Privacy Policy
Investor Relations Suite · Effective date: August 14, 2026 · Version 1.0
This Privacy Policy explains how Lily Jack Tech, LLC ("we," "us") collects, uses, and shares personal information in connection with the Investor Relations Suite application and websites (the "Service").
1. Information we collect
- Account information — name, email address, password credentials (managed by our authentication provider; we never store plaintext passwords), and profile details you provide.
- Customer Data you submit — information you and your workspace enter into the Service, which may include personal information about third parties such as investors and contacts (names, titles, emails, notes, interaction history). Your workspace controls this data; we process it on your behalf.
- Connected-integration data — if you connect an email account (e.g., Microsoft 365), we access only the data within the scopes you authorize, under settings you control. Connection tokens are stored encrypted and are deleted when you disconnect.
- Usage and device data — log data such as IP address, browser type, pages and actions, timestamps, and error diagnostics, used for security and to operate and improve the Service.
- Cookies and similar technologies — we use only cookies and local storage necessary to operate the Service (such as keeping you signed in). We do not use advertising cookies or sell data to advertisers.
2. How we use information
To provide, secure, and support the Service; authenticate users; enforce workspace permissions and tenant isolation; process Customer Data at your direction; send service communications (such as invitations you initiate, notifications, and important account notices); analyze usage in aggregate to improve the Service; provide AI-assisted features you invoke (inputs are processed by our AI provider to generate the output you requested and are not used to train their generally available models under our agreement); comply with law; and protect rights and safety.
3. How we share information
We do not sell personal information. We share it only with: (a) service providers that host and support the Service under confidentiality and data-protection obligations (cloud infrastructure, authentication, AI processing, email delivery); (b) your workspace — content you enter is visible to workspace members according to its roles and permissions; (c) integrations you connect, at your direction; (d) legal and safety recipients where required by law or to protect rights, safety, or the integrity of the Service; and (e) a successor entity in a merger, acquisition, or asset sale, subject to this Policy.
4. Data about investors and contacts
The Service exists to help your workspace manage relationship data you supply. For that data, your workspace is the controller and we act as a processor on its instructions. If you are an individual whose information appears in a customer's workspace, contact that customer for access or deletion requests; we will assist customers in fulfilling them. The Service provides do-not-contact flags and consent notes so workspaces can honor individuals' communication preferences.
5. Security
We apply industry-standard safeguards: encryption in transit and at rest, tenant isolation enforced in the application and the database layer, role-based access controls, encrypted secret storage, audit logging of sensitive actions, and least-privilege integration scopes. No system is perfectly secure; we will notify affected users of a breach as required by law.
6. Retention and deletion
We retain personal information while your account or workspace is active and as needed for the purposes above. Workspace deletion schedules Customer Data for permanent deletion after a 30-day grace period (backups purge on their own schedule, currently within 30 additional days). You may request account deletion or export of your workspace data at any time from the Service or by contacting us.
7. Your rights
Depending on your location, you may have rights to access, correct, delete, export, or restrict processing of your personal information, and to object to certain processing. You can exercise many of these directly in the Service (profile settings, workspace export, deletion requests) or by contacting us at privacy@investorrelationssuite.com. We do not discriminate for exercising rights. If you are in the EEA/UK, our legal bases are contract performance, legitimate interests (service operation and security), and consent where required; you may lodge a complaint with your supervisory authority. California residents: we do not "sell" or "share" personal information as defined by the CCPA/CPRA.
8. International transfers
We host the Service in the United States. If you use the Service from elsewhere, your information is transferred to and processed in the U.S. under appropriate safeguards.
9. Children
The Service is for business use and not directed to anyone under 16; we do not knowingly collect their information.
10. Changes and contact
We may update this Policy; material changes will be notified in the Service or by email, with the effective date above updated. The English-language version controls; translations are for convenience.
Contact: Lily Jack Tech, LLC · privacy@investorrelationssuite.com