Legal

Privacy

Clear terms for how we handle personal information - and what we never do with your firm’s data.

Last updated August 4, 2026·Security controls

We do not sell personal information. Customer Data is not used to train shared models. Encryption, access control, and audit commitments are detailed on our Security page.

  • Lysp (“Lysp,” “we,” “us,” or “our”) provides pricing intelligence software for law firms. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our websites, request a demo, or use the Lysp platform.

    If you are a firm using Lysp under a customer agreement, that agreement and our Security Addendum govern processing of Customer Data. This policy describes our general practices and how we handle personal information of website visitors, prospects, and users.

  • Account and contact information: name, work email, firm name, role, and communications you send us (for example demo requests or support messages).

    Product usage data: logs and diagnostics needed to operate, secure, and improve the service - such as feature usage, device/browser type, IP address, and authentication events.

    Customer Data you or your firm upload or sync into Lysp (matter history, rate cards, OCGs, proposals, negotiation records, and related content) is processed to provide the service under your firm’s instructions.

    Website analytics: limited cookies or similar technologies may be used to understand site performance and marketing attribution, subject to your preferences where required.

  • To provide, secure, and support the Lysp platform and related services.

    To respond to sales, support, and other inquiries you initiate.

    To improve product reliability, usability, and security - without training shared models on Customer Data.

    To comply with law, enforce agreements, and protect Lysp, our customers, and users.

    To send product or service communications. Marketing emails are sent only where permitted, and you can unsubscribe.

  • By default, Customer Data and customer content (inputs, outputs, uploaded files, rate cards, OCGs, and negotiation records) are not used to train underlying foundation models.

    Model providers process workloads under contractual zero data retention commitments for customer workloads, except where a firm expressly requests a bespoke model trained only on that firm’s corpus for its exclusive use.

  • Service providers and subprocessors who help us host, secure, support, or operate Lysp, under confidentiality and data-protection obligations.

    Professional advisors, auditors, or authorities when required by law or to protect legal rights.

    In connection with a corporate transaction (for example a merger or financing), subject to appropriate safeguards.

    We do not sell personal information.

  • We retain personal information as needed to provide the service, meet legal obligations, resolve disputes, and enforce agreements.

    Customer Data retention and deletion follow the customer agreement and firm-configured settings, including deletion workflows when an engagement ends.

  • We use administrative, technical, and organizational measures designed to protect information, including encryption in transit and at rest, access controls, monitoring, and independent audits described on our Security page.

    No method of transmission or storage is perfectly secure. Please use strong credentials and firm-managed access policies.

  • Depending on your location, you may have rights to access, correct, delete, or restrict certain personal information, or to object to certain processing and request portability.

    California residents may have additional rights under the CCPA/CPRA. EU/UK individuals may have rights under GDPR/UK GDPR.

    To exercise rights, contact us at the email below. We may need to verify your request. If you are a user of a firm customer, we may direct you to that firm as controller of Customer Data.

  • Lysp may process information in the United States and other regions where we or our subprocessors operate.

    Firms with localization requirements may process in supported regions (including US, EU / Switzerland, and Australia) as described in our security documentation and customer agreement.

  • Lysp is built for business use by law firms and related professionals. We do not knowingly collect personal information from children.

  • We may update this Privacy Policy from time to time. The “Last updated” date will change when we do. Material changes will be communicated as appropriate through the site or customer channels.

  • For privacy questions or requests: nyasha@lysp.ai

    For security questionnaires and enterprise packs, visit our Security page or contact sales.

Lysp

Privacy questions or data requests.

nyasha@lysp.ai