Privacy Policy

1. Introduction

LilyXAI Ltd ("we", "us") provides a privacy-first AI platform for UK public service teams. This policy explains how we collect, use, and protect personal data in compliance with the UK GDPR and Data Protection Act 2018.

2. What we collect

• Account information (name, email, organisation, role)
• Platform usage data (case metadata, conversations, configuration)
• Technical data (IP address, browser, device information)

3. How we use it

We use your data solely to operate the platform for your organisation. We do not sell, share, or use your data for advertising. We do not train AI models on customer data.

4. Data residency & security

All customer data is stored within the United Kingdom. We use industry-standard encryption (TLS in transit, AES-256 at rest), access controls, and regular security audits. We are SOC 2 Type II ready.

5. Your rights

Under UK GDPR you have the right to access, correct, delete, or export your data. Contact privacy@lilyxai.co.uk to exercise these rights.

6. Contact

Questions about this policy? Email privacy@lilyxai.co.uk.