel only. Your Shopify store access token is encrypted at rest, and all data is transmitted over encrypted (HTTPS/TLS) connections.

If a breach affects your personal data, we will notify affected users and authorities as required by law.

11. Generated Videos

Videos generated on our platform are stored temporarily on our secure servers and are available for download for a limited period. After this retention period, they are automatically removed from our systems.

12. Cookies & Tracking

The Lyks website uses only functional cookies necessary to operate — for example, to maintain your session when signed in. We do not use advertising cookies, tracking pixels, or analytics tools.

13. Your Rights Under GDPR

• Right to access
• Right to deletion
• Right to rectification
• Right to portability
• Right to object
• Right to restrict
• Right to lodge a complaint with a supervisory authority — if you believe we have not handled your data lawfully, you can complain to your local data protection authority.

To exercise any of these rights, email info@iboson.io. We respond within 30 days.

14. California Privacy Rights (CCPA)

California residents may request access to or deletion of their personal information and are entitled to non-discrimination for exercising these rights. We do not sell personal information.

15. AI Providers

We only send the minimum data needed to generate your videos — product images, prompts, and descriptions. We do not send your customer data. Our AI providers process this data solely to generate your requested output and do not use it to train their models.

16. Children's Privacy

Lyks is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal information, contact us at info@iboson.io and we will delete it promptly.

17. Changes to This Policy

We may update this policy periodically. When we do, we update the effective date and notify you by email if changes are significant.