Privacy Policy

This Privacy Policy (Hereinafter referred to as the “Policy” ) shall come into effect from 20.07.2023 (“Effective Date”) and shall apply to all the Users of the LYKSTAGE PLATFORM.

This LYKSTAGE Platform is in the sole control of LYK Inc,a Delaware corporation, with its registered office at 913 N. Market Street, Suite 300, Wilmington, DE 19801 . (Hereinafter referred to as “Company” which expression shall include its successors and permitted assigns) along with the wholly owned subsidiaries based in any of the jurisdictions.

The Company recognize the importance of protecting the User's personal data. The Company values the User's privacy and appreciate the trust the User holds in the Company and warrants to use the best data security systems available at the Company's disposal

This Privacy Policy is to be read alongside the LYKSTAGE Terms of Service.

By clicking the “I Agree” button or accessing, using or installing the LYKSTAGE Platform in whole or in part, the User expressly agrees to and consents to be bound by all of the Terms of this Privacy Policy. If the User does not agree to the Terms and conditions placed within this Privacy Policy so put forth, they may select the button indicating “I Disagree” and the LYKSTAGE Platform will promptly cancel the terms and block the access to the Services offered in whole.

5.5.3 When any User Redeems rewards and/or avails the benefits of monetization of their content:

1. Bank Account Name
2. Bank Account Number
3. IFSC Code
4. Address of the User
5. City
6. State
7. Pin Code
8. National/State ID
9. Business ID
10. Tax ID
11. Any other Tax information as needed

5.5.4 Information You Provide to Us

1. Account information: when you create a LYKSTAGE account, we collect your name, username, email address, password (stored in hashed form), date of birth (used to verify minimum age), country of residence, and language preference.
2. Profile information: information you add to your profile such as a profile photo, bio, display name, and social media links.
3. Content you create: videos, comments, likes, follows, playlists, and other content and interactions on the Service.
4. Communications: information in messages, support requests, and other communications you send to us or to other users through the Service.
5. Payment information: where applicable, billing details and payment instrument information for premium subscriptions or creator payouts (processed by our payment service providers).
6. Surveys, contests, and promotions: information you provide when you participate in surveys, research, promotions, marketing campaigns, events, or contests.

5.6 Not subject to limitation of the above information, the Platform may ask for other data, for hosting the User’s live ticketed event on the Platform. So as to comply with the procedures and the rules from time to time as per our discretion. Such information is necessary for the Platform to comply with our regulatory obligations in running our service.

5.7 When the User accesses our Services through the application, the Platform will automatically collect the following data:

1. Browser type and version.
2. IP address (used to approximate your location, detect fraudulent traffic, and comply with regional restrictions).
3. Language.
4. Operating system and version.
5. Cookies, id, and location of the User’s device.
6. The state or country from which the User accessed the Platform.
7. The Services the User obtains.
8. Length of time spent on pages/videos.
9. The date and time of the User’s visit.
10. Metadata, logs files, and error logs.
11. Other geographic and demographic information.
12. Other hardware and software information.
13. Which pop-up or push messages the User might have seen and responded to.
14. The User recognizes and understands that their capability of monetization on the Platform is contingent on the jurisdiction based on their geographic location and jurisdiction, with respect to the Platform having provided a facility for registration in said jurisdiction.
15. Device type (desktop, mobile, tablet, smart television, connected device).
16. Screen and viewport dimensions, device orientation.
17. Unique device identifiers, mobile advertising identifiers (such as Apple's IDFA and Google's Advertising ID), and other identifiers we assign to your device or browser.
18. Language and locale settings.
19. Time zone setting.
20. Mobile carrier, network type and signal strength.

5.7.1. Location information

• Approximate location information derived from your IP address, including country, region or state, and city. We use approximate location to comply with regional content licensing, present the Service in your local language, calculate appropriate advertising metrics, detect fraud, and route you to the nearest content delivery server.
• Precise location data from your mobile device, only if you grant the LYKSTAGE mobile application explicit permission to access your device location. We do not require precise location for ad measurement.

5.7.2. Usage information

• Pages and content you view on the Service, including the page URL, page category, content language, and content identifiers.
• How you interact with content (watch time, scroll depth, pause and resume events, replay events, likes, shares, and comments).
• Searches you run on the Service.
• Referral information indicating how you arrived at the Service (such as the URL of the page that linked to us).
• Session identifiers and timestamps.
• Crash logs and diagnostic data.

5.7.3. Advertising measurement information

LYKSTAGE is supported by advertising. We collect information about the advertisements displayed to you and your interactions with those advertisements:

• Impressions: information about each advertisement served to your device, including the campaign identifier, creative identifier, the page on which it was displayed, and the time of display.
• Viewable impressions: we use the IntersectionObserver browser API to record when an advertisement is actually rendered on your screen with at least 50% of its pixels visible for at least 2 continuous seconds. This is the industry-standard viewable impression definition published by the Media Rating Council (MRC).
• Clicks: information about clicks on advertisements, including the time, the click target, and the page context.
• Frequency: how many times a particular advertisement has been shown to your device or account, for frequency-capping and ad-experience purposes.
• Engagement: post-click actions where the advertiser has integrated measurement with us.

5.7.4. Information We Receive From Third Parties

• Advertisers and measurement partners: our advertisers and measurement partners may share information with us about your interactions with their advertisements (including outside the Service), such as cookie identifiers, mobile advertising identifiers, and hashed contact information, which we use to measure ad performance and prevent fraud.
• Authentication providers: if you choose to sign in to the Service using a third-party login provider (such as Google, Apple, or Facebook), we receive information from that provider as authorised by you, including your name, email address, and profile picture.
• Public sources: information from publicly available sources and aggregated industry data.
• Service providers: information from vendors providing hosting, analytics, fraud detection, content delivery, and similar services on our behalf.

5.8 The Platform shall also access the User’s Google Drive which is connected to the Email Address provided by the User in a limited capacity during the process of uploading the Content on the Platform.

5.9 The Platform represents and warrants that the Platform will not be collecting the information or data that is present on the User’s Google Drive beyond the Content that is to be uploaded to the Platform.

6. Marketing Information

6.1 The Platform may use the User’s registered Email Address and/or your Mobile Number for the purposes of updating the Users regarding any event, development, marketing, promotion or any event associated with the subscriptions of the Users (“Marketing Communications”).

6.2 The User can opt out of receiving Marketing Communications from the Platform at any time through the means provided on the Platform itself.

6.3 The Platform under any circumstances shall not provide any Marketing Communications or record any marketing information from accounts of minors or disabled individuals.

7. Cookies

7.1 This Cookies Policy explains how LYK Inc. ("LYKSTAGE", "we") uses cookies and similar technologies on the LYKSTAGE platform (the "Service"). It supplements our Privacy Policy.

7.2 What are cookies?

Cookies are small text files that are placed on your computer or mobile device when you visit a website. They are widely used to make websites work, to make them work more efficiently, and to provide information to the owners of the site. In this Policy, we use the term "cookies" to refer to cookies and similar technologies, including:

1. Web beacons and tracking pixels — small graphic files placed on web pages or in emails to record information about whether you viewed a page or opened an email.
2. Local storage — data stored by your browser or device on your device, in larger quantities than a cookie can hold.
3. Mobile advertising identifiers — identifiers (such as Apple's IDFA and Google's Advertising ID) that your mobile operating system makes available to apps for advertising purposes.
4. Software development kits (SDKs) — pieces of code that we or our partners include in the LYKSTAGE mobile applications.
5. The IntersectionObserver browser API — a browser interface that lets us know when an element (such as an advertisement) is actually visible on your screen.
6. Server logs — records of requests made to our servers.

7.3 Categories of cookies we use

7.3.1 Strictly necessary

• Purpose : Required for the Service to function — authentication, session management, security, fraud prevention. The Service cannot function without these.
• Examples : Login session token, CSRF protection token, load-balancing cookie.
• Duration : Session or up to 30 days.

7.3.2 Functional

• Purpose : Remember your preferences and settings.
• Examples : Language preference, video player quality preference, dark/light mode setting.
• Duration : Up to 12 months.

7.3.3 Performance and analytics

• Purpose : Help us understand how users interact with the Service so we can improve it.
• Examples : Aggregate session analytics, crash and error tracking.
• Duration : Up to 24 months.

7.3.4 Advertising and ad measurement

• Purpose : Measure the performance of advertisements (impressions, viewable impressions, clicks), apply frequency capping, detect ad fraud, and report aggregated metrics to advertisers.
• Examples : Guest user cookieId for ad measurement (lyk_gid), banner tracking cookies (banTrackId), frequency cap cookies, IntersectionObserver state.
• Duration : Up to 13 months.

7.4 First-party and third-party cookies

First-party cookies are set by LYKSTAGE directly. Third-party cookies are set by service providers and partners acting on our behalf, including hosting providers, content delivery networks, analytics providers, fraud-detection providers, and ad measurement partners. A current list of third-party processors is available on request at legal@lykstage.com

7.5 Managing cookies

Most browsers allow you to block or delete cookies through their settings. Blocking strictly necessary cookies will prevent the Service from functioning correctly. Information on managing cookies in popular browsers:

1. Chrome: https://support.google.com/chrome/answer/95647
2. Safari: https://support.apple.com/en-in/guide/safari/welcome/mac
3. Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
4. Edge: https://support.microsoft.com/en-us/microsoft-edge

You can limit mobile ad tracking by adjusting the settings on your mobile device (iOS: Settings > Privacy & Security > Tracking; Android: Settings > Google > Ads). You can also reset your mobile advertising identifier through these settings.

7.6 Global Privacy Control

We honour the Global Privacy Control (GPC) browser signal as an opt-out preference signal under the California Consumer Privacy Act. When we receive a GPC signal from your browser, we treat it as a valid opt-out request for the sharing of personal information for cross-context behavioural advertising for that browser.

8. How Information Provided By The User Is used:

8.1 The Platform uses the information that the Platform collects about the User or that the User provides to the Platform, including any personal information for the purpose of improvising the experience of the Service. Such information is also used to be able to recommend the Content of the User’s choice available on the Platform.

8.2 To provide the User with information, or services that the User request from the Platform. The Information as provided by the User is also used to fulfil the compliances regarding transparency and taxation which are necessary for the Platform to operate legally.

8.3 The Platform may use anonymized and aggregated data, or personal information with the explicit or implied consent of the User, as required by law, for the purposes of training, testing, and enhancing AI models. This may include models used for content moderation, improving recommendations, language processing, detecting violations of terms of use, and increasing overall platform efficiency. Such processing is done under the Platform’s legitimate interests, in accordance with applicable data protection laws.

8.4 The Platform may also use User-generated content and interaction data to develop and refine AI features and machine learning algorithms, ensuring content personalization and safety on the Platform. Any such use of the data is subject to adequate anonymization or pseudonymization, unless the User has expressly consented to the use of identifiable information

8.5 The Platform may, with the User’s explicit consent or where permitted by applicable law, share anonymized or aggregated data with third-party partners, vendors, or service providers for the purpose of developing, training, and improving AI modules. The Platform shall ensure that such third parties are contractually bound to maintain the confidentiality and security of the data and use it solely for the purposes specified by the Platform.

8.6 Provide and operate the Service: authenticating you, delivering content, enabling features, and personalising your experience.

8.7 Improve and develop the Service: understanding how the Service is used, diagnosing technical issues, testing new features, and conducting research.

8.8 Show advertising: selecting which advertisements to show to you, applying frequency caps so you do not see the same advertisement too many times, and showing you advertisements in the appropriate language and format for your device.

8.9 Measure advertising: measuring the performance of advertisements on the Service — including impressions, viewable impressions, clicks, click-through rate, and frequency — and providing aggregated, non-identifying performance reports to the advertisers whose campaigns ran on the Service.

8.10 Detect, prevent and address fraud and abuse: identifying and excluding fraudulent, automated, or non-human traffic from advertising measurement; protecting the Service and our users from abuse, harassment, spam, and security threats.

8.11 Communicate with you: sending you service-related notices, responding to your requests, and (where you have not opted out) sending marketing communications.

8.12 Comply with law: meeting our legal, regulatory, audit, and contractual obligations, and responding to lawful requests from public authorities.

8.13 Enforce our terms: investigating and enforcing our Terms of Service, Community Guidelines, and other policies.

9. AI Model Training

9.1 The LYKSTAGE AI Model is the Artificial Intelligence Model that shall be used for the purposes as follows:

1. Moderation of the Content that is uploaded by the Users to maintain the User safety
2. To allow the faster resolution of User complaints.
3. To understand the algorithmic patterns of the Users to enhance the User experience on LYKSTAGE
4. To allow the LYKSTAGE AI Model to understand the nature of harmful and prohibited content.

9.2 The Platform may also, at the explicit consent of the User, share the Content alongside its associated meta-data, post appropriate annonymization and encryption to third parties for their AI model training and development.

9.3 The Platform states that the LYKSTAGE AI Model, shall by default, not have any access to the Content generated by the User and shall only gain the access, after due consent of the User, only to the Content and the data associated with the Content. The User may provide their consent by going to their Account settings and clicking the checkboxes that state “Allow third-party apps to access my content for AI training”.

9.4 The Platform may, only with the consent of the User, use the Content submitted, uploaded or otherwise made available by the User to the Platform to train, refine and develop the LYKSTAGE AI Model. This shall be done by only accessing the Content and the data associated with the content including but not limited to the title of the content, the type of the content, interaction with the Content and so on.

9.5 The Platform’s training of the LYKSTAGE AI Model shall not provide the Platform with any claim upon the Intellectual Property of the User and the User may withdraw their consent at any point. However, it shall not delete, disregard or erase any of the training with the Content when the User’s consent was in effect or as a result of the User’s Content or data being connected intrinsically to the content and Data of another User who has provided consent.

9.6 The Platform does not use any personal information the User provides at the time of registration for the training of the LYKSTAGE AI Model. The Platform does not use Content generated by verified minors to train the LYKSTAGE AI Model, however this shall not be applicable to the Content that is featuring a minor.

9.7 The Platform ensures to maintain proper data security procedures and compliances in the operation of the LYKSTAGE AI Model.

9.8 The Platform may use the information that is publically available for training the AI Models

9.9 The Platform may also use a third party to operate, maintain, train or develop the LYKSTAGE AI Model.

10. How Information Provided By The User Is Disclosed:

10.1 The Platform may disclose personal information that the Platform collect, or the User provide as described in this Policy not being limited to:

10.1.1 To the subsidiaries and affiliates.we share information among LYK Inc. and its affiliates and related entities, including Manhattan Communications, Manhattan Tech Ventures, and the Social Gear advertising platform, for the purposes described in this Privacy Policy.

10.1.2 To contractors, service providers, processors, and other third parties, such as the payment processing partners. we share information with vendors that provide hosting, content delivery, analytics, fraud detection, ad measurement, payment processing, customer support, and similar services on our behalf. These vendors are contractually required to use information only to perform services for LYKSTAGE.

10.1.3 To third party AI models for development and training of third party AI Models

10.1.4 To abide by contractual obligations with several stakeholders that needs sharing of Personal Information. In such cases, the other Party shall be under a written obligation to safeguard it and use it specifically for the purpose of the contract entered into.

10.1.5 To a buyer or other successor of the Company in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of the Company’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by the Company about the Platform Users is among the assets transferred.

10.1.6 To comply with any court order, law, or legal process, including responding to any government or regulatory request.we may disclose information when required by law, court order, subpoena, or governmental authority; to protect the rights, property, or safety of LYK Inc., our users, or others; to investigate or prevent fraud, abuse, or illegal activity; or to enforce our Terms of Service and other agreements.

10.1.7 In the event an authority empowered by law demands the information of the User, the Company shall only provide them the information that is necessary as the case may be.

10.1.8 To the User themselves if they demand the Company for a copy of the information provided by them to the Company.

10.1.9 Advertisers: we provide advertisers with aggregated, non-identifying performance reports about the advertisements they ran on the Service, including total impressions, viewable impressions, clicks, click-through rate, frequency, and aggregated demographic and geographic breakdowns. Advertisers do not receive your name, email address, or other identifying information through the standard reporting flow.

10.1.10 Business transfers: in the event of a merger, acquisition, financing, reorganisation, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to standard confidentiality protections.

10.1.11 Other users of the Service: your username, profile information, and the content you make public are visible to other users of the Service.

10.2 The Company represents and warrants that all kinds of information shared with the third-parties are anonymized and encrypted to the extent of protecting the vital personal information of the User and such sharing of data with third parties shall only be at the explicit consent of the User.

We do not sell your personal information to third parties for monetary consideration. We may "share" personal information for cross-context behavioural advertising as those terms are defined under the California Consumer Privacy Act. California residents may opt out as described in the California regional supplement at the end of this Policy.

11. Information Security:

11.1 The security of the User’s personal information and all the User’s information as above mentioned is important to the Platform. But by the using the Platform the User acknowledges that no method of transmission over the internet, or method of electronic storage is 100% secure. While the Platform strive to the use commercially acceptable means to protect the User’s information, the Platform cannot guarantee absolute security for the User’s data.

11.2 The User further acknowledge and affirm that the Platform shall, under no circumstances, be responsible in any manner for any unauthorized disclosures of any and all information shared by the User on or via the application and any/all consequences thereof, including without limitation any loss(es) and/or damage(s) suffered to/due to any information shared by the User.

11.3 The Company shall conduct regular Data Protection Impact Assessments to verify and correct any data privacy risks that may arise.

12. Information Retention

12.1 The Platform shall be able to retain the data the Platform collects for different periods of time depending on what it is, how the Platform use it, and how the User configure the User’s settings:

12.1.1 Some kind of data the User can delete whenever the User like, such as the User’s personal info or the content the User uploads. The User can also delete activity information saved in the User’s account, or choose to have it deleted automatically after a set period of time. The Platform may keep this data in the User’s Account until the User remove it or choose to have it removed.

12.1.2 Other data is deleted or anonymized automatically after a set period of time, such as advertising data in server logs.

12.1.3 The Platform retains some data until the User delete the User Account, such as information about how often the User uses the Services.

12.1.4 Certain data the Platform may retain for longer periods of time when necessary for legitimate or legal purposes, such as security, fraud and abuse prevention, or financial record-keeping.

12.1.5 When the User deletes data, the Platform followa deletion process to make sure that the User’s data is safely and completely removed from the Company’s servers or retained only in anonymized form. The Platform tries to ensure that the Services protect information from accidental or malicious Platform deletion. Due to the same, there may be unwanted delays in the overall deletion process.

12.1.6 The Platform shall also retain the User’s Content data and the associated meta-data including the comments, title of the content, likes, dislikes and the general engagement of the Users with the Content which the User has already consented to be used for training and developing the LYKSTAGE AI Model.

12.1.7 Account information: retained for the duration of your account, plus up to [24] months after account deletion for security, audit, and legal compliance purposes.

12.1.8 Raw advertising event data (individual impression and click records): retained for up to [90] days, after which records are deleted or anonymised.

12.1.9 Aggregated advertising data: aggregated, non-identifying advertising performance data may be retained for up to [24] months for advertiser reporting and audit.

12.1.10 Cookies and similar technologies: advertising cookies are retained for up to 13 months from the date they are first placed or last refreshed. Other cookies are retained for the durations described in the Cookies Policy.

12.1.11 Fraud and security logs: retained for up to [12] months.

12.1.12 Content you publish: retained until you delete it, with reasonable backup retention thereafter.

12.1.13 Communications and support records: retained for up to [24] months after the matter is closed.

13. Changes to Policy:

13.1 LYKSTAGE will notify users of material changes to this Privacy Policy via in-app notification and/or email, at least 30 days before such changes take effect.
13.2 The Users shall have the onus of being updated with the changes made in this Policy.
13.3 When we make material changes, we will notify you by email (if you have provided one), through an in-product notice, or by other reasonable means at least [30] days before the changes take effect. The "Effective Date" at the top of this Policy indicates when it was last updated. Your continued use of the Service after the effective date constitutes your acceptance of the updated Policy.

14. Account Deletion

In the event of deletion of the User’s Account, the Company shall not be under an obligation to delete all the related data of the User, the Company may retain certain data as per the nature of necessity. On intimation of the User, the Company will delete all the data provided by the User and collected by the Company.

15. Confidentiality:

The User specifically agrees that the details related to the account shall be disclosed to the associated third-parties. The sensitive information of the User shall not be disclosed to any anonymous third party without the prior approval of the User or for a Service that is requested by the User or for the above-mentioned clauses.

16. Limitation of Liability:

The Platform shall not be liable for any loss(es) in casethe User disclosing the personal information to a third party, The Platform shall not be liable to third parties for the ill-functioning of the Users. The Platform holds no liability in any scenario. The Platform warrants protect the User’s information with commercially acceptable means and thereby the User waive any kind of liability against the Platform.

17. International Data Transfer

LYK Inc. is incorporated in the State of Delaware, United States. Information collected through the Service may be transferred to, stored in, and processed in the United States and in other jurisdictions where LYK Inc., its affiliates, and its service providers operate, including the United Kingdom, India, and the United Arab Emirates. Where information is transferred from the United Kingdom, the European Economic Area, or other jurisdictions that restrict international data transfers, we rely on lawful transfer mechanisms including the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, and adequacy decisions where available. You may request a copy of the safeguards in place for international transfers by contacting legal@lykstage.com

17.1 Information collected by the Platform may be stored and processed in the User’s region, or in any other country where the Platform or its affiliates, subsidiaries, partners, or service providers are located or maintain facilities.
17.2 If the Company transfers any information about the User to any such entities, located outside the territory of the country in which the Company is established or located, such data transfers shall take place according to the Applicable Laws governing such transfers. The Company ensures abidance to the same, however, the Company shall not be held liable for any data leak or for any unwanted effect on the data during such transfers.

18. Contact Information:

To ask questions or comment about this privacy policy and our privacy practices, kindly contact the Grievance Officer.

19. Privacy Complaint

19.1 The User may report any violation of this Privacy Policy by emailing the Platform at: legal@lykapp.com. If a privacy complaint is filed, the Platform may give the other User(who has violated) an opportunity to remove or edit the private information within their videos. The Platform shall notify the User about the potential violation and may give them 48 hours to act on the complaint.

19.2 If that user chooses instead to remove the video, the complaint shall be closed. If the potential privacy violation remains, the Platform shall then review the complaint.

19.3 As the complainant, the User’s privacy is respected in this process. At no point will the User’s identity or contact information be released to the violating User. Our communications with the User about this process shall take place through the email address the User register with on the Platform.

19.4 The Platform do not accept claims made on behalf of third parties except in the following situations:

• 19.4.1 The individual whose privacy is being violated does not have access to a device through which the Platform can be accessed.
• 19.4.2 The claim is being made by the parent or legal guardian of the minor whose privacy has being violated.
• 19.4.3 The claim is being made by a legal representative for the individual or entity whose privacy is being violated.
• 19.4.4 The request is filed by a close family member on behalf of a deceased individual.

19.5 The Platform will not accept privacy complaints filed on behalf of:

• 19.5.1 Other family members (such as husband, wife, cousin, brother, sister).
• 19.5.2 Co-workers or employees (individuals must submit a report themselves).

20. Global Privacy Compliance:

20.1 The Platform obliges to abide by all the applicable data privacy laws of the countries in which the Platform is officially launched.

20.1.1 United States of America(USA):

Any User using the Platform from USA may request for the following:-

1. List of data collected of the User.
2. To delete any data of the User held by the Platform.
3. To update or correct any inaccurate personal data.

The Platform shall have the discretion to accept such requests. The Platform may review the requests in order to determine the authenticity.
The data of the USA based Users may not mandatorily be stored in USA. It shall be stored where the Platform has made a specific provision for the same.

20.1.2 Children’s Online Privacy Protection Act (COPPA)
i. Regardless of theapplicable laws of the location from which content is uploaded, the Platform requiresthe Userto specify whether the content uploaded would be for kids according to the Children’s Online Privacy Protection Act (COPPA) and/or other applicable laws. Failure to set said content appropriately may result in consequences on the Platform or have legal consequences under COPPA and other laws.

ii. The Platform has provided some guidance on what is considered “made for kids” herein below, but by no means can provide any kind of legal advice. If the User is unsure whether the uploaded content meets this standard, they may seek legal counsel.
iii. If the content features actors, characters, activities, games, songs, stories, or other subject matter that reflect an intent to target children, it’s likely made for kids. According to the US FTC’s guidance on COPPA, a video is child directed (which we call “made for kids”) if:

1. Children are the primary audience based on the factors described below.
2. Children are not the primary audience, but the video is still directed to children based on the factors below. (This is known under COPPA as “mixed audience” content, which is a type of child directed content. General audience content is not the same as mixed audience.)

iv. When deciding whether or not your channel or video is made for kids, you should consider various factors, including:

1. Subject matter of the video (e.g. educational content for preschoolers).
2. Whether children are your intended audience (e.g. as indicated in your video metadata) or the actual audience for the video.
3. Whether the video includes child actors or models.
4. Whether the video includes characters, celebrities, or toys that appeal to children, including animated characters or cartoon figures.
5. Whether the language of the video is intended for children to understand.
6. Whether the video includes activities that appeal to children, such as play-acting, simple songs or games, or early education.
7. Whether the video includes songs, stories, or poems for children.
8. Any other information you may have to help determine your video’s audience, like empirical evidence of the video’s audience.
9. Whether the content is advertised to children.

20.1.3 GDPR Policy:
i. The General Data Protection Regulation (GDPR), which is applicable from May 25, 2018, creates consistent data protection rules across Europe. It applies to companies that are based in the EU and global companies that processes personal data about individuals in the EU. This Policy shall always govern the way the Platform handles the User’s data and the Platform shall ensure that this Policy complies with the GDPR.

ii. The GDPR Policy, the User shall be entitled to:

1. Right to be Informed
2. Right of Access
3. Right to Rectification
4. Right to Restrict Processing
5. Right to be forgotten
6. Right to Data Portability
7. Right to Object to Processing
8. Rights in relation to automated decision-making and profiling

20.1.4 CPRA Policy

i. This Privacy Policy is in lines with the provisions of the California Privacy Rights Act (CPRA). The Platform shall continue to ensure that its Policies comply with the following requirements of the CPRA:

1. Identify the categories of personal information collected
2. Explain the purposes of collection
3. Right to Access and delete data and Opt out of processing
4. Provide instructions for submitting requests
5. Describe data retention and security practices

20.1.5 Legal Bases for Processing (UK and EEA Users)

If you are in the United Kingdom or the European Economic Area, we process your personal information on the following legal bases:

1. Performance of a contract: to provide the Service to you under our Terms of Service.
2. Legitimate interests: to operate an advertising-supported video platform, to measure and report on advertising performance, to prevent fraud and abuse, to protect the security of the Service, and to improve and develop the Service. Where we rely on legitimate interests, we balance those interests against your rights and freedoms.
3. Consent: for the use of cookies and similar tracking technologies that are not strictly necessary for the operation of the Service, expressed through your acceptance of our Terms of Service at account creation. You may withdraw consent at any time as described in Section 11.
4. Legal obligation: to comply with applicable law and respond to lawful requests from public authorities.

21. Your Rights and Choices

You have rights regarding the personal information we hold about you. The rights available to you depend on where you live; see the regional supplements at the end of this Policy for jurisdiction-specific details. In general, you may:

• Access the information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your information (subject to legal exceptions).
• Object to or restrict the processing of your information.
• Withdraw your consent, where processing is based on consent.
• Port your information to another service.
• Opt out of marketing communications.
• Lodge a complaint with a data protection authority.

To exercise these rights, contact us at legal@lykstage.com or use the privacy controls in your LYKSTAGE account settings. We will respond within the time period required by applicable law. We may need to verify your identity before processing a request.

22. Regional Supplements

A. United Kingdom and European Economic Area Supplement

This Supplement applies to you if you are located in the United Kingdom or the European Economic Area. It supplements the Privacy Policy.

Your rights under the UK GDPR and EU GDPR

Subject to the conditions and exceptions in applicable law, you have the following rights regarding your personal information:

• Right of access — request a copy of the personal information we hold about you.
• Right to rectification — request that we correct inaccurate or incomplete information.
• Right to erasure — request that we delete your personal information ("right to be forgotten").
• Right to restrict processing — request that we limit how we use your personal information.
• Right to data portability — request a copy of your personal information in a structured, machine-readable format.
• Right to object — object to our processing of your personal information for direct marketing or based on our legitimate interests.
• Right to withdraw consent — where we rely on consent, you may withdraw it at any time.
• Right not to be subject to solely automated decision-making with legal or similarly significant effects.
• Right to lodge a complaint with a supervisory authority — UK users may complain to the Information Commissioner's Office (ico.org.uk). EEA users may complain to the supervisory authority in their country of residence.

To exercise any of these rights, contact us at legal@lykstage.com

B. California Residents Supplement (CCPA / CPRA)

This Supplement applies to you if you are a California resident. It supplements the Privacy Policy.

Categories of personal information collected

In the past 12 months, we have collected the following categories of personal information described in Cal. Civ. Code § 1798.140:

• Identifiers — name, email, account ID, IP address, device identifiers.
• Customer records — billing information for paid subscriptions.
• Commercial information — purchase history, advertising interactions.
• Internet or other electronic network activity — browsing history on the Service, search history, interaction with advertisements.
• Geolocation data — approximate location derived from IP address.
• Inferences drawn from the above to create a profile about your preferences and behaviour on the Service.

Your California rights

• Right to know what personal information we have collected, used, disclosed, and sold or shared about you in the previous 12 months.
• Right to delete personal information we have collected from you.
• Right to correct inaccurate personal information.
• Right to opt out of the sale or sharing of your personal information for cross-context behavioural advertising.
• Right to limit the use and disclosure of sensitive personal information.
• Right to non-discrimination for exercising any of these rights.

To exercise any of these rights, contact us at legal@lykstage.com

C. India Residents Supplement (DPDPA, 2023)

This Supplement applies to you if you are located in India. It supplements the Privacy Policy.

Your rights under the Digital Personal Data Protection Act, 2023

• Right to access information about your personal data being processed by LYKSTAGE.
• Right to correction, completion, updating, and erasure of personal data.
• Right to grievance redressal.
• Right to nominate another individual to exercise your rights in the event of your death or incapacity.
• Right to withdraw consent.

To exercise any of these rights, contact us at legal@lykstage.com

D. United Arab Emirates Residents Supplement (PDPL)

This Supplement applies to you if you are located in the United Arab Emirates. It supplements the Privacy Policy. The Service is processed under Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("UAE PDPL").

Your rights under the UAE PDPL

• Right to information about the processing of your personal data.
• Right of access to your personal data.
• Right to correction and erasure of personal data.
• Right to restrict and object to processing.
• Right to data portability.
• Right to file a complaint with the UAE Data Office.

To exercise any of these rights, contact us at legal@lykstage.com

E. Canada Residents Supplement (PIPEDA / provincial laws)

This Supplement applies to you if you are located in Canada. It supplements the Privacy Policy.

Your rights under PIPEDA and applicable provincial privacy laws

• Right of access to your personal information.
• Right to correct inaccurate or incomplete personal information.
• Right to withdraw consent, subject to legal or contractual restrictions.
• Right to file a complaint with the Office of the Privacy Commissioner of Canada or the relevant provincial privacy commissioner.

To exercise any of these rights, contact us at legal@lykstage.com

23. Grievance Redressal :

23.1 In case of any concerns or complaints regarding the breach of Privacy Policy, the User may reach out to the assigned Grievance Redressal Officer through the following contact details.
Name:Legal Department
Email ID: legal@lykapp.com
Postal Address: 913 N. Market Street, Suite 300, Wilmington, DE 19801

23.2 In case of any disputes between the Company and the User with regards to the Privacy Policy, it will be dealt with in accordance to the dispute resolution procedures laid down in the Terms of Service.