Legal

Privacy Policy

Last updated: 31 March 2026

1. Who We Are

Liris Technologies Ltd ("Company", "we", "us", or "our") is the data controller responsible for your personal data. We are registered in England and Wales with company number 15882599 and our registered office is at Tec Marina, Terra Nova Way, CF64 1SA, United Kingdom.

We operate Alys, an AI-powered video editing platform accessible at heyalys.com and app.heyalys.com (the "Service").

Email: [email protected]

2. What Data We Collect

We collect and process the following categories of personal data:

Account information

• Name and email address
• Password (stored in hashed form)
• Account preferences and settings

Payment information

• Billing name and address
• Payment card details (processed securely via our third-party payment processor; we do not store full card numbers)
• Transaction history

User content

• Video footage, images, and audio files you upload
• Text instructions and prompts you provide to the Service
• Edited output videos generated by the Service

Usage data

• IP address, browser type, device information, and operating system
• Pages visited, features used, and actions taken within the Service
• Referring URLs and session duration
• Cookies and similar tracking technologies (see Section 8)

3. How We Use Your Data

We use your personal data for the following purposes:

Purpose	Legal Basis (UK GDPR)
Providing and operating the Service	Performance of contract
Processing payments and managing subscriptions	Performance of contract
Processing your video content using AI to deliver edits	Performance of contract
Sending service-related communications (e.g. account updates, security alerts)	Legitimate interest
Improving and developing the Service	Legitimate interest
Analysing usage patterns to improve user experience	Legitimate interest
Sending marketing communications (with your consent)	Consent
Complying with legal obligations	Legal obligation

4. AI Processing of Your Content

When you use the Service, your uploaded video content is processed by our AI systems to generate edited outputs. This processing is essential to providing the Service.

• Your content is processed solely for the purpose of delivering your requested edits
• We do not use your content to train our AI models unless you explicitly opt in to such use
• Your content is stored temporarily during processing and retained in accordance with Section 6

5. Who We Share Your Data With

We may share your personal data with the following categories of recipients:

• Cloud infrastructure providers who host and store data on our behalf
• Payment processors who handle billing and payment transactions securely
• Analytics providers who help us understand how users interact with the Service
• AI and machine learning service providers who provide infrastructure for content processing
• Professional advisors including lawyers and accountants where necessary
• Law enforcement or regulatory bodies where required by law

We require all third-party service providers to respect the security of your personal data and to process it in accordance with applicable law. We do not sell your personal data to third parties.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Account data: retained for the duration of your account and for up to 12 months after account deletion
• User content: retained while your account is active. Deleted content is removed from our systems within 30 days
• Payment records: retained for up to 7 years in accordance with accounting and tax obligations
• Usage data: retained for up to 24 months

7. International Data Transfers

Your data may be transferred to and processed in countries outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by the UK Information Commissioner's Office (ICO)
• Transfers to countries deemed to have adequate data protection by the UK government

8. Cookies

We use cookies and similar tracking technologies to operate and improve the Service. These include:

• Essential cookies: required for the Service to function (e.g. authentication, security)
• Analytics cookies: help us understand how users interact with the Service
• Preference cookies: remember your settings and preferences

You can manage your cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of the Service.

9. Your Rights

Under the UK GDPR, you have the following rights:

• Right of access: request a copy of the personal data we hold about you
• Right to rectification: request correction of inaccurate or incomplete data
• Right to erasure: request deletion of your personal data (subject to legal obligations)
• Right to restrict processing: request that we limit how we use your data
• Right to data portability: receive your data in a structured, commonly used format
• Right to object: object to processing based on legitimate interests or direct marketing
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at [email protected]. We will respond within one month of receiving your request.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption in transit and at rest, access controls, and regular security assessments.

While we take all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

11. Children's Privacy

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

12. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party services you access through the Service.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

14. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk

15. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at:

Liris Technologies Ltd
Tec Marina, Terra Nova Way
CF64 1SA, United Kingdom
Email: [email protected]