Privacy Notice

Who we are

The Lily Perspective is operated by Lillian Caryl Niehaus, trading as “The Lily Perspective”. We are the data controller for the personal data described here.

What we collect and why

• Account details (email address, login credentials, or Google sign-in profile) — to create and secure your account. Basis: contract.
• Questions you ask and documents you request (including conditions you select and optional notes) — to provide Ask the site and appointment documents, and to show your past conversations. Basis: contract; where this includes health information, your explicit consent, which you give by submitting it.
• Subscription status (plan, status, renewal date, Paddle customer reference) — to unlock Premium. Basis: contract.
• Technical data (IP address, device and browser information, error logs) — to keep the service secure and working. Basis: legitimate interests.

Some tools, like the operative report decoder, run entirely in your browser and send nothing to us. We do not sell your data or use it for advertising.

Who we share it with

• Service providers who host the site and database, and who provide the AI models that answer questions (your text is sent to them only to generate your answer).
• Paddle, our Merchant of Record, for selling Premium, managing subscriptions, payments, tax and invoicing.
• Professional advisers (legal, accounting) where needed.
• Authorities where the law requires it.

These providers may process data outside your country, including in the United States, under contractual safeguards such as Standard Contractual Clauses.

How long we keep it

We keep account data and saved conversations while your account is open, and delete or anonymize them within 30 days of account deletion, unless the law requires longer (for example, tax records held by Paddle).

Your rights

Depending on where you live (including under GDPR/UK GDPR and California law), you can ask to access, correct, delete, restrict or port your data, object to processing, and withdraw consent at any time. We respond within one month. You can also complain to your local data protection authority. Contact us through our social channels to make a request.

Security

We use encryption in transit, access controls that limit each account to its own data, and reputable providers. No system is perfectly secure, but we take reasonable technical and organizational measures to protect your data.

Cookies and storage

We use only essential browser storage: to keep you signed in, remember your light/dark theme, and remember your place while reading. We do not use advertising cookies. You can clear this storage in your browser settings.