Effective date: June 24, 2026 · Last updated: June 24, 2026
This Privacy Policy explains how Lisa, the operator of this service ("Lisa," "we," "us," or "our"), collects, uses, discloses, and protects information when you visit lisa.my, create an account, or use the Lisa AI personal-assistant service (the "Service"). Lisa is an AI assistant that receives calls and text messages on your behalf and places outbound calls to perform tasks you request, such as gathering information, scheduling appointments, and making reservations.
We collect the following categories of information:
Connecting a Google account is optional, and Lisa asks for it only so she can do the work you have asked her to do. Google shows you exactly what you are granting before you agree, and you can withdraw it at any time. This is what each permission is for, and it is the only thing we use it for:
Machine learning. We do not use Google user data to develop, improve, or train generalized artificial-intelligence or machine-learning models. Data from your Google account reaches our AI processors only to carry out the specific task you asked Lisa to do, under contracts that forbid those providers from training their models on it.
Storage, retention and revoking access. Your Google authorization is encrypted at rest and used only by your own assistant. Message, calendar, contact and file data is kept only for as long as the task that needed it, plus the record of what Lisa did on your behalf. Disconnecting Google in your Lisa settings revokes our access and deletes the stored authorization; you can also revoke it from your Google Account permissions page. To have the Google-derived data itself deleted, email privacy@lisa.my.
We use information to:
We process this information on the legal bases of performing our contract with you, your consent (which you may withdraw), our legitimate interests in operating and improving the Service, and compliance with law.
When Lisa places or receives a call for you, she identifies herself as an AI assistant acting on your behalf. To deliver and improve the Service, calls may be processed, transcribed, and summarized, and may be recorded where you have enabled recording. You are responsible for ensuring that any recording or task you ask Lisa to perform complies with applicable laws in your and the other party’s jurisdiction, including call-recording consent ("one-party" or "all-party" consent) laws. We process voice and transcript data only to operate the Service and do not sell it.
If you expressly agree during signup, Lisa may place one automated welcome call to your verified mobile number if you do not message Lisa first. The call may be followed by a welcome text. The call comes from your dedicated Lisa number and is used only to help you begin using the Service.
If you consent to receive SMS, we collect your mobile number and records of the messages exchanged. Your consent and mobile number are used solely to deliver the messaging program you opted into. You can opt out at any time by replying STOP, or get help by replying HELP. Full details are in our Messaging & SMS Policy.
Mobile information is not shared with third parties or affiliates for their own marketing or promotional purposes, and we do not sell mobile information. No mobile opt-in data is shared with any third party, and consent obtained for SMS is never transferred or sold.
We use cookies and similar technologies to run the site, remember your preferences, measure performance, and understand how visitors use lisa.my. We may use privacy-respecting analytics and advertising partners (such as Google and Meta) to measure the effectiveness of our marketing and to show ads for Lisa on other sites.
Where we advertise on Meta (Facebook and Instagram), we use the Meta pixel together with Meta’s Conversions API. This tells Meta which of its ads led to a visit, a sign-up, or a customer, so we can measure what our advertising achieves and reach people like our existing users. Two things about it are worth stating plainly. First, we send your email address and name only as an irreversible cryptographic hash, never in readable form, alongside the advertising identifiers stored in your browser. Second, we never send your phone number to Meta or to any other advertising platform, in any form, hashed or otherwise. You can control this with your cookie and browser settings and through Meta’s ad preferences.
Where required, we display the data collected for advertising only with your consent, and we honor recognized opt-out signals such as Global Privacy Control (GPC). You can control cookies through your browser settings and opt out of interest-based advertising via tools like the DAA and Google Ads Settings. Phone numbers and SMS consent are never used for third-party or cross-context behavioral advertising.
We share information only as needed to run the Service, and never sell your personal information. Specifically:
We keep information for as long as your account is active or as needed to provide the Service, then retain and use it only as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion as described below; we will delete or de-identify data when it is no longer required.
Depending on where you live (including under the GDPR and the California Consumer Privacy Act as amended by the CPRA), you may have the right to:
To exercise any right, email privacy@lisa.my. We will not discriminate against you for exercising your rights, and we will verify requests before acting on them.
We use administrative, technical, and physical safeguards — including encryption in transit, access controls, and the principle of least privilege — to protect your information. No method of transmission or storage is perfectly secure, but we work continuously to protect your data and will notify you and regulators of incidents as required by law.
We are based in the United States and may process information in the United States and other countries. Where we transfer personal data internationally, we use appropriate safeguards such as Standard Contractual Clauses.
The Service is intended for adults and is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
We may update this Policy from time to time. We will post the updated version here with a new effective date and, where appropriate, notify you. Your continued use of the Service after changes take effect constitutes acceptance.
For privacy questions or to exercise your rights, contact our privacy team:
Lisa
Privacy: privacy@lisa.my
Support: support@lisa.my
Lisa’s line: +1 (618) 778-3228