Lyakon Privacy Policy

Last updated: July 16, 2026

This Privacy Policy explains how JMJ Billing LLC ("Lyakon," "we," "us," or "our") collects, uses, discloses, and protects personal information in connection with the Lyakon platform, websites, and related services (the "Service"). It also describes the rights available to individuals.

Lyakon is operated by JMJ Billing LLC, which also operates JMJ Billings (accounts-receivable automation) and JMJ Office (quoting, invoicing, and payments). This Policy covers Lyakon only; the other products are covered by the JMJ Billing LLC privacy policy.

This Policy is incorporated into the Lyakon Terms of Service.

#1. Scope and Our Roles

Lyakon processes personal information in two capacities:

As a controller for information about our account holders and website visitors — for example, when you sign up, log in, pay, or contact us. We decide how and why that information is processed.
As a processor (service provider) for the data our customers load into or generate within their tenant, including information about their prospects and contacts ("Prospect Data"). For Prospect Data, our customer is the controller; we process it on their behalf and under their instructions to provide the Service. If you are a prospect and want to exercise rights over data held in a customer's tenant, contact that customer; we will assist them as required.

#2. Information We Collect

Information you provide (account holders):

account and profile details (name, business name, email, login credentials);
billing information processed through our payment processor (we receive limited billing metadata, not your full card number);
content you submit, including notes, templates, settings, and communications with us.

Prospect Data (processed for our customers):

business and contact details about prospects our customers add or that the Service enriches, such as name, business name, email, phone, website, and firmographic details. Some of this data originates from public and third-party sources.

Information collected automatically:

usage and log data (pages and features used, actions taken, timestamps);
device and connection data (IP address, browser type, general location inferred from IP);
essential cookies and similar technologies needed to operate the Service and keep you signed in.

Communications metadata (for the sending features):

when customers send outbound messages through the Service, we and our sending provider process message metadata and delivery events (such as sends, bounces, replies, and unsubscribe/suppression signals) to route replies to the correct tenant and to protect deliverability.

#3. How We Use Information

We use personal information to:

provide, operate, secure, and maintain the Service, including tenant isolation and authentication;
process transactions and manage subscriptions and entitlements;
enrich, verify, and normalize lead and contact data as part of the Service's core functionality;
route inbound replies to the correct tenant and enforce suppression and sending controls;
provide support and respond to requests;
monitor, troubleshoot, prevent fraud and abuse, and enforce our Terms;
improve and develop the Service; and
comply with legal obligations.

For account-holder personal information, our legal bases (where applicable, such as under the GDPR/UK GDPR) include performance of a contract, our legitimate interests in operating and securing the Service, consent where required, and compliance with legal obligations.

#4. AI Processing

The Service uses artificial-intelligence features (for example, to score leads, draft or triage messages, and assess funnel health). To provide these features, relevant content may be processed by our AI provider under contractual terms that restrict use of that content to providing the service to us. We do not use these AI features to make legally significant decisions about you without a human in the loop.

We share personal information only as described here:

Subprocessors / service providers who process data on our behalf under contract, limited to providing services to us. Representative providers include hosting and database (Supabase, Vercel), AI (Anthropic), web data enrichment (Scrape.do), bot protection (Cloudflare Turnstile), and payments (Stripe). This list may change; we maintain reasonable diligence over subprocessors and will update this Policy when the list changes materially.
Our customers, with respect to Prospect Data in their tenant, which is accessible to that customer.
Other JMJ Billing LLC products, where your account is part of a bundled JMJ Billing LLC suite subscription. In that case Lyakon and the other JMJ Billing LLC products (JMJ Billings and JMJ Office) share account and customer records between them so the products can work as one suite — for example, so a contact you manage in Lyakon can be invoiced in JMJ Office without re-entry. This sharing happens only for accounts that hold a bundled suite subscription. If your account is Lyakon-only, your data is not shared with the other products.
Legal, safety, and compliance recipients, where we believe disclosure is required by law, regulation, legal process, or to protect rights, safety, or the integrity of the Service.
Business transfers, in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

We do not sell personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under U.S. state privacy laws.

#6. Prospect Data and Enrichment (Please Read)

The Service compiles and enriches contact information about individuals — the prospects — who are generally not Lyakon users, using data our customers provide and data from public and third-party sources. When we process Prospect Data, we do so as a processor on behalf of the customer whose tenant it resides in; that customer is responsible for having a lawful basis to process it and for responding to data-subject and consumer requests.

If you are a prospect and wish to access, correct, or delete information held about you in a customer's tenant, please contact the relevant customer (the business that contacted you). If you contact us, we will forward or assist as required and, where we can identify the responsible customer, refer you to them.

#7. International Transfers

We and our subprocessors may process information in the United States and other countries. Where we transfer personal information across borders in a manner subject to data-transfer laws, we rely on appropriate safeguards (such as standard contractual clauses) where required.

#8. Data Retention

We retain personal information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Customer Data and Prospect Data are retained for the life of the customer's tenant and deleted or anonymized within a reasonable period after account termination, subject to legal retention requirements and backups that cycle out over time.

#9. Security

We use technical and organizational measures designed to protect personal information, including database-enforced tenant isolation, access controls, encryption in transit, and least-privilege practices for sensitive credentials. No system is perfectly secure; we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify affected parties and authorities as required by law.

#10. Your Rights

Depending on where you live, you may have rights to:

access the personal information we hold about you;
correct inaccurate information;
delete personal information;
object to or restrict certain processing;
port your information; and
withdraw consent where processing is based on consent.

For account-holder information, you may exercise these rights by contacting us at the address in Section 14. For Prospect Data, contact the customer whose tenant holds the data (see Section 6). We will not discriminate against you for exercising your rights. You may also have the right to lodge a complaint with a supervisory authority.

U.S. state privacy rights (e.g., California, and other states with comparable laws): you may request to know, access, correct, and delete personal information, and to appeal a denied request. We do not sell or "share" personal information for cross-context behavioral advertising.

#11. Cookies

We use cookies and similar technologies that are necessary to operate the Service, keep you authenticated, and remember your preferences. Because these are strictly necessary for the Service to function, they are used on that basis. Any non-essential cookies, if introduced, will be used only where permitted and, where required, with consent.

#12. Children's Privacy

The Service is intended for business use and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

#13. Changes to This Policy

We may update this Policy from time to time. We will post the updated version with a revised "Last updated" date and, for material changes, provide additional notice through the Service or by other reasonable means.

#14. Contact

For privacy questions or to exercise your rights:

JMJ Billing LLC — Lyakon Email: admin@lyakon.com