Lightnet Privacy Policy

Version: Launch 1.0 · Effective: 13 September 2026

Cyber Inference Inc. ("Lightnet") operates the Lightnet platform. Our mailing address is 228 Park Ave S, PMB 85451, New York, NY 10003, United States. Contact privacy@lightnet.work for privacy questions and requests; security@lightnet.work for security reports; support@lightnet.work for service help.

Your private interactions are not public and are not available to Creators simply because you use their Channels. Lightnet and its providers process those interactions to operate the service. Your account has a Personal Model and memory that work across Channels. This Policy and the AI & Memory Notice explain that distinction.

1. Who is responsible

Lightnet determines processing purposes and means for platform accounts, account-wide personalization, billing, security and support. A Creator may independently determine permitted uses of the limited information received for Channel administration. We identify the relevant Creator at Channel enrollment; Creator status does not give access to private conversations or memory.

Where Lightnet processes a separate dataset solely on a Creator's documented instructions, the relevant data-processing agreement governs that relationship. Roles follow actual processing, not just the name of an agreement.

2. Information processed

Depending on the features you use, we process:

account information such as name/email, authentication identifiers, language and settings;
private conversations, journal entries, goals, check-ins, Deep Dive answers/results, uploaded files and related summaries;
memory, embeddings, inferred preferences and states used in your user-specific Active Inference Personal Model;
voice input, recordings and transcripts, and uploaded or generated images/video and associated metadata;
Channel enrollment, subscription status, progress and permitted sharing choices;
payment and subscription metadata, invoices, refunds and fraud indicators; payment providers handle full payment credentials;
IP/device information, timestamps, feature events, diagnostics and usage needed for reliability, security and billing;
support communications, permissions, acceptance records and legal requests;
for Creators: business/contact details, materials, credentials where relevant, persona permissions, tax/payout information and agreements.

Sources include you, your use of the service, the Creator where an authorized dataset is supplied, sign-in/payment providers and AI-derived summaries or inferences. These inferences can be wrong. Information you provide or we infer may reveal health, beliefs, sexuality, finances or other sensitive aspects of your life. Avoid providing information unnecessary for the feature, especially another person's sensitive records.

Channel profiles can be public. Private user conversations and journals are not public profiles. Deliberately publishing or sending an item through an identified feature makes it available to the selected audience, not automatically to all Creators.

3. Purposes and personal models

We process information to provide accounts and purchased features; generate AI responses and media; maintain your memory and Personal Model; retrieve relevant context across Channels; administer billing; provide support; protect users and systems; meet legal obligations; and maintain service reliability.

Your Personal Model is updated for your own personalized experience. This is distinct from training a shared foundation model. We do not use identifiable private conversations, journals, memory or non-public Creator materials to train general-purpose models for unrelated customers without separate lawful, explicit authorization. We do not use your identifiable private content to train another actor's Personal Model. We may use genuinely de-identified aggregate information for operational improvement where it cannot reasonably identify you.

We send relevant inputs, retrieved context and outputs to external AI/voice/media providers needed for your requested feature. Their retention, safety and logging practices depend on the contracted service and configuration. This Policy does not promise that every provider stores nothing. Provider processing is distinct from Lightnet's retention of your account and memory. Ask privacy@lightnet.work for information about providers used for a particular feature.

4. Creator and human access

For an enrolled Channel, its Creator may receive your name/email, subscription or entitlement status, limited progress fields disclosed for that Channel, and aggregate analytics. These are used for Channel administration, not unrelated advertising or general-model training.

Creators do not receive your private conversations, journal, Deep Dive answers/results, summaries, raw transcripts, memory, inferred private profile or Personal Model as ordinary Channel analytics. If an additional sharing feature is offered, it must identify the data, recipient and purpose before you choose to share. We explain available withdrawal controls and that a recipient may have lawful reasons to retain an already received copy.

Authorized Lightnet personnel may access information reasonably necessary for a support request, documented safety/security or abuse investigation, legal obligations or protection of rights. Access is limited to the relevant purpose and information; private content is not available to Creators through platform support. We do not promise professional confidentiality privilege, absolute secrecy or continuous human monitoring.

5. Other recipients and technologies

Information is processed by providers of hosting/database/storage, authentication, AI inference/routing, voice and media processing, payment/payout services, diagnostics and product analytics as needed for their functions. They receive relevant data rather than an unrestricted right to your account. Providers acting on our instructions are subject to contractual protection; payment or identity providers may also act independently for their own required security, compliance or account functions.

We may disclose necessary information to comply with valid legal process, protect rights or investigate serious safety/security concerns, and to advisers or a successor in a financing or business transfer under appropriate safeguards and applicable law. These provisions do not authorize unrestricted sale of private conversations.

We do not sell personal information or disclose it for cross-context behavioral or targeted advertising. A material change to that practice requires advance disclosure and legally required choices. Cookies or similar storage may support sessions, authentication, preferences and permitted reliability/analytics functions. Optional tracking is subject to the notices and choices required where you use the service; this paragraph is not consent to it.

6. Legal grounds and international processing

Where a legal basis is required, processing necessary for the service you request is based on contract; required tax or legal records on legal obligation; proportionate security, fraud prevention and operational reliability on legitimate interests balanced against individual rights; and optional uses on consent where required. An IP license or acceptance of Terms is not itself consent to every personal-data purpose.

Sensitive-data processing requires an additional legal condition where applicable. We obtain specific consent where required before the relevant processing; voluntary submission alone is not treated as sufficient where explicit consent is needed. You may withdraw consent for future processing without affecting prior lawful processing. Withdrawal may require disabling the affected feature or personalization, but does not authorize switching to an incompatible legal basis to continue it. We do not use the Personal Model to make solely automated decisions producing legal or similarly significant effects about eligibility for employment, housing, credit, insurance or comparable opportunities.

Lightnet is a U.S. company and providers may process information in the United States and other countries. Where applicable law requires transfer safeguards, we use the appropriate legally recognized mechanism and make information about those safeguards available on request. Location and processing determine applicable obligations; we do not assert that people outside a designated market lose mandatory rights. Any required regional supplementary notices or representative contacts are provided for the relevant processing.

7. Retention and deletion

We retain account information, private content and derived memory while needed for your account and requested features, unless you request earlier applicable deletion. Raw voice audio is retained only as needed for the requested voice function, any recording you choose to keep, or a specific lawful retention purpose; transcripts can remain in conversation history and memory. Feature notices explain any additional recording retention before recording begins.

After a verified account-deletion or applicable item-deletion request, we delete covered content and associated identifiable memory/model records from active systems within 30 days, or sooner where required by law. We stop using information approved for deletion for active personalization. Merely removing an item from the interface does not complete deletion of its derived copies.

Isolated backup copies expire through the applicable rotation cycle, remain unavailable for ordinary use, and must not reintroduce deleted data when restored. We instruct relevant processors to delete covered data. Limited payment/tax records, consent evidence, security records or legal holds may remain where necessary and lawful; these exceptions do not justify keeping an entire conversation history without need. Genuinely anonymous aggregate information may be retained. Contact privacy@lightnet.work for retention information about a category or request, including applicable backup expiry.

Ending a Creator's Channel does not transfer your account or private records to that Creator. Your remaining account records follow this Policy. Reusable Creator persona assets follow that person's authorization and the Creator agreement, not an indefinite right to generate new responses in that persona.

8. Requests and choices

Contact privacy@lightnet.work or use available account controls to request access, export, correction, deletion, restriction, objection, withdrawal of consent or other rights provided by applicable law. You can request correction or removal of inaccurate memory information without needing a dedicated editor for every model state. We may verify identity proportionately and protect other people's rights. An export explains relevant personal information; it does not necessarily transfer proprietary model weights or system prompts, but proprietary rights do not extinguish your lawful data-access rights.

We respond within applicable legal deadlines. For requests governed by EU GDPR, normally within one month of receipt; any permitted extension is explained within the initial period. Other applicable deadlines and appeal rights are respected. Verification and any adjustment of deadlines follow applicable law, not an arbitrary restart of the clock. If a request is refused, we explain the legal reason. You may ask us to reconsider at privacy@lightnet.work, exercise any applicable statutory appeal and complain directly to your privacy regulator; contacting us first is not a condition of that right.

Where applicable, you may act through an authorized agent, opt out of sale/sharing or targeted advertising, and exercise rights concerning sensitive information and profiling without unlawful discrimination. We honor legally required preference signals where applicable. Additional processing is not authorized merely because the core service has account-wide memory.

9. Security, age and changes

We use safeguards appropriate to the service and risk to limit unauthorized access, disclosure and loss. No system is completely secure. Report concerns to security@lightnet.work. Lightnet is intended for adults 18 and over. If we learn a minor is using an account, we take steps to disable access and delete unlawfully collected information, subject to necessary lawful exceptions.

We date and version this Policy and give additional notice of material changes. New uses requiring consent are not authorized by silent updates. Contact privacy@lightnet.work for the applicable version, processing details or a complaint.