Privacy Policy

This Privacy Policy explains how Nolyr (“Nolyr”, “we”, “us”, or “our”) handles information when you visit our public website or use our AI workspace, Studio, REST API, or MCP integrations.

1. Information we receive

• Account and workspace information: sign-in details, name, email, workspace membership, plan, and support communications.
• Product content: prompts, briefs, scripts, storyboards, project and brand context, uploaded assets, generated outputs, API requests, and related metadata.
• Usage and device information: activity logs, approximate location from IP, browser/device data, diagnostics, and security events.
• Billing information: purchase, subscription, invoice, and payment-status details received from our payment provider. Payment card details are handled by that provider.

2. How we use information

We use information to provide and secure Nolyr, run generations, maintain project context, measure Credit usage, process payments, provide support, prevent abuse, troubleshoot, and improve the service. We do not sell personal information.

3. AI providers and service providers

To provide requested generations, prompts and associated inputs may be sent to the model or infrastructure provider selected by Nolyr's routing and the request. We also use providers for hosting, authentication, analytics, support, and payment processing. We require appropriate contractual and security protections for these providers and disclose additional provider details when required.

4. Retention and deletion

We retain information for as long as needed to provide the service, maintain security and accounting records, resolve disputes, and comply with law. You may request deletion of eligible account data through the support channel. Backups and records retained for legal or security reasons may persist for a limited period.

5. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or export personal information. You may also have the right to withdraw consent or complain to a regulator. We will verify requests and respond as required by applicable law.

6. Security

We use technical and organizational measures designed to protect information. No service can guarantee absolute security. Keep API keys private and notify us promptly if you suspect unauthorized access.

7. Children and international use

Nolyr is intended for business and creative teams and is not directed to children. If you use Nolyr from another country, information may be processed in countries where Nolyr or its providers operate, subject to applicable transfer requirements.

8. Contact details to complete

Before final legal publication, replace this section with the legal data controller name, privacy contact email, registered address, applicable representative (if required), and effective date. Those details must match the business and Paddle configuration.