Privacy Policy

Last updated May 07, 2026

This Privacy Policy describes how Super Layzer Limited ("Company", "we", "us", or "our") — a company registered in England and Wales with company number 17072094 — collects, uses, and shares personal information of users of https://layzer.ai (the "Site") and the products and services that link to this Policy (collectively, the "Services").

By using the Services, you accept the practices described in this Policy. If you do not agree, please do not use the Services.

1. Information We Collect

Information you provide directly

• Account information: name, email address, password (when using email/password sign-up)
• Profile information: display name and avatar (provided by you or imported from third-party authentication providers)
• User content: prompts, chat messages, files you upload, and other content you submit through the Services
• Payment information: billing address and subscription details (we do not store credit or debit card numbers — those are handled exclusively by our payment processor, Polar)
• Authentication data: OAuth tokens, session cookies, and two-factor authentication codes when you enable 2FA
• Communications: feedback, support requests, and other information you send us

Information collected automatically

• Log and usage data: pages visited, features used, time spent, interactions with AI features, request paths
• Device data: browser type, operating system, screen resolution, device identifiers
• Network data: IP address, approximate geographic location derived from IP
• Cookies: see Section 8: Cookies

Information from third parties

When you sign in with or connect a third-party account (Google, GitHub, Discord, Notion, Spotify, Strava, Etsy, Twitter/X), that provider shares profile data with us based on the OAuth scopes you authorise — typically your name, email address, profile picture, and a unique identifier.

Sensitive information

We do not intentionally collect special categories of personal data (health information, biometric data, racial or ethnic origin, political opinions, religious beliefs, sex life or sexual orientation, or government-issued identifiers). You should not submit such information through the Services.

2. How We Use Your Information

We use personal information to:

• Provide the Services — authenticate users, run AI features, process payments, deliver toolkit integrations
• Communicate with you — respond to support requests, send transactional emails (receipts, account notifications, password resets)
• Improve the Services — analyse usage patterns, diagnose problems, develop new features
• Maintain safety and security — detect and prevent fraud, abuse of AI features, attempts to violate our Terms or third-party AI provider terms, and other harmful activity
• Comply with legal obligations — respond to lawful requests, meet tax and accounting requirements, defend legal claims

3. AI Processing of Your Content

Layzer is built on top of large language models and other AI systems provided by third parties.

How your content reaches AI providers

When you use AI-powered features, your prompts, messages, and uploaded content are transmitted to one or more of the following AI providers to generate responses:

We do not control how these AI providers process your data once it has been transmitted. Each operates under its own terms and privacy policy. You are responsible for reviewing those terms before using AI features that rely on them.

We do not train AI models on your data

We do not use your personal information, prompts, messages, or uploaded content to train any AI models — our own or anyone else's. We do not sell or otherwise provide your content to third parties for the purpose of training AI models.

The AI providers we use may, under their own policies, retain your inputs for limited periods (for abuse monitoring, etc.) — refer to each provider's privacy policy for specifics.

What you should not submit

You should not submit confidential, regulated, or sensitive information through the Services — including health information, financial account details, government identifiers, or content covered by legal privilege. AI-generated outputs may also be inaccurate or fabricated and should not be relied on as professional advice (medical, legal, financial, or otherwise) without independent verification.

4. How We Share Your Information

We share personal information with third-party service providers who help us operate the Services. We do not sell your personal information.

Service providers

Authentication and toolkit providers

When you sign in with or connect a third-party account, the relevant provider receives data about that authorisation. Providers we integrate with include Google, GitHub, Discord, Notion, Spotify, Strava, Etsy, and Twitter/X. Your relationship with each provider is governed by their own privacy policy.

AI providers

See Section 3: AI Processing of Your Content for the AI providers we share content with.

Other categories of recipients

• Professional advisors — lawyers, accountants, and auditors in the course of services they provide to us
• Legal and safety — law enforcement, regulators, or other parties when required by law, subpoena, or to protect the rights, property, or safety of users or others
• Business transfers — if we merge with, are acquired by, or sell substantially all assets to another company, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Lawful Bases for Processing (UK & EU GDPR)

Where the UK GDPR or EU GDPR applies to you, we rely on the following lawful bases:

• Performance of a contract — to provide the Services, process your prompts through AI providers, manage subscriptions, and deliver toolkit integrations you authorise
• Legitimate interests — to analyse usage and improve the Services, detect and prevent abuse (including misuse of AI features), and respond to feedback
• Consent — for non-essential cookies and any future marketing communications
• Legal obligation — to retain billing records, respond to lawful requests, and meet tax and accounting requirements
• Vital interests — in the rare case where processing is necessary to protect someone's life

6. Your Rights

If you are in the UK or EU, you have the following rights under the UK GDPR / EU GDPR:

• Access — request a copy of personal information we hold about you
• Correction — ask us to correct inaccurate or incomplete information
• Erasure — ask us to delete your information ("right to be forgotten"), subject to legal exceptions
• Restriction — ask us to limit how we use your information
• Portability — receive your information in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — at any time, where processing is based on consent

You may exercise most rights by signing into your account settings. For requests we cannot complete via account settings (such as full data deletion), email privacy@layzer.ai. We will respond within the timeframes required by applicable law.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) or your local EU supervisory authority.

7. Data Retention

We retain personal information for as long as necessary to provide the Services and meet our legal obligations:

• Account information — until you delete your account, plus a reasonable backup retention period (typically up to 30 days)
• Chat history and user content — until you delete it or close your account
• Payment and billing records — retained for at least 6 years to comply with UK tax and accounting law
• Server logs and analytics — typically retained for up to 12 months in identifiable form, then anonymised or deleted
• Support communications — retained while necessary to address the request, then archived or deleted

When personal information is no longer required, we delete it or render it anonymous.

8. Cookies

We use cookies and similar technologies to:

• Keep you signed in (session cookies set by our authentication system)
• Measure how the Services are used (analytics cookies set by PostHog)
• Remember your preferences (e.g. light/dark theme)

You can control cookies through your browser settings. Disabling cookies may affect your ability to use parts of the Services. For general information about cookies, see allaboutcookies.org.

9. Security

We use a combination of technical and organisational measures to protect your information, including encryption in transit (HTTPS), encrypted storage where appropriate, access controls, and audit logging.

No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security.

10. International Data Transfers

We are based in the United Kingdom. Some of our service providers and AI providers operate in the United States and other jurisdictions outside the UK and EEA. When we transfer your personal information internationally, we rely on appropriate safeguards required by law — including the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or equivalent mechanisms.

11. Children

The Services are intended for users aged 18 or older. We do not knowingly collect personal information from anyone under 18. If you believe a child under 18 has provided us with personal information, please contact us at privacy@layzer.ai and we will take appropriate action.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top and, where appropriate, notify you by email or within the Services. By continuing to use the Services after changes take effect, you agree to the updated Policy.

13. Contact Us

For privacy questions or to exercise your rights, contact:

Super Layzer Limited Company No. 17072094 5 Ivegate, Yeadon, Leeds, England, LS19 7RE privacy@layzer.ai