Privacy Policy

Last Updated: March 11, 2026
Effective Date: March 14, 2026

LMTY, Inc. ("LMTY," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you access or use our competitive intelligence platform at lmty.com (the "Service").

This Policy applies to:

  • Visitors to lmty.com
  • Users who register for or use the Service
  • Representatives of organizations that use the Service

Please read this Policy carefully. By accessing or using the Service, you acknowledge you have read and understood this Policy.

1. Information We Collect

1.1 Information You Provide Directly

Account Information
When you register, we collect:

  • Work email address (used for authentication via one-time password)
  • First and last name
  • Agreement to our Terms of Service

Onboarding Information
During setup, we collect:

  • Company name and domain
  • Product(s) your company makes
  • Competitor and market information you identify
  • Survey responses about your use case

Customer Data
During your use of the Service:

  • Competitive intelligence content you input, upload, or create
  • Reports, notes, and annotations you generate
  • Competitor names, descriptions, and market information you submit

Communications

  • Support requests and correspondence
  • Feedback you provide about the Service

1.2 Information We Collect Automatically

Usage Data
When you use the Service, we automatically collect:

  • Log data: IP address, browser type and version, operating system, pages visited, timestamps, referring URL
  • Feature usage: which features you use, frequency, and interaction patterns
  • Search queries within the Service
  • Report generation activity

Device Information

  • Browser type and version
  • Device type and operating system
  • Screen resolution
  • Language preferences

Cookies and Tracking Technologies
We use:

  • Session cookies: Required for authentication and core functionality. These expire when you close your browser.
  • Persistent cookies: Store preferences and keep you signed in across sessions.
  • Analytics cookies: Help us understand how the Service is used (see Section 5).

You can control cookies through your browser settings, but disabling certain cookies may impact Service functionality.

1.3 Information From Third Parties

Publicly Available Sources
To power competitive intelligence features, we may collect publicly available information about companies, products, and markets from:

  • Public websites and company pages
  • Press releases and news articles
  • Job listings and career pages
  • App stores and product directories
  • Social media public profiles
  • Public APIs and data services

This information is used to generate Output within the Service and is not linked to individual users.

Authentication
We do not currently offer third-party login (e.g., Google, LinkedIn). If we add this in the future, we will update this Policy.

2. How We Use Your Information

We use the information we collect to:

2.1 Provide and Operate the Service

  • Authenticate your identity via OTP
  • Create and maintain your Account
  • Process onboarding and workspace setup
  • Generate competitive intelligence reports and Output
  • Deliver features and functionality you request

2.2 Personalize Your Experience

  • Tailor the Service to your company, products, and competitive context
  • Remember your preferences and settings
  • Surface relevant insights based on your tracked competitors and market

2.3 AI and Automated Processing

  • Process Customer Data using large language models (LLMs) to generate Output
  • Improve the accuracy and relevance of AI-generated competitive intelligence
  • Detect patterns and connections across market data

We may use aggregated and de-identified Customer Data to train and improve our AI models. We will not use identifiable Customer Data for model training without your explicit consent. You may opt out of this use by contacting contact@lmty.com.

2.4 Communications

  • Send transactional emails: OTP codes, account confirmations, report notifications
  • Send product updates and announcements (you can opt out at any time)
  • Respond to support requests
  • Send your weekly or periodic intelligence digests (if enabled)

2.5 Safety and Security

  • Detect and prevent fraud, abuse, and unauthorized access
  • Monitor for security incidents
  • Enforce our Terms of Service
  • Investigate complaints and reports of violations

2.6 Legal and Compliance

  • Comply with applicable laws and regulations
  • Respond to lawful government or legal process
  • Establish, exercise, or defend legal claims

2.7 Service Improvement

  • Analyze usage patterns to improve features
  • Conduct internal research and analytics
  • Debug and fix technical issues
  • Develop new products and features

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data on the following legal bases:

  • Providing the Service - Performance of a contract (Art. 6(1)(b))
  • Account management - Performance of a contract (Art. 6(1)(b))
  • Compliance with law - Legal obligation (Art. 6(1)(c))
  • Security and fraud prevention - Legitimate interests (Art. 6(1)(f))
  • Product improvement and analytics - Legitimate interests (Art. 6(1)(f))
  • Marketing communications - Consent (Art. 6(1)(a)) or legitimate interests
  • AI model improvement (identifiable data) - Consent (Art. 6(1)(a))

4. How We Share Your Information

We do not sell your personal information. We may share information as follows:

4.1 Service Providers

We share information with third-party vendors who help us operate the Service, including:

  • Cloud infrastructure: Hosting, storage, and compute providers (e.g., AWS, GCP, or Azure)
  • AI/LLM providers: Large language model providers used to power AI features (e.g., Anthropic, OpenAI). Customer Data submitted to these services is subject to their applicable data processing agreements.
  • Email delivery: Transactional email providers for OTP and notification delivery
  • Analytics: Usage analytics providers (on an aggregated or pseudonymized basis)
  • Customer support: Support tooling providers

All service providers are bound by data processing agreements and may not use your information for their own purposes.

4.2 Business Transfers

If LMTY is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal process (subpoena, court order, government request). Where permitted, we will notify you before disclosing.

4.4 Protection of Rights

We may disclose information when we believe in good faith that disclosure is necessary to:

  • Protect the rights, property, or safety of LMTY, our users, or the public
  • Prevent or investigate suspected fraud or illegal activity
  • Enforce our Terms of Service

4.5 With Your Consent

We may share information for other purposes with your explicit consent.

5. Analytics and Tracking

We use analytics tools to understand how the Service is used. Analytics data is collected in aggregated or pseudonymized form where possible. We do not share personally identifiable analytics data with advertising networks.

You may opt out of analytics tracking by contacting contact@lmty.com or using browser-level tools (e.g., Do Not Track, browser extensions).

6. Data Retention

We retain information for as long as necessary to provide the Service and fulfill the purposes outlined in this Policy, or as required by law.

  • Account information - Duration of account + 90 days after deletion
  • Customer Data - Duration of account + 90 days after deletion
  • Usage logs - 12 months
  • Communications / support - 3 years
  • Billing records - 7 years (tax/legal requirement)
  • Backup copies - Up to 90 days after deletion from active systems

You may request earlier deletion of your data by contacting contact@lmty.com. We will honor such requests except where retention is required by law.

7. Data Security

We implement commercially reasonable technical and organizational security measures to protect your information, including:

  • Encryption of data in transit (TLS 1.2+)
  • Encryption of data at rest (AES-256 or equivalent)
  • Access controls limiting data access to authorized personnel
  • Regular security assessments and vulnerability monitoring
  • Incident response procedures

No security measures are perfect. We cannot guarantee absolute security. In the event of a data breach that affects your rights or freedoms, we will notify affected users as required by applicable law.

8. Your Rights and Choices

8.1 Access and Portability

You may request a copy of personal information we hold about you. We will respond within 30 days.

8.2 Correction

You may update or correct inaccurate information through your Account settings or by contacting contact@lmty.com.

8.3 Deletion

You may request deletion of your personal information. We will honor deletion requests within 30 days, subject to legal retention requirements. Note: deletion of your Account will result in loss of access to all associated data.

8.4 Restriction and Objection

You may request that we restrict processing of your data or object to processing based on legitimate interests. We will honor such requests where legally required.

8.5 Withdrawal of Consent

Where we process data based on your consent, you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

8.6 Marketing Opt-Out

You may opt out of marketing communications at any time by:

Opting out does not affect transactional emails (OTP codes, account confirmations, critical service notifications).

8.7 AI Model Training Opt-Out

You may opt out of your Customer Data being used (on an aggregated, de-identified basis) to improve our AI models by contacting contact@lmty.comwith subject line "AI Training Opt-Out."

8.8 Submitting Requests

To exercise any of the above rights, contact us at contact@lmty.com. We will verify your identity before processing requests. We will respond within 30 days (or 45 days where permitted by law for complex requests).

We will not discriminate against you for exercising your privacy rights.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • Right to Know: Request information about the categories and specific pieces of personal information we collect, use, disclose, and sell.
  • Right to Delete: Request deletion of personal information we have collected from you.
  • Right to Correct: Request correction of inaccurate personal information.
  • Right to Opt-Out of Sale/Sharing: We do not sell or share personal information for cross-context behavioral advertising.
  • Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information beyond what is necessary to provide the Service.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

Categories of Personal Information Collected (last 12 months):

  • Identifiers (email address, name, IP address)
  • Professional or employment-related information (company, role)
  • Internet or network activity (usage data, log data)
  • Inferences drawn from the above to create a profile

Purpose of Collection: To provide and improve the Service as described in this Policy.

Disclosure: We disclose the above categories to service providers as described in Section 4.

To submit a CCPA request, contact contact@lmty.comwith subject line "California Privacy Request."

10. European Privacy Rights (GDPR/UK GDPR)

If you are located in the EEA, UK, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) or UK GDPR, including rights to access, rectification, erasure, restriction, portability, and to lodge a complaint with your local supervisory authority.

Data Controller: LMTY, Inc. is the data controller for personal information collected through the Service.

International Data Transfers: Your data may be processed in the United States or other countries where our service providers operate. Where we transfer data outside the EEA or UK, we use appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission.

Data Protection Officer: [If applicable - insert DPO contact or note that a DPO has not been designated for this stage]

To exercise your GDPR rights or lodge a complaint, contact contact@lmty.com.

11. Children's Privacy

The Service is designed for business use and is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we learn we have collected such information, we will delete it promptly. Contact contact@lmty.com if you believe we have inadvertently collected information from a minor.

12. Third-Party Links and Services

The Service may contain links to third-party websites or integrate with third-party tools. This Policy does not apply to those third parties. We are not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party services you use.

13. AI and Automated Decision-Making

The Service uses artificial intelligence and automated systems to generate competitive intelligence Output. These systems do not make decisions that produce legal or similarly significant effects on individuals without human review. Output is informational and intended to support - not replace - human judgment.

We use third-party LLM providers (including but not limited to Anthropic) to process inputs and generate Output. When Customer Data is sent to LLM providers, it is subject to their data processing agreements. LMTY has agreements with these providers that prohibit use of your data for their own model training.

14. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, technology, or applicable law. When we make material changes, we will:

  • Post the updated Policy on this page with a new "Last Updated" date.
  • Notify you via email or a notice within the Service at least 30 days before the change takes effect.

Your continued use of the Service after the effective date constitutes acceptance of the updated Policy. If you do not agree, you must stop using the Service and may request deletion of your data.

15. Contact Us

For privacy questions, requests, or concerns:

LMTY, Inc.
Email: contact@lmty.com
Website: https://lmty.com/

We will respond to privacy requests within 30 days.

Privacy Policy
Terms of Service