Who we are
Lydira is run by Lydira LLC, a Delaware limited liability company. For a workspace opened in Türkiye, the controller is the Turkish company, Lydira Yazılım ve Bilişim Teknolojileri Limited Şirketi, and its KVKK notice is on the Turkish legal page.
What we collect
Three categories of data, and nothing we don't need to deliver the service:
- Account data: the name, email, and password you give us at sign-up, plus any agency details you enter during onboarding.
- Operational data: everything you put into Lydira to run your agency: customers, trips, communications, commission records. This is your data; we only hold and handle it on your behalf, we don't own it.
- Usage data: logs of what features you use, how often, and which AI calls you make. Anonymised wherever possible and used only to operate + improve the service.
Why we collect it
To deliver Lydira to you. We don't sell your data, we don't share it with ad networks, and we don't use it to train third-party AI models. Full stop.
Where it lives
Your data stays in one region. If we host your account, it lives in the AWS region for the country you sign up from: Istanbul for Türkiye (servers, database, files and backups all stay in Türkiye), Frankfurt for Europe, and North Virginia for the US. If you run Lydira on your own servers, your data lives wherever you host it. The outside companies that help us deliver the service are listed at /legal/subprocessors.
AI + your data
When you use an AI feature that drafts, reads or summarises something, the prompt is sent to OpenAI, our AI provider. Before it leaves, direct identifiers we can detect (email addresses, phone numbers, IBANs, card numbers, national ID numbers) are replaced with placeholders and put back when the answer returns. OpenAI's own data-handling terms apply; we publish a direct link on the sub-processor page.
Semantic search is different: the model behind "find me a similar trip" runs on our own servers, so that text is never sent to a third party at all.
You control all of it from Settings → AI: switch AI off for the whole account or feature by feature, block a whole class of data (personal, financial, operator-only), require EU-only providers, and set a lawful basis per customer. Choose "no processing" for someone and no AI call is ever made about them. Every call that does happen is recorded with its feature, its subject and that basis.
Analytics and cookies on lydira.com
The public marketing site usesGoogle Analyticsto see which pages are read, where visitors come from and how many click through to sign up. It sets the _ga and _ga_*cookies (kept up to two years) and sends Google your browser, device, approximate location derived from your IP address, and the pages you open.
In the EU, the UK, Türkiye and everywhere else outside the US, nothing is loaded and no cookie is set until you choose Acceptin the cookie banner. In the US analytics runs by default andOpt out turns it off. Change your mind at any time fromCookie settings in the footer; withdrawing stops the measurement and deletes the cookies. Your choice is remembered in your browser's local storage, not in a cookie.
Separately, Cloudflare Web Analytics counts every visit to lydira.com, whatever you choose in the banner: the page, the referring site, the country and the browser and device type. It sets no cookie, stores nothing in your browser and does not identify or follow you across visits, so it runs without asking. Cloudflare already delivers the site.
The app itself (app.lydira.com) has no analytics tracker at all, and neither tool ever sees the data in your Lydira account.
Your rights
Whatever the applicable law (GDPR, UK GDPR, KVKK, CCPA, PDPL), you can:
- Access your data (Settings → Data & Privacy → Export)
- Correct it (you're already editing it; that's the whole product)
- Delete it (Settings → Data & Privacy → Delete account)
- Port it (export your data in standard, machine-readable formats: JSON or CSV, plus a downloadable archive of your files)
- Object or restrict processing (email privacy@lydira.com)
Contact
Send questions, complaints or requests to privacy@lydira.com. We aim to respond within 72 hours on business days, and answer a data-subject request within 30 days at the latest. If we can't resolve your concern you have the right to lodge a complaint with your local Supervisory Authority.
Changes
Material changes are announced ≥ 30 days ahead via in-app banner + email to the Account Owner. Minor clarifications are noted at the top of this page.