Introduction
Lyndium ("we", "us", or "our") operates the website lyndium.com.au and provides an AI-powered content creation platform (the "Service"). This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the choices you have.
By using Lyndium, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of our Service.
Information We Collect
We collect the following categories of information:
1. Account Information — when you create an account, we collect your name, email address, and password (stored as a secure hash). If you sign in via Google, we receive your Google account email address and display name.
2. Profile & Content Data — text prompts, scripts, images, audio recordings, and videos you upload or generate using the Service; voice samples you provide for AI voice creation; and any other content you submit.
3. Usage Data — pages visited, features used, timestamps, session duration, clicks, and interactions with the platform.
4. Device & Technical Data — IP address, browser type and version, operating system, device identifiers, time zone, and referring URLs.
5. Payment Information — when you subscribe or purchase credits, we collect billing name, email, and payment card details. Card numbers are processed directly by our payment processor (Stripe) and are never stored on Lyndium servers.
6. Communications — emails or messages you send to our support team.
7. Google User Data — as described in detail in the "Google User Data & YouTube Integration" section below.
How We Collect Information
We collect information in the following ways:
1. Directly from you — when you register, fill in forms, upload content, or contact us.
2. Automatically — through cookies, log files, web beacons, pixels, and similar tracking technologies as you use our Service.
3. From third parties — from Google when you sign in with Google or connect your YouTube channel; from Stripe when you make a payment; from analytics providers such as Microsoft Clarity and Google Analytics.
Cookies and tracking technologies we use include: • Session cookies — to keep you logged in during your session. • Persistent cookies — to remember your preferences across sessions. • Analytics cookies — to understand how visitors use our site (e.g. Google Analytics, Microsoft Clarity). • Advertising cookies — to serve relevant ads via Google AdSense.
You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service.
How We Use Your Information
We use the information we collect to:
1. Provide and operate the Service — process your content generation requests, store your projects, deliver outputs, and manage your account.
2. Process payments — verify identity, process transactions, and prevent fraud.
3. Improve and personalise the Service — analyse usage patterns, fix bugs, develop new features, and tailor your experience.
4. Communicate with you — send transactional emails (e.g. account confirmations, payment receipts), respond to support requests, and send product updates or marketing communications (you may opt out at any time).
5. Enforce our terms — detect, investigate, and prevent abuse, fraud, or violations of our Terms of Service.
6. Comply with legal obligations — respond to lawful requests from authorities and fulfil regulatory requirements.
7. AI model improvement — content you submit may be used in aggregated, anonymised form to improve our AI models unless you opt out by contacting us at enquiries@lyndium.com.au.
We do not sell your personal information to third parties.
Google User Data & YouTube Integration
This section specifically addresses our use of data obtained through Google APIs in accordance with Google's Limited Use requirements.
What Google data we access: When you sign in with Google, we receive your Google account email address and display name solely to create and authenticate your Lyndium account. When you voluntarily connect your YouTube channel, we request the following OAuth scopes: • https://www.googleapis.com/auth/youtube.upload — to publish AI-generated videos to your YouTube channel on your explicit instruction. • https://www.googleapis.com/auth/youtube.readonly — to retrieve your channel ID and channel name so we can confirm the correct channel is connected.
We do not request or access any other Google account data, including Gmail, Google Drive, Google Contacts, or any other Google services.
Purpose and use of Google data: Your Google email and name are used solely to identify your Lyndium account. Your YouTube OAuth tokens are used solely to upload videos to your YouTube channel when you explicitly trigger an upload within the platform. We do not use Google data for advertising targeting, profiling, or any purpose beyond operating the specific features you activate.
Lyndium's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Who we share Google data with: Google user data (email, display name, and YouTube OAuth tokens) is not sold, rented, or shared with any third party for advertising or marketing. We do not transfer Google user data to data brokers, advertisers, or analytics companies. We may share Google data only: (a) as required by applicable law or legal process; (b) with our cloud infrastructure provider (Amazon Web Services) solely to store the encrypted tokens — AWS is contractually bound to confidentiality.
Data protection for Google data: YouTube OAuth access tokens and refresh tokens are encrypted at rest using AES-256 before storage. All data in transit is protected by TLS 1.3. Access to stored tokens is restricted to authenticated backend services strictly on a need-to-know basis. No human employee can read your raw OAuth tokens.
How to revoke access and delete Google data: You may revoke Lyndium's access to your Google account at any time by: (1) visiting your Google Account permissions page at myaccount.google.com/permissions and removing Lyndium; or (2) disconnecting your YouTube channel in Lyndium's Settings page, which immediately deletes the stored OAuth tokens from our database. You may also email enquiries@lyndium.com.au to request deletion of all Google-related data associated with your account.
AI Processing & Content Generation
Lyndium is an AI-powered platform. When you use features such as text-to-speech, video generation, image generation, voice cloning, or video translation, the following applies:
1. Prompts and inputs — the text prompts, scripts, images, and audio you provide are sent to our AI models (hosted on Lyndium servers or via contracted third-party AI providers) to generate your requested output.
2. Generated outputs — videos, images, and audio files you create are stored in your Lyndium account and in our cloud storage (AWS S3). You own your generated content subject to our Terms of Service.
3. Voice data — if you provide a voice sample for voice cloning, that audio is processed to create a voice model linked to your account. We do not share your voice model with other users or third parties without your consent.
4. Third-party AI providers — we may use contracted AI service providers to process your inputs. These providers process data only on our behalf and are prohibited from using your data for their own purposes.
5. Content moderation — we may review content that is flagged as potentially violating our Terms of Service.
How We Share Your Information
We share personal information only in the following circumstances:
1. Service providers — we share data with trusted third-party vendors who help us operate the Service, including: cloud hosting (AWS), payment processing (Stripe), email delivery (e.g. SendGrid), analytics (Google Analytics, Microsoft Clarity), and AI compute providers. All service providers are bound by data processing agreements and may not use your data for their own purposes.
2. Legal requirements — we may disclose your information if required by law, court order, or government request, or to protect the rights, safety, or property of Lyndium, our users, or the public.
3. Business transfers — if Lyndium is acquired, merged, or sells assets, your information may be transferred to the successor entity. We will notify you via email or prominent notice on the site before your information is transferred and becomes subject to a different privacy policy.
4. With your consent — we may share information with third parties when you have given us explicit consent to do so.
We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
Advertising & Cookies
Lyndium uses Google AdSense to display advertisements on our website. Google AdSense and other third-party vendors use cookies to serve ads based on your prior visits to our website or other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to our site.
You may opt out of personalised advertising by: • Visiting Google's Ads Settings at https://adssettings.google.com • Visiting www.aboutads.info • Using your browser's cookie controls to block third-party cookies
We also use Microsoft Clarity to capture how users interact with our website through behavioural metrics, heatmaps, and session replay. This data is used to improve the website experience. Microsoft's privacy policy applies to Clarity data collected.
Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:
• Account data — retained for the lifetime of your account plus up to 90 days after deletion to allow for account recovery, then permanently deleted. • Generated content (videos, images, audio) — retained until you delete them or for up to 12 months after account closure, whichever is earlier. • Payment records — retained for 7 years to comply with Australian financial record-keeping requirements. • Log and analytics data — retained for up to 24 months in aggregated or anonymised form. • Google OAuth tokens — deleted immediately when you disconnect your YouTube channel or close your account.
You may request deletion of your personal data at any time by emailing enquiries@lyndium.com.au. We will process deletion requests within 30 days.
Security
We implement industry-standard security measures to protect your personal information, including:
• Encryption in transit — all communications between your browser and our servers use TLS 1.2 or higher. • Encryption at rest — sensitive data including OAuth tokens and passwords are encrypted at rest using AES-256. • Access controls — access to production systems and personal data is restricted to authorised personnel on a need-to-know basis. • Regular security reviews — we conduct periodic reviews of our data collection, storage, and processing practices.
While we take reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. If you suspect unauthorised access to your account, please contact us immediately at enquiries@lyndium.com.au.
Your Rights & Choices
Depending on your location, you may have the following rights regarding your personal information:
All users: • Access — you may request a copy of the personal information we hold about you. • Correction — you may ask us to correct inaccurate or incomplete information. • Deletion — you may request deletion of your personal data by emailing enquiries@lyndium.com.au or using the "Delete Account" option in your account settings. • Opt-out of marketing — you may unsubscribe from marketing emails at any time via the unsubscribe link in any email or by contacting us. • Opt-out of AI model training — you may opt out of your content being used for AI model improvement by emailing enquiries@lyndium.com.au.
Australian residents (Privacy Act 1988): You have rights under the Australian Privacy Principles (APPs), including the right to access and correct your personal information and to make a complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
European residents (GDPR): You have the right to access, rectify, erase, restrict, or object to processing of your personal data, and to data portability. You may also lodge a complaint with your local data protection authority. Please note that your information may be transferred outside of Europe, including to Australia and the United States, with appropriate safeguards in place.
California residents (CCPA): You have the right to know what personal information we collect, disclose, and sell; to request deletion; and to opt out of the sale of personal information. We do not sell personal information.
To exercise any of these rights, please contact us at enquiries@lyndium.com.au. We will respond within 30 days.
Children's Privacy
Lyndium is not directed to children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at enquiries@lyndium.com.au and we will delete such information promptly.
Do Not Track
We do not currently respond to browser Do Not Track (DNT) signals, as there is no consistent industry standard for how platforms should respond to such signals. We will revisit this policy if a uniform standard is adopted.
Third-Party Links & Services
Our Service may contain links to third-party websites or integrate with third-party services (e.g. YouTube, TikTok). This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you use in connection with Lyndium.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for legal, operational, or regulatory reasons. When we make material changes, we will update the "Last updated" date at the top of this policy and notify you via email or a prominent notice on our website at least 14 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.
Contact Us
For questions about this Privacy Policy, to exercise your privacy rights, or to make a complaint, please contact us:
Lyndium Email: enquiries@lyndium.com.au Country: Australia
If you are in Australia and are unsatisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
If you are in the European Economic Area, you may contact your local data protection supervisory authority.
By using Lyndium, you acknowledge and agree to this Privacy Policy.
Questions? Email us at enquiries@lyndium.com.au