LynaX

Privacy Policy

Last updated: October 28, 2026

LynaX is committed to protecting your privacy. This policy explains how we collect, use, store, and protect data when you use LynaX and related services.

The English version is the governing version. Translations are provided for convenience and do not modify this policy.

1. Information We Collect

Account information such as name, email, login details, and business information you provide.

Service usage data such as AI messages, AI Agent/AI Seller configuration, training data, files, activity history, and app connection information.

Technical data such as IP address, browser, device, access time, system logs, and security data needed to operate the service.

Basic billing information such as transaction status, plan, transaction ID, and receipts. Sensitive payment method details are processed by payment providers such as Paddle or related payment gateways.

2. How We Use Information

To provide, operate, and improve LynaX, including AI Agent, AI Seller, website chat widget, app marketplace, and automation features.

To authenticate accounts, manage access, process payments, grant subscriptions/add-ons/credits, and provide customer support.

To analyze performance, troubleshoot issues, protect systems, prevent fraud, and comply with legal obligations.

To send important notices about your account, security, billing, service changes, or policy updates.

3. AI Data and Your Content

You retain ownership of the data, content, documents, products, conversations, and files you provide to LynaX.

We process your data to generate AI responses, configure AI according to your settings, connect business systems, and provide requested functionality.

We do not sell your personal data. Any use of data to improve the service is handled according to applicable settings, agreements, and law.

4. Information Sharing

We may share data with infrastructure, analytics, email, storage, payment, authentication, or integration providers needed to operate LynaX.

When you pay through Paddle, Paddle may process transaction information as Merchant of Record under Paddle's own policies.

We may disclose information when needed to comply with law, protect legal rights, investigate fraud, or respond to lawful requests.

5. Data Security

We use appropriate technical and organizational security measures, including access controls, encryption, system monitoring, and incident response processes.

No system is perfectly secure. You should protect your login credentials, manage team permissions carefully, and notify us if you detect a security risk.

6. Data Retention

We retain data for as long as needed to provide the service, maintain accounts, process transactions, comply with law, and resolve disputes.

When you request account deletion, we will delete or anonymize personal data within a reasonable time unless longer retention is required for legal, security, anti-fraud, or accounting reasons.

7. Your Rights

Depending on applicable law, you may request access, correction, export, restriction, or deletion of your personal data.

You can manage some data in your account or contact [email protected] for assistance.

8. Cookies and Similar Technologies

LynaX classifies cookies as necessary, analytics, and marketing. Analytics and marketing are enabled by default, and you can opt out or change your choice from Cookie settings in the footer at any time.

GA4 measures use of LynaX. Meta Pixel and the Conversions API may process device information, hashed identifiers, and conversion events for advertising measurement.

FirstPromoter may process a visitor or referral identifier when you arrive through an affiliate. LynaX retains a first-party attribution record for up to 60 days to determine the referral source.

If you turn marketing off, future Meta delivery and affiliate attribution stop, and attribution that has not produced a transaction is revoked. Qualified or converted records may be retained for payout reconciliation, fraud prevention, accounting, and dispute resolution.

9. Children

LynaX is not intended for children under 13. We do not knowingly collect personal data from children under 13. If we discover such data, we will delete it within a reasonable time.

10. Policy Changes

We may update this policy from time to time. For material changes, we will notify you through the website, app, or email.

11. Google Ads, Google Analytics and Search Console Connections

LynaX offers optional Google Ads and Google Analytics connections through google-ads.lynax.site and google-analytics.lynax.site. These services are part of LynaX and are operated by CosmicOcean.AI Company Limited. You authorize a connection and then choose whether to enable it for your AI Agent. The Google account you connect may differ from the identity you use to sign in to LynaX; a personal connection can only be used by its owner through AI Agent.

We access the authorizing Google identity and the accounts, properties, campaigns, report configuration and metrics you are permitted to view to fulfill your requests. OpenID validates the authorizing identity; the Ads connection also requests email and basic profile information. Analytics uses analytics.readonly. Ads uses adwords, Google’s shared read/write scope; Google Ads has no narrower read-only OAuth scope. You may separately enable Google Ads configuration tools for your AI Agent to create or update budgets, Search campaigns, ad groups, responsive Search ads and keywords/criteria. Actions follow your Google Ads permissions and the approval mode you select in LynaX; under the default Automatic mode, proposed writes require approval before execution. New campaigns, ad groups and ads start PAUSED. These tools do not expose billing, user-access management, account creation or resource removal.

Search Console is an optional personal connection through search-console.lynax.site. It uses the webmasters scope to read search performance, indexed URL status, properties and sitemaps, and to add or remove properties from your list and submit or remove sitemaps according to your Google permissions. Adding a property does not verify ownership; URL inspection is neither a live test nor an indexing request. Write actions follow the AI Agent approval mode you select in LynaX. This connection is not available to AI Seller.

When you ask your AI Agent to analyze or act on a Google connection, relevant questions, proposed changes and Google results are processed through OpenAI's API to generate the response. Results may be saved in your LynaX conversation and processed and retained by the API provider under its applicable policies. Data is used for your requested features and connection operation; we do not sell Google data or use it for advertising unrelated to your requests or for creditworthiness decisions.

LynaX does not use data received from Google APIs to develop, improve or train generalized AI models. The API provider's voluntary training-data sharing is disabled for the project serving these connections. Our use and transfer of Google data comply with the Google API Services User Data Policy, including its Limited Use requirements. These Google-specific provisions apply to Google data where they differ from the general service-improvement description above.

For Google Ads, to prevent duplicate writes after a lost response, write-operation references and outcome receipts are encrypted and retained in the service’s persistent operation journal. Removing a connection does not automatically erase this journal; contact support to request deletion of stored connection data. OAuth credentials remain server-side and are encrypted in LynaX and in separate token stores for each service. Removing a LynaX connection prevents subsequent requests through that connection but does not itself revoke the Google grant or immediately erase every service-side token record. You can revoke access in your Google Account at https://myaccount.google.com/connections. Revocation does not delete data already included in conversations.

You can delete a conversation to remove its LynaX messages. This does not automatically submit deletion requests to every external processing provider; records they retain remain subject to their applicable policies and obligations. Contact [email protected] for assistance accessing, exporting or deleting stored Google data and connection information.

Google API Services User Data Policy and Limited Use requirements

12. Contact

If you have questions about privacy or personal data, please contact us:

Email: [email protected]

Company: CosmicOcean.AI Company Limited