Privacy Notices
Effective Date: June 1, 2023
At Lyric and its affiliates (collectively, “the Company,” “we,” “us,” “our”), privacy matters, and so we have adopted privacy practices to help us manage and protect your personal information in our products, services, and websites. This Privacy Notice (“Privacy Notice”) describes how we collect, use, and disclose personal information through our online properties and mobile applications displaying this notice, including lyric.ai, as well and through certain offline services, as described below (collectively, “Sites and Services”). This Privacy Notice also provides you with information about the rights and choices that you have about your personal information, and how to contact us about our privacy practices.
This Privacy Notice applies only to Company Sites and Services and does not apply to any third- party website, mobile application, product, or service that may link to or are linked from our Sites and Services. In addition, this Privacy Notice does not govern Lyric’s access to, or use or processing of, Protected Health Information (“PHI”) under the Health Insurance Portability and Accountability Act, as amended, and its implementing regulations (“HIPAA”). Lyric’s use of PHI is governed by a service agreement, business associate agreement, and/or other documents with terms and conditions for the use and disclosure of PHI that we have entered with our customers (health plans or their firms) that govern our use of PHI of their members, along with and applicable law, including without limitation HIPAA.
Our Sites and Services may include a supplemental privacy notice detailing specific privacy practices for the Sites and Services. For example, employees and job applicants receive a supplemental privacy notice in the policy guide that applies to their relationship with Company in the context of their employment or job application.
In addition, if you are a California resident, please refer to our Privacy Notice for California residents lyric.ai/other-state-privacy-notice.
In the event there is a difference between this Privacy Notice and a supplemental notice, the supplemental notice will control.
Information We Collect
Lyric collects personal information directly from you, automatically from your devices when you interact directly with our Sites and Services, and from other sources described in the supplemental notices. When you interact directly with our Sites and Services, you may not be required to provide us with certain data requested; however, some data is necessary for the purposes described in this Privacy Notice and if you fail to provide any required data, you may not be able to access our Sites and Services. Where possible, we will allow you to interact with us anonymously or using a pseudonym. However, for many of our functions and activities we usually need your name and contact information.
We collect personal information about you in a variety of ways depending on how you interact with our Sites and Services. This includes information you provide to us when you visit one of our online properties, business contact and other information we obtain when you communicate with us, information provided when you visit our offices or facilities, information you supply when you interact with us on social media, information we collect automatically, and information we may obtain from third parties.
Information You Provide Us
When you use the Sites and Services, we collect information you provide to use. That information may include:
Log-in credentials (such as user ID and password) and security questions and answers;
Your name, email address, contact information, title, and information about the organization with which you are affiliated;
Information you choose to include in messages or responses when interacting with us through our Sites and Services, including through email, online forums, surveys, inquiry forms, our support portal, or messaging services; and
Payment data and associated contact information we or a service provider on our behalf collect in order to complete a transaction.
Information We Collect When You Communicate With Us
When you contact us, we may collect your name and contact information as well as any other information you supply in the body of your message. This includes information supplied to us by employees of our vendors or other business contacts who interact with us online or offline.
Information We Collect When You Visit Our Offices or Facilities
When you visit us in person, we may collect information from you such as your name or other contact details, such as when you sign in at the front desk. We may also collect audiovisual information through any security cameras we deploy to help protect the safety and security or our properties and others.
Professional or Employment-Related Information We Collect
We collect your business contact information when you contact us regarding our Site or Services, or when you interact with us at trade shows. We may also collect your business contact information while providing the Services.
Information We Automatically Collect
When you visit or use our Sites and Services, we may collect information about your online activities to provide you with advertising about products and services tailored to your interests (“interest-based advertising”). Our service provider may place or recognize a unique cookie or other tracking technology on your browser. We use the term “Cookies” to refer to all technologies which store and access information on the device that you use to access the Sites and Services, such as your computer, tablet, or mobile phone. Most web browsers automatically accept Cookies; however, if you prefer, you can typically modify your browser setting to disable or reject Cookies. If you delete your Cookies or if you set your browser to decline Cookies, some features of our Sites and Services may not be available or work as designed. Where required by applicable law, we will rely on your consent prior to processing personal information from your device or computer for the purpose of interest-based advertising. We may automatically collect certain information through Cookies when you access, use, or interact with our Sites and Services, including:
Browser and device data: We collect your device type, operating system and version, IP address, general geographic location as indicated by your IP address, browser type, screen resolution, device manufacturer and model, language, plug-ins, add-ons, and the language of the Site you are visiting.
Usage data: We collect information about the time you spend on our Sites and Services, the content you view or download and features you access, the pages that led or referred you to our Sites and Services, language preferences, how you interact with available content, and entered search terms.
Interactions with ads and newsletters: We collect information about how you interact with our ads and newsletters, including whether you open or click links in any correspondence.
Social media: We collect information that you make available to us on social media platforms (such as by clicking on a social media icon linked from our Sites and Services), including your account ID or username and other information included in your post.
For additional information and a list of the third parties that set cookies on our websites please see our Cookie Notice on our privacy policy page at lyric.ai/cookie-notice
Your browser or device may include Do Not Track (“DNT”) functionality. At this time, Company does not recognize or respond to browser-initiated DNT signals.
Information We Collect from Third Parties
We may obtain information about you from other sources such as data brokers, credit reporting agencies, social networks, and partners with which we offer co-branded services or engage in joint marketing activities. We also may receive information about you from outside suppliers through your online activities on websites and connected devices over time.
How We Use Your Information
We use the information we collect about you for the following purposes:
To provide you with our Sites and Services, including to enter into contracts, process payments, fulfill orders, send service communications and email marketing communications, and conduct general business operations such as accounting, recordkeeping, and audits;
To improve and grow our business, including to understand how our Sites and Services are being used, conduct data analyses of user experiences and behavior, understand our customer base, purchasing trends, and effectiveness of our marketing, and to develop new products and services;
To deliver targeted advertising based on your preferences or interests across services and devices and measure the effectiveness of ads;
To protect the rights, property or safety of Company and our employees and contractors;
To protect and secure our Sites and Services, assets, network, and business operations, and to detect, investigate, and prevent activities that may violate our policies or be fraudulent or illegal;
If we are exploring or go through a business transition or financial transaction, such as a merger, acquisition, divestiture, restructuring, reorganization, dissolution, bankruptcy, securities offering, or sale of all or a portion of our assets, we may use your information in connection with exploring or concluding such transaction; and/or
To comply with applicable laws, regulations, and valid legal processes, such as search warrants, subpoenas, court orders, and law enforcement requests, and to comply with legal requirements regarding the provision of products and services.
Marketing Emails
If you would like to unsubscribe from our marketing communications, you can click the unsubscribe link at the bottom of any email. We will comply with your request as soon as reasonably practicable. Please note that if you opt out of receiving marketing-related emails from Company, we may still send you administrative messages.
How We Disclose Your Information
We may disclose your personal information to the following entities:
Our suppliers: We may disclose your information to suppliers that provide services on our behalf, such as marketing and survey services, payment processing, website and customer experience hosting, data analysis, data storage, auditing and accounting, and security.
Company affiliates: We may disclose your information to our affiliated companies to provide our Services and for internal administrative purposes.
Advertising partners: We may disclose your information to our advertising partners.
Social media platforms: Where you choose to interact with us through social media, your interaction with these programs typically allows the social media company to collect some information about you through cookies they place on your device and other tracking mechanisms. Please visit the social media companies’ respective privacy policies to better understand their data collection practices and controls they make available to you.
Where required or permitted by law or in the context of an audit or other review: We may disclose information to law enforcement agencies, courts, or other government authorities where we believe it is necessary to comply with a legal or regulatory obligation or protect the rights, safety, and property of Company or individuals.
In the context of a change of ownership or corporate organization: We may transfer to another entity or its affiliates or service providers some or all information about you in connection with, or during negotiations of, any merger, acquisition, sale of assets or any line of business, change in ownership control, or financing transaction. We cannot promise that an acquiring party or the merged entity will have the same privacy practices or treat your personal information as described in this Privacy Notice.
Children’s Information
We do not solicit or knowingly collect personal information from children under the age of 16. If we discover that we have inadvertently collected information from anyone younger than the age of 16, we will delete it. We do not sell or share personal information from children pursuant to the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020.
Retaining and Securing Your Personal Information
We retain your personal information for as long as we have a relationship with you, subject to applicable law. When deciding how long to keep your personal information, we consider our legal and regulatory obligations and internal policies. Where we retain personal information, we do so in accordance with any limitation periods and records retention obligations that are imposed by applicable law.
We seek to implement and maintain organizational, technical, and administrative security measures designed to safeguard the personal information we process. Unfortunately, no data transmission or storage system is guaranteed to be secure at all times. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us.
Your Privacy Rights
Your privacy rights will vary depending on where you live. We describe the rights that apply to residents of California.
How to Contact Us
If you have questions, requests, or complaints related to your privacy, please contact compliance-ethics-privacy@lyric.ai. You may also contact us by phone: 610-205-5500 or by mail addressed to:
Lyric
Attn: Privacy Officer 475 Allendale Road
King of Prussia, PA 19406
Changes to this Privacy Notice
This Privacy Notice is subject to change at any time and the “Effective Date” at the top of this page indicates when this Privacy Notice was last revised. It is your obligation to review the Privacy Notice from time to time. By using our Sites and Services, you represent that you read, understand, and accept the terms of this Privacy Notice. Your continued use of our Sites and Services following posting of changes to terms contained in this Privacy Notice will mean you understand and accept those changes. If you do not agree with any of the terms of the Privacy Notice, you must discontinue use of our Sites and Services.
Privacy Notice for California, Connecticut, Colorado, Utah and Virginia
Effective Date: August 24, 2023
If you are a resident of the State of California, Connecticut, Colorado, Utah or Virginia, this Additional US State Privacy Notice may apply to you. This Privacy Notice for California, Connecticut, Colorado, Utah or Virginia residents is intended to describe your rights under the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (CCPA/CPRA), the Connecticut Data Privacy Act (CDPA), the Colorado Privacy Act (CPA), the Utah Consumer Privacy Act (UCPA) and the Virginia Consumer Data Protection Act (VCDPA) and describes our data collection practices. For additional information about the Lyric Privacy Notice see our notice on our privacy policy page at lyric.ai/privacy-notice
Collection of Personal Information
Though your interaction with our Sites and Services, we may collect your personal information, which means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.
Some information the Company processes may be exempt from the CCPA/CPRA, CDPA, CPA, UCPA and VCDPA such as:
Medical information governed by the Confidentiality of Medical Information Act (“CMIA”) and protected health information under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”);
Publicly available information or lawfully obtained, truthful information that is a matter of public concern; and
De-identified or aggregated consumer information.
Certain information we collect may be considered Sensitive Personal Information under the CCPA/CPRA, CDPA, CPA, UCPA and VCDPA. We use such information only for lawful purposes in compliance with applicable privacy laws, such as to perform our Services, to resist malicious, deceptive, fraudulent, or illegal actions, or for equal employment purposes. We do not use such information to infer characteristics about individuals. Where required by law, we will obtain your consent prior to processing such information.
Categories of Personal Information We May Collect
Identifiers, such as:
Real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), including:
Name, signature, mailing address, telephone number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.
Protected classification characteristics under state or federal law:
Other than for employees, job applicants, or as described in a separately provided privacy notice, we do not collect information that would qualify as protected classification characteristics under state or federal law.
Commercial information
When you engage in transactions with us, we create records of transactions. We may use this information to measure the effectiveness of our services and to provide you with targeted information, advertisements, and offers.
Internet or other similar network activity, including:
Browsing history, search history, Internet domain, the domain of your Internet service provider, the date and time that you access the site, the Internet address of the website from which you linked directly to the site, and the pages you visit on our Sites.
Geolocation data:
We may collect geolocation data (e.g., IP address), which is information derived from an electronic device that can reveal the location of that device and the individual using it. Devices that capture geolocation data include mobile phones, laptops, tablets, wearable devices, and vehicle receivers or data recorders, among others.
Audio, electronic, visual, or similar information:
We may collect audiovisual information from on- site security cameras.
Professional or employment-related information
Business contact information, including company name and job title.
Categories of Sources from Which Personal Information is Collected
The categories of sources from which we collect personal information are described more fully under “Information We Collect” and include directly from you via our Sites and Services, from your communications with us, when you visit our offices or facilities, social media, automatically via cookies and similar technologies, and from other third parties as described above.
Business or Commercial Purpose for Collecting and Disclosing Personal Information
We use personal information for the business or commercial purposes disclosed under “How We Use Your Information.” We may disclose personal information to the parties described in the section titled “How We Disclose Your Information.”
Sale and Sharing of Personal Information
We do not currently “sell” or “share” personal information as those terms are defined under the CCPA/CPRA. If we are deemed to “sell” or “share” personal information in the future, such as through the use of cookies or other online technologies, we will update this notice and provide a link permitting users to opt-out of such practices.
CCPA/CPRA, CDPA, CPA, UCPA and VCDPA CONSUMER RIGHTS
California, Connecticut, Colorado, Utah or Virginia residents have certain consumer rights. These rights include:
The right to confirm whether we are processing your personal information, to know about the categories of personal information we collect, and to access the specific pieces of personal information we collect and obtain it in a portable format;
The right to delete personal information;
The right to correct inaccurate personal information that we may maintain about you;
The right to opt-out of the “sale” or “sharing” of personal information, as those terms are defined under the CCPA, as well as certain “targeted advertising” as defined under the CDPA, CPA, UCPA, and VCDPA;
The right to opt-out of certain forms of profiling or automated processing in furtherance of decisions that produce legal or similarly significant effects; and
The right to limit certain uses of sensitive personal information.
These rights are not absolute and subject to certain exceptions. We reserve all of our rights available to us at law in this regard. We will not discriminate against you for exercising any of these rights, for example, by charging a different price or denying goods or services. However, we may charge a different price or rate or provide a different level or quality of goods or services when that difference is reasonably related to the value of the data. In addition, in the event that we decline to take action on a request related to your personal information, you may have the right to appeal that decision by using the contact information below.
In most circumstances, the Company collects, uses, and stores personal information as a service provider on behalf of our own customers. We typically serve our customers in the capacity of a covered entity or business associate pursuant to the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and the privacy, security, and breach notification rules issued pursuant to HIPAA. Under these circumstances, there may be instances in which the Company is not obligated or permitted to fulfill your request and may refer you to your payer, provider, or employer.
How to Exercise Your Consumer Rights
If you wish to exercise any of the abovementioned consumer rights, please email compliance-ethics-privacy@lyric.ai with the phrase “Consumer Rights” in the subject line. You may also call 610-205-5500 or use this Consumer Rights Request Form. We will review your requests and respond accordingly. Additionally, if we retain your personal information only in de-identified form, we will not attempt to re-identify your data in response to a Consumer Rights request.
If you make a request related to personal information about you, you may be required to supply a valid means of identification as a security precaution. If you make a Consumer Rights request through an authorized agent, we will require written proof that the agent is authorized to act on your behalf. We will process your request within the time provided by applicable law.
Other California Privacy Rights - Shine the Light
California Civil Code sections 1798.83-1798.84 provide California residents the right to ask us for a notice describing the categories of personal information we share with third parties or among our affiliated companies for their direct marketing purposes. Upon request, we will identify the categories of information shared and will include a list of the names and addresses of third parties and affiliates with which it has been shared. If you are a California resident and would like a copy of this notice, please submit a written request and allow 30 days for a response.
How to Contact Us
If you have questions, requests, or complaints related to your privacy, please contact compliance-ethics-privacy@lyric.ai. You may also contact us by phone 610-205-5500 or by mail addressed to:
Lyric
Attn: Privacy Officer 475 Allendale Road
King of Prussia, PA 19406
Changes to This Privacy Notice
This Privacy Notice is subject to change at any time and the “Effective Date” at the top of this page indicates when this Privacy Notice was last revised. It is your obligation to review the Privacy Notice from time to time. By using our Sites and Services, you represent that you read, understand, and accept the terms of this Privacy Notice. Your continued use of our Sites and Services following the posting of changes to terms contained in this Privacy Notice will mean you understand and accept those changes. If you do not agree with any of the terms of the Privacy Notice, you must discontinue use of our Sites and Services.