Privacy
Pre-launch draft — the operator, production hosting location, processor locations and retention schedule must be confirmed before customer onboarding.
Information processed
The service processes account names and email addresses, session information, security logs, billing identifiers, research queries, uploaded documents, investigation records and reports. Research material may contain personal information about people other than the account holder.
How information is used
Information is used to authenticate accounts, provide investigations and reports, manage subscriptions, respond to enquiries, protect the service and diagnose failures. Organisation billing administrators can see the email addresses of members they add; membership does not itself share investigation data.
Service providers and overseas processing
Paddle handles payment information under its own privacy notice; eyeOnFox stores subscription and customer identifiers rather than full card details. Account email delivery uses a configured transactional email provider. Research queries, document extracts and case context may be sent to the selected AI provider. Search and data-source requests also disclose the search terms needed to perform the research.
The code supports several cloud AI providers and local processing. Australian subject matter does not imply that information remains in Australia. Production providers and processing countries must be documented before onboarding. Do not upload sensitive or classified information until the applicable deployment and processing arrangements have been agreed.
Cookies and storage
Session cookies support authentication. The billing checkout may use Paddle cookies and browser storage for payment processing and fraud prevention. The landing page does not include advertising analytics.
Access, correction, deletion and complaints
Contact contact@lyramirae.com to request access, correction or deletion, ask about retention, or make a privacy complaint. Identity and authority may need verification. Some records may need to be retained for legal, security or accounting purposes; backup deletion timing must be set out in the final retention schedule. You may also contact the Office of the Australian Information Commissioner where applicable.