Privacy Policy

Lolixco is a public-beta product under the Golixco brand. Accounts are not required. A secure, HttpOnly session cookie keeps your uploads and reports separate from other visitors; it expires after 24 hours. Clearing it removes access to your private analyses.

An opaque analysis reference is kept in tab session storage so you can reconnect after navigation; it does not grant access without your private session cookie. The frontend stores separate file and public-link processing choices in localStorage under lolixco.analysis-privacy.v1. Change them in Analysis privacy. Changes affect future work and cannot undo processing already performed. Videos are not stored in browser storage.

Selecting a file creates a browser preview. Starting analysis sends it directly to private AWS storage. Upload access expires after one hour; report access expires after 24 hours. Derived worker files are removed after processing or cancellation. Expired stored files are swept every 15 minutes, with a one-day S3 lifecycle backup. Scheduled deletion and provider retention are not instantaneous. Export a report before deleting it if you wish to keep it.

Uploading for analysis does not publish your work to discovery. With permission, Google receives a temporary video/audio rendition or a public YouTube URL for AI feedback. Google’s API terms govern processing, retention and potential product-improvement use, which vary by configuration. Lolixco does not promise zero provider retention or no product-improvement use. Read https://ai.google.dev/gemini-api/terms and https://policies.google.com/privacy.

YouTube embeds and thumbnail requests contact Google and may disclose network/browser information or use third-party storage. AWS processes delivery and security metadata. Application operational logs are kept for seven days and exclude media contents, provider credentials and report text.

For privacy questions or deletion assistance contact support@golixco.com. For general enquiries contact hello@golixco.com. These incoming addresses forward to our operator; a custom-address outbound identity is not asserted.