This policy explains how LYRC LLC, a Tennessee limited liability company ("LYRC", "we", "us") collects, uses and shares personal information when you use lyrc.studio, our apps and connectors (the "Service"). It also covers people who visit or sign up on an artist page or listening page hosted on LYRC (Section 14 covers artist pages), and people who comment on Instagram posts of an artist who uses LYRC's comment replies.
The short version
- We collect what you give us (account, songs, footage, photos), what your use generates (projects, logs), and what connected services send us (Google sign-in, Instagram, and optional YouTube or TikTok connections).
- We use it to run LYRC, take payments, support you, keep things secure, and measure our marketing.
- We don't sell your personal information for money. We do use Meta and Reddit to measure our ads. You can turn that off in Cookie Preferences, and we honor Global Privacy Control.
- AI providers process your content only to make what you ask for. We don't train our own AI on it.
- You can download, correct or delete your data. Delete your account in Settings → Profile, or use our privacy request form.
- On an artist's page, the artist sees visit stats (counted without cookies) and any email or phone number you choose to leave. Some artists add their own Meta or TikTok pixel. Section 14 explains.
1. What we collect
1.1 Information you give us
| Type | Examples |
|---|---|
| Account | Name, email address, password (stored only as a secure hash), language, marketing-email choice, your answer to "how did you hear about us?" |
| Profile and artist page | Display name, username, photo, bio, location and roles you choose to show, links, Spotify or Apple Music artist, page design, fan signup settings, ad pixel IDs, and a Laylo API key if you connect one (stored encrypted) |
| Your content | Song sections you upload (we store the trimmed snippet, up to about 30 seconds), lyrics and timing, footage, images, fonts, prompts, templates, projects, the videos and images you make |
| Photos of people | Reference photos you save (for example a selfie for AI b-roll) and the photo you add during onboarding. See Section 4. |
| Links you import | The web address of any video you import, and the clips we cut from it |
| Payments | Your plan, purchases, refunds and billing status. Card details go directly to Stripe; we never see the full number. Stripe gives us a card fingerprint we use only to spot fraud. |
| Support | Messages with our in-app assistant (Deebo), emails to support, bug reports, cancellation reasons, privacy requests |
| Creator program | If you apply or join: Instagram handle, country, PayPal email, sample links, and tax forms (W-9 or W-8BEN) if your earnings require them |
1.2 Information collected automatically
- Device and log data: IP address, browser and device type, pages and features used, timestamps, and error reports.
- Usage events: actions like starting an export or a transcription, recorded against your account so we can run, fix and improve the Service.
- Where you came from: if you arrive from an ad or link, the campaign tags, referring site and ad click IDs in that link (kept in a first-party cookie for 90 days and saved with your account if you sign up).
- Cookies and similar tools: see Section 6 and our Cookie Policy.
- Consent records: your cookie choices, with the time, IP address and browser, so we can show what you agreed to.
We don't collect precise location. We use your browser's time zone to decide which cookie and email-consent choices to show you.
1.3 Information from others
- Google: if you sign in with Google, your name, email address and profile photo. Google sign-in alone does not grant YouTube access. If you separately connect YouTube for publishing, Section 7.1 explains that access.
- Instagram: if you connect an account. See Section 7.
- Stripe: payment status, refunds and disputes.
- Music services: public information about artists and releases from Spotify, Apple Music, Deezer and Odesli (song.link). We don't connect to your personal Spotify or Apple account.
2. How we use it
- Provide the Service: transcribe lyrics, find beats, generate and render videos and images, host your artist page, post to accounts you connect.
- Run your account and billing, including renewals, receipts, failed-payment notices and refunds.
- Support you, including through our AI support assistant.
- Keep LYRC secure: stop bots, fraud, abuse and payment disputes, and enforce our Terms.
- Understand and improve the product (what's used, what breaks, what's slow).
- Measure and improve our advertising (Section 5), and send marketing emails if you agreed to get them (Section 8).
- Follow the law: tax, accounting, legal requests and our legal rights.
We don't use your content to train our own AI models. We don't make decisions about you that have legal or similarly significant effects using only automated processing.
4. Photos of people
- When you save a reference photo or add one during onboarding, we store it privately in your account.
- When you ask for content based on it (AI b-roll, AI video, cover art), we send the photo, through a link that expires within an hour, to the AI provider making it, and to an OpenAI model that writes the instructions.
- We don't use photos to identify anyone, and we don't create face geometry, face templates or other biometric identifiers. AI providers use the image to make the content you asked for, under their terms.
- The onboarding photo also becomes your artist page photo if you choose it, which makes it public when you publish that page.
- LYRC staff can see photos only when needed for support, safety or to enforce our Terms.
- Delete a photo anytime in Settings → Profile, under References. Deleting your account deletes them all.
5. Advertising: what Meta and Reddit receive
We use Meta and Reddit to see whether our ads lead to signups and purchases, and to show ads to people who visited LYRC.
- In your browser: the Meta Pixel and Reddit Pixel load only after you accept advertising cookies. They send page views and events like signing up or subscribing.
- From our servers: when you sign up, start checkout or buy, we may send that event directly to Meta and Reddit. It includes a scrambled (hashed) version of your email, your IP address and browser, your account ID, the plan and the amount.
We never send these events, from your browser or our servers, if:
- you turned off advertising in Cookie Preferences;
- your browser sends a Global Privacy Control (GPC) signal; or
- you are in the EU, EEA, UK or Switzerland and haven't said yes to advertising cookies.
Elsewhere, until you make a choice, our server may send them. Under some U.S. state laws this counts as "sharing" or "targeted advertising". You can opt out anytime with the button below or the "Cookie Preferences" link in our site footer, or by turning on GPC in your browser. Meta and Reddit handle what they receive under their own privacy policies.
Artists can add their own pixels too: a Meta Pixel on some listening ("ONCE") pages, which sends page-view and listening events for that artist, and a Meta or TikTok Pixel on their artist page (Section 14.3).
6. Analytics, cookies and similar tools
- Essential: cookies that keep you signed in, remember your cookie and language choices, protect sign-in from bots (Cloudflare Turnstile) and protect payments (Stripe). These are always on.
- Error monitoring: Sentry records errors with your account ID, page and browser details so we can fix problems. Always on.
- Analytics (your choice): PostHog records which pages and features are used. It may record sessions with what you type hidden. It loads only after you allow analytics. Separately, our servers record basic usage events tied to your account ID (for example "export started") to run and improve LYRC; these don't go to advertisers.
- Advertising (your choice): see Section 5.
- Artist page stats: visits to artist pages are counted without cookies. Section 14.1 explains what's recorded.
- Third-party players: Spotify and Apple Music players on artist pages, and Laylo sign-up forms on listening pages, are loaded from those companies, which set their own cookies.
Full list and how to change your choices: Cookie Policy.
7. Instagram data
If you connect an Instagram professional account to LYRC, we receive and use the following, only for the features you turn on:
| Feature | What we receive and keep | Why |
|---|---|---|
| Connection | Your Instagram account ID, username, display name, profile photo, follower and post counts, and an access token. Tokens are stored encrypted. | To show which account is connected and act on it for you |
| Posting and scheduling | The videos and captions you choose to publish, when they were posted, their links and basic performance stats | To publish your posts and show your post history |
| Comment replies | Your trigger keywords and reply text; for each comment that matches: the comment ID, the commenter's Instagram ID and whether the reply was sent. We read the comment text only to check for your keyword and don't store it. We never read your DMs. | To send the one private reply you set up and avoid repeat messages |
- Reply logs (including commenters' Instagram IDs) are kept for up to 30 days.
- We don't sell or license Instagram data, use it for advertising, or share it except with the service providers who help us run LYRC.
- Disconnect or delete: disconnect anytime in LYRC (this turns off replies and deletes our stored access token), or remove LYRC in Instagram under Settings → Apps and websites. When Meta sends us a data-deletion request for your account, we delete the connection, your reply triggers, reply logs and stats. The record of posts LYRC published for you stays in your LYRC post history until you delete it or your LYRC account. You can also email support@lyrc.studio or use our privacy request form.
- If you commented on a post and got a reply through LYRC, the artist who runs that account controls those replies. You can ask us to delete your reply-log entry by emailing support@lyrc.studio.
8. Email
- We send emails you need: sign-in, receipts, renewal and payment notices, export and account notices. You can't opt out of these while you have an account.
- Marketing emails (tips, product news, offers) go to you only if you left the "Send me tips" box checked when you signed up or turned them on later. Every one has an unsubscribe link, and you can change this in your settings anytime.
- Our emails may record whether they were opened or a link was clicked, so we can measure them and keep our sending reputation healthy.
9. How long we keep it
| Data | How long |
|---|---|
| Account, profile and settings | Until you delete your account |
| Projects, templates, uploads, footage, photos, generated media | Until you delete them or your account |
| Rendered video exports | 48 hours after they finish (longer only if a scheduled post still needs one) |
| Instagram comment-reply logs | Up to 30 days |
| Artist page visit stats | While the artist page exists; deleted with the page or the artist's account |
| Fan signups on an artist page | Until the artist deletes the page or their account, or you ask us to delete yours |
| YouTube and TikTok cached statistics | 29 days unless refreshed; cleared when the connection ends |
| Support conversations | While your account is open; deleted with your account. Chats from people without an account are kept to improve support unless you ask us to delete them. |
| Consent and privacy-request records | As long as needed to show what was chosen or requested. Signed-in consent records are deleted with your account. |
| Payment, invoice and tax records | As long as tax and accounting law requires (generally up to 7 years), even after account deletion |
| Logs, error reports and analytics | For a limited time under our providers' retention settings |
| Backups | Deleted data can stay in routine backups until they are overwritten |
10. Deleting your account
Go to Settings → Profile → Delete Account. Deletion happens right away and can't be undone. It cancels your subscription and deletes your profile, projects, templates, uploads, photos (including artist page images), generated media, artist page (with its visit stats and fan signups), credits, support conversations, connected social accounts, and removes you from our email list.
We keep payment and tax records the law requires us to keep, records of legal and privacy requests, and information we need to prevent fraud or abuse (for example, that an account was closed after a payment dispute). Copies already sent to AI providers, Meta or Reddit are handled under their retention policies.
11. Security
We use encryption in transit (HTTPS), encryption for stored connection tokens, hashed passwords and API keys, access controls that keep each account's data separate, and limited staff access. No service is perfectly secure. If a breach affects your personal information, we'll notify you as the law requires.
12. Your rights and choices
Wherever you live, you can ask us to:
- tell you what personal information we have about you and give you a copy, in a portable format;
- correct information that's wrong;
- delete your information;
- stop using it for advertising (Cookie Preferences or GPC do this right away) or marketing emails (unsubscribe link).
Use the privacy request form or email support@lyrc.studio. We reply within 30 days (sooner where the law requires). We'll confirm the request came from the account owner, usually by replying from our support address, before acting on it. An authorized agent can ask for you if they show your written permission. We won't treat you differently for using these rights.
If we turn down a request, you can appeal by replying to our answer within 45 days. We'll answer the appeal within 60 days. If you still disagree, you can contact your state attorney general or your data protection authority.
12.1 U.S. state privacy laws
Residents of states with consumer privacy laws (including California, Colorado, Connecticut, Virginia, Texas, Oregon and others) have the rights above. In the last 12 months we collected the categories in Section 1 (identifiers, commercial information, internet activity, audio and visual content, and inferences about which features you like) for the purposes in Section 2, and disclosed them to the recipients in Section 3. We don't sell personal information for money. Our advertising measurement may be "sharing" or "targeted advertising"; opt out as described in Section 5. We don't use sensitive personal information to infer anything about you.
12.2 EU, EEA, UK and Switzerland
LYRC LLC is the controller of your personal information. We rely on these legal bases: performing our contract with you (running the Service and billing); our legitimate interests (security, fraud prevention, error monitoring, product improvement and server-side usage events, balanced against your rights); your consent (analytics and advertising cookies, marketing emails, which you can withdraw anytime); and legal obligations (tax and accounting). You may also object to processing based on legitimate interests and ask us to restrict processing. You can complain to your local data protection authority.
Your data is processed in the United States and other countries where our providers operate. When it leaves your region, we rely on the providers' certification under the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) or on the European Commission's Standard Contractual Clauses.
13. Children
LYRC isn't for children under 13, and we don't knowingly collect personal information from them. Users from 13 to 17 need a parent's or guardian's permission. If you believe a child under 13 has an account, email support@lyrc.studio and we'll delete it.
14. Visiting or signing up on an artist page
Artists use LYRC to host a public page with their music and links. The artist decides what their page collects and what they do with their fan list; LYRC stores it and runs the page for them.
14.1 Visit stats
- When you open an artist page, we record when it was opened, which links you tap (and which music app you pick), the site or link you came from (including campaign tags), your country, region and city worked out from your IP address, your device type, operating system and browser, and whether you're in an app's built-in browser.
- We don't store your IP address. To count people instead of page loads, we make a one-way code from your IP address, browser and the date. It changes every day, so it can't follow you from one day to the next, and it can't be turned back into your IP address.
- These stats use no cookies and store nothing on your device.
- The artist sees them in LYRC. Artists on paid plans also see where visitors came from, their cities, countries and devices, and can download the stats as a spreadsheet.
14.2 Signing up for an artist's updates
- If the artist turned on a signup box and you sign up, we store your email address, and your phone number if you give one, with the date, the country and city worked out from your IP address, and the site or link you came from.
- We take a phone number only if you tick the box to get texts from that artist. We save the exact words you agreed to and when.
- The list belongs to the artist. They can see it and download it, and they send any emails or texts themselves. LYRC never emails or texts you for the artist and doesn't use the list for its own marketing.
- If the artist connected Laylo, your email address and phone number also go to the artist's Laylo account, under Laylo's privacy policy.
- To stop messages, use the unsubscribe link or reply STOP to a text. To have your signup deleted from LYRC, email support@lyrc.studio or use our privacy request form. Copies the artist already downloaded or sent to Laylo are theirs to delete.
14.3 Artists' own Meta and TikTok pixels
- Artists on paid plans can add their own Meta Pixel or TikTok Pixel to their page. Then Meta or TikTok receives a page view when you open it, the links you tap (and which app), and your signup, for the artist's ads. They set their own cookies (see our Cookie Policy) and handle this data under their own privacy policies.
- These pixels never load if your browser sends Global Privacy Control or you said no in Cookie Preferences.
- In the EU, EEA, UK and Switzerland, and when your device's time zone doesn't show where you are, they wait until you tap Accept in the pop-up. Elsewhere they load without asking. You can turn them off anytime with "Cookie Preferences" at the bottom of the page, which reloads the page without them.
15. Third-party services
- Sign-in protection uses Cloudflare Turnstile, which collects signals from your browser to tell people from bots under the Turnstile Privacy Addendum.
- LYRC's use of information received from Google APIs follows the Google API Services User Data Policy.
- Links to other sites, embedded players and connected services follow those companies' own privacy policies.
16. Changes to this policy
We'll update this policy when our practices change and change the date at the top. For material changes, we'll tell you by email or in the app before they take effect.
17. Contact
Privacy questions and requests:
Email: support@lyrc.studio
Instagram: @lyrcstudio
LYRC LLC
116 Agnes Road, Ste 200
Knoxville, TN 37919
United States