PRIVACY POLICY

PRIVACY POLICY v. 2025.06
This document ("Privacy Policy") constitutes a policy regarding the collection, use and processing of personal data by Lylli AB, company registration number 556846-2146  with address Skeppargatan 8, 114 52 Stockholm ("Lylli", "we" or "us").This Privacy Policy applies when you use the service provided by Lylli for users to create and publish books using AI technology (the "Service"). The personal data policy is also applicable when you visit our "Website" (https://lyllistudios.com/), when you contact us, when we contact you with news and marketing and when you visit our social media.All definitions in this Privacy Policy shall be interpreted in accordance with applicable data protection laws, which refers to the General Data Protection Regulation (GDPR) 2016/679 on the protection of natural persons with regard to the processing of personal data and the Data Protection Directive 2002/58/EC on the processing of personal data and the protection of privacy in the electronic communications sector, as well as national implementations and other related national legislation.

2. LYLLI’S PROCESSING OF PERSONAL DATA

2.1 Service
We collect and use the following personal data when you use our Service:To use the Service, you must create an account and agree to our User Agreement. By accepting the User Agreement, we enter into an agreement to provide you with the Service. When you create an account and use the Service we collect your name, email address, password, and Content (as defined in the User Agreement). Lylli processes the personal data in order to create and manage the user account, as well as to provide and improve the Service. The legal basis for the processing is to fulfil our obligations towards you under the User Agreement and our legitimate interest to manage the user account and your use of the Service, as well as to improve the Service.Please note that we cannot provide the Service to you if you do not provide us with the personal data as described above. Lylli AB stores the personal data for as long as the user has an account for the Service, unless we have a legal obligation to save the personal data for longer. Welcome to Astrid! We are pleased that you want to use our service to create books with the help of AI.

2.2 Website
When you visit our website, we collect information using technologies such as cookies, pixels and local storage (e.g. on your browser or device). For information on how we use technology and analytics tools and how you can prevent the use of cookies, please see our Cookie Policy. Personal data collected using cookies and the like is processed based on our legitimate interest to better understand how our users and visitors use the Website, how many visits we have to the Website, whether the number of visits varies per season, and more. (Article 6(1)(f)). The personal data collected from these technologies is stored in accordance with the respective cookie duration.

2.3 Contact with us
When you contact us by e-mail, we process the following personal data:
‍
(a) your email address; and
‍
(b) any other information you share with us during communications.

We process the personal data in order to provide customer support and respond to customer inquiries, as well as to follow up on previous questions. We appreciate if the information in your message is kept to the matter at hand and, if possible, avoid bringing up other information that may constitute personal data. The legal basis for this processing is our legitimate interest to be able to answer your questions and provide assistance to our customers and to keep track of our support history (Article 6(1)(f)).

When you contact us for support or for other reasons, we will keep the data for a period of 12 months from your last contact with us. The data will then be deleted.

2.4 Information and marketing
We will use your personal information to send you notifications and notices by email, including sending you marketing about our products and services related to third parties. You may unsubscribe from receiving this email at any time by clicking "unsubscribe" in such email or by contacting us by other means.

We will also process personal data in order to inform you about our updates to the Service, the Website, their terms and conditions, or other important events, based on our legitimate interest to keep you updated on the development of our services (such as new features) (Article 6.1 (f)).

2.5 Social media
We are present on several social media platforms, and although these platforms process personal data about you as data controllers (for example, regarding your personal account), we also process certain personal data as data controllers (this data refers to information on our pages regarding visits and activity). At Facebook, we are joint data controllers with the platform for activities on our pages. Our joint personal data responsibility with Facebook is described here. For more information about these platforms' respective processing of personal data about you, please see their respective privacy policies (Facebook).

Our processing of personal data is based on our legitimate interest to better understand what type of communication, actions and messages on our part produce results, and to better understand our company and social media presence (Article 6.1 (f)).

3. TRANSFER OF PERSONAL DATA
We may share and transfer your personal data to payment service providers, suppliers of IT systems, system administration and partners, as well as to auditors, advisors, legal representatives or similar recipients when required by law, other statutes, decisions by public authorities, decisions by courts, or to protect our rights.

Personal data may be transferred to and processed by parties located outside the EU/EEA and in such cases we ensure that personal data is processed in accordance with applicable data protection laws and that appropriate safeguards are taken, for example by entering into standard contractual clauses approved by the European Commission for the data transfers to it/these recipients. You can obtain further information about the transfer by contacting us via contact@lyllistudios.com.

When you visit our Website or use the Service, you may be directed to other websites where their collection of personal data is outside our control. The privacy policy of these websites will govern the handling of the information collected from you.

4. LEGAL REQUESTS AND PREVENTION OF HARM
We may use, store, and share your information in response to lawful requests (such as search warrants, court orders, subpoenas, etc.), or when necessary to detect, prevent, and address fraud and other criminal activity, to protect ourselves, you, and other users, including as part of an investigation if we have a good faith belief that it is required to do so by applicable law. In such cases, our processing of personal data is based on the legal basis that it is necessary to comply with a legal obligation, and it is stored for as long as the legal obligation requires. We may also process personal data about you in order to establish, exercise or defend legal claims, or otherwise to safeguard our rights. In such cases, our processing of personal data is based on our legitimate interest in safeguarding our rights, and the personal data is stored for the duration of the case and thereafter for a period of ten years.

5. CHILDREN
To create an account with us, you need to be at least 18 years old. If you are the parent or guardian of a person under the age of 18 and are aware that a child has provided us with personal data without your consent, please contact contact@lyllistudios.com to exercise your rights of access, rectification, erasure, restriction of processing and to object.

6. YOUR RIGHTS
You always have the right to object to the processing of personal data for direct marketing purposes, and you have the right to object to any other processing of personal data that is based on our legitimate interests.

You have the right to request access to and further information about the processing of your personal data, or to request that we correct, correct, complete, delete or restrict the processing of your personal data. You have the right to receive a copy of the personal data that we process about you free of charge once a year. If you wish to request additional copies, we may charge a reasonable fee based on the administrative costs.

If the processing is based on the legal basis of consent or performance of a contract, you have the right to data portability. Data portability means that you can receive the personal data you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit such personal data to another data controller.

7. CONTACT INFORMATION
To exercise your rights or if you have any questions about our processing of your personal data, please contact us at the following address: contact@lyllistudios.com. Please enter the email address you used to register your account. Please note that you may be required to verify your identity before your request can be processed.

If you have any complaints about our processing of your personal data, you may lodge a complaint with the relevant data protection supervisory authority. You can find more information about local data protection authorities by clicking on the following link: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.

8. CHANGE IN OWNERSHIP
If the ownership of our business changes, we may transfer your information to the new owners so that they can continue to provide the services we provide. The new owners shall continue to comply with the commitments we have made in this Personal Data Policy.

9. NOTIFICATION OF CHANGES
We may make changes to the Personal Data Policy. If the changes are material, we will notify you as appropriate in the circumstances and, if required by applicable law, ask for your consent.