Privacy Policy

Effective date: June 24, 2026 · Last updated: June 24, 2026

This Privacy Policy explains how Nebula Innovations LLC, a Delaware limited liability company with its principal office in Las Vegas, Nevada ("Lisa," "we," "us," or "our"), collects, uses, discloses, and protects information when you visit lisa.my, create an account, or use the Lisa AI personal-assistant service (the "Service"). Lisa is an AI assistant that receives calls and text messages on your behalf and places outbound calls to perform tasks you request, such as gathering information, scheduling appointments, and making reservations.

1. Information we collect

We collect the following categories of information:

a. Information you provide

• Account & onboarding details — your name, email address, phone number, the greeting you want Lisa to use, and the tasks you want Lisa to handle.
• Task content — the instructions, contacts, preferences, and details you give Lisa so she can act for you (for example, who to call, what to ask, or what to book).
• Communications — messages you send us, support requests, and feedback.

b. Information generated through the Service

• Call and message records — metadata and content of calls and texts that Lisa handles on your behalf, including caller/recipient phone numbers, timestamps, transcripts, summaries, and outcomes (for example, a confirmed reservation).
• Calendar & scheduling data — appointment times and details when you ask Lisa to manage scheduling.

c. Information collected automatically

• Device & usage data — IP address, browser type, pages viewed, referring URLs, and interactions with lisa.my, collected via cookies and similar technologies (see Section 5).

2. How we use information

We use information to:

• Provide, operate, and personalize the Service — including answering your calls and texts and placing outbound calls to complete the tasks you request;
• Set up and manage your account and your dedicated assistant line;
• Send you service and account communications, including SMS you have consented to receive (see our Messaging & SMS Policy);
• Improve, secure, and troubleshoot the Service, and develop new features;
• Detect, prevent, and address fraud, abuse, and security incidents; and
• Comply with legal obligations and enforce our Terms of Service.

We process this information on the legal bases of performing our contract with you, your consent (which you may withdraw), our legitimate interests in operating and improving the Service, and compliance with law.

3. Calls, recordings & voice data

When Lisa places or receives a call for you, she identifies herself as an AI assistant acting on your behalf. To deliver and improve the Service, calls may be processed, transcribed, and summarized, and may be recorded where you have enabled recording. You are responsible for ensuring that any recording or task you ask Lisa to perform complies with applicable laws in your and the other party’s jurisdiction, including call-recording consent ("one-party" or "all-party" consent) laws. We process voice and transcript data only to operate the Service and do not sell it.

4. SMS & messaging data

If you consent to receive SMS, we collect your mobile number and records of the messages exchanged. Your consent and mobile number are used solely to deliver the messaging program you opted into. You can opt out at any time by replying STOP, or get help by replying HELP. Full details are in our Messaging & SMS Policy.

Mobile information is not shared with third parties or affiliates for their own marketing or promotional purposes, and we do not sell mobile information. No mobile opt-in data is shared with any third party, and consent obtained for SMS is never transferred or sold.

5. Cookies, analytics & advertising

We use cookies and similar technologies to run the site, remember your preferences, measure performance, and understand how visitors use lisa.my. We may use privacy-respecting analytics and advertising partners (such as Google) to measure the effectiveness of our marketing and to show ads for Lisa on other sites.

• Essential cookies — required for the site and sign-in to work.
• Analytics cookies — help us understand usage so we can improve.
• Advertising cookies — measure ad campaigns and may support interest-based ads.

Where required, we display the data collected for advertising only with your consent, and we honor recognized opt-out signals such as Global Privacy Control (GPC). You can control cookies through your browser settings and opt out of interest-based advertising via tools like the DAA and Google Ads Settings. Phone numbers and SMS consent are never used for third-party or cross-context behavioral advertising.

6. How we share information

We share information only as needed to run the Service, and never sell your personal information. Specifically:

• Service providers — vetted vendors who process data on our behalf under confidentiality obligations, such as cloud hosting, telephony/SMS carriers (for example, our communications provider), and AI processing used to power Lisa. These providers may only use the data to provide services to us.
• To complete your tasks — when you ask Lisa to contact someone (for example, a restaurant or supplier), Lisa shares the minimum information needed to perform that task, such as your name and the booking details you provided.
• Legal & safety — when required by law, legal process, or to protect the rights, property, or safety of users, the public, or Nebula Innovations LLC.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

7. Data retention

We keep information for as long as your account is active or as needed to provide the Service, then retain and use it only as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion as described below; we will delete or de-identify data when it is no longer required.

8. Your privacy rights

Depending on where you live (including under the GDPR and the California Consumer Privacy Act as amended by the CPRA), you may have the right to:

• Access, correct, or delete the personal information we hold about you;
• Port your data to another service;
• Opt out of "sales" or "sharing" of personal information for cross-context behavioral advertising (note: we do not sell personal information and never sell or share SMS data);
• Withdraw consent at any time, including by replying STOP to texts; and
• Lodge a complaint with your local data-protection authority.

To exercise any right, email privacy@lisa.my. We will not discriminate against you for exercising your rights, and we will verify requests before acting on them.

9. Security

We use administrative, technical, and physical safeguards — including encryption in transit, access controls, and the principle of least privilege — to protect your information. No method of transmission or storage is perfectly secure, but we work continuously to protect your data and will notify you and regulators of incidents as required by law.

10. International transfers

We are based in the United States and may process information in the United States and other countries. Where we transfer personal data internationally, we use appropriate safeguards such as Standard Contractual Clauses.

11. Children’s privacy

The Service is intended for adults and is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

12. Changes to this policy

We may update this Policy from time to time. We will post the updated version here with a new effective date and, where appropriate, notify you. Your continued use of the Service after changes take effect constitutes acceptance.

13. Contact us

For privacy questions or to exercise your rights, contact our privacy team:

Nebula Innovations LLC
6000 S Eastern Ave, Suite 8B
Las Vegas, NV 89119, USA
Privacy: privacy@lisa.my
Support: support@lisa.my
Lisa’s line: +1 (858) 295-7463