Privacy
Plain-language summary. Last updated November 2026.
If you have an account
- Your name, email address and a hashed (scrypt) copy of your password. We never see or store the password itself.
- Your booking page settings: the name visitors see, your Calendly link, and the priorities you give Lyman.
- Every conversation visitors have on your page, so you can read them.
- A session record for each browser where you're signed in.
Your Calendly link is shown only to people Lyman offers it to. It is never sent to the AI. "Delete account" on your account page permanently deletes your account, your page and all its conversations, immediately.
If you chat on someone's page
Your messages, including any name and email you type, are stored and shown to the page's owner. They're processed by Anthropic's Claude API to write replies and decide whether to offer a time. Before offering one, Lyman may run a few web searches on the name, email domain and claims you share, using Anthropic's web search, to check you are who you say. It sticks to your professional life, and the page owner can see what it found. Anthropic doesn't use API data to train its models. If you're offered a time, your name and email are added to the booking link so Calendly can fill them in.
Waitlist
If you join the waitlist we store only your email address.
Who helps us run Lyman
Vercel (hosting), Neon (database), Anthropic (the AI), Stripe (payments, once billing starts; we never see or store card numbers), Resend (email, if switched on), and Have I Been Pwned (when you pick a password, only the first 5 characters of its SHA-1 hash are sent, to check it hasn't leaked). They process data only to provide those services. We don't sell or share your data, or use it for advertising.
No tracking
We don't use advertising or tracking cookies. We count page visits with Vercel Web Analytics, which doesn't use cookies or identify you. The only cookie we set is the sign-in cookie, and only if you sign in.