Privacy Policy

Privacy Policy

Lay Your Layer Privacy Policy

Last updated: Monday 29 June 2026
Website: www.layyourlayer.com
operator name: Storm Devoy-Read
Contact email: help@layyourlayer.com

1. What this Privacy Policy is

This Privacy Policy explains how Lay Your Layer collects, uses, stores, protects, shares, deletes, and manages personal information when someone uses Lay Your Layer, including the website, AI chat, Coding Layer, AI Core, Voice system, Store, personalisation layers, creator tools, customer-retention options, account features, support, marketing, sandbox/testing areas, and any future connected Lay Your Layer services.

Lay Your Layer is designed as a personal AI layer above AI systems. The service may use different backend AI systems, website tools, hosting tools, payment tools, storage tools, email/text/call systems, and security tools. This policy explains how personal data may move through those parts.

This policy should be read with the Terms of Service, Acceptable Use Policy, AI Safety Notice, Cookie Policy, Payment Terms, Store Terms, Voice Terms, Marketing Consent Policy, and any other legal pages shown on Lay Your Layer.

This policy is not a contract for professional advice. It is a privacy notice explaining data use.

2. Who controls your data

For most use of Lay Your Layer, the data controller is:

Lay Your Layer / Storm Devoy-Read
Email: help@layyourlayer.com
Address: 51 Ruddlesway Windsor SL4 5SG

A “data controller” means the person or business deciding why and how personal information is used.

Some third-party services may act as their own controller for parts of their service, such as payment providers, website platforms, cloud providers, analytics providers, app stores, email/SMS providers, or AI providers. Where that happens, their own privacy policy may also apply.

3. Important plain-English summary

Lay Your Layer may collect information you give directly, information created when you use the service, payment/account information, store/creator information, uploaded content, voice recordings if you use voice tools, chat prompts and AI replies if storage is enabled or needed, consent records, safety logs, and technical/security logs.

Lay Your Layer should not ask you to enter passwords, private keys, seed phrases, payment card numbers, recovery phrases, or secrets into the public AI chat.

Some parts of Lay Your Layer may use AI systems. AI replies can be wrong, incomplete, outdated, or unsuitable. Do not enter sensitive personal information unless it is necessary and you understand how it will be used.

If you are in immediate danger, at risk of hurting yourself, or at risk of hurting someone else, contact emergency services where you are. The AI chat may show crisis-support information, but it is not an emergency service.

4. Information we may collect

Lay Your Layer may collect the following types of information.

4.1 Account information

This may include:

Name
Username
Email address
Phone number
Country or region
Account login details
Account status
Subscription status
Consent status
Age confirmation or age gate status
Guardian/parent details where required
Support contact details

4.2 Payment and subscription information

This may include:

Plan selected
Payment status
Subscription start date
Subscription changes
Cancellation request
Account freeze request
Customer-retention status
Store access status
Refund records
Invoice or receipt details
Payment provider customer ID
Chargeback or dispute records

Lay Your Layer should not store full card numbers or card security codes. Payments should be handled by a payment provider where possible.

4.3 AI chat information

Depending on the feature, settings, consent, and safety needs, this may include:

Prompts typed by the user
AI replies
Session ID
Chat summaries
Saved preferences
Chosen AI name or layer name
Style preferences
Correction notes
Feedback
Safety flags
Blocked request records
Short audit records
Consent records linked to chat storage

The public AI section should avoid storing full prompts and replies unless consent is clear or another lawful reason applies. Some safety/security audit logs may store short snippets to protect users and the service.

4.4 Personalisation layer information

This may include:

Layer name
Preferences
Instructions
Chosen tone/style
Memory settings
Training preferences
Approved saved facts
User corrections
Export status
Paid-in-full status
Store publishing status
Layer history
Connected layer relationships
Creator profile information

4.5 Voice system information

If you use voice tools, Lay Your Layer may collect:

Voice recordings
Audio uploads
Voice actor profile details
Voice name/stage name
Recording consent
Age/guardian confirmation
Quality-check records
Usage rights selected
Voice pack metadata
Voice code/export metadata
Payment/payout details for creators
Testing and moderation records

Voice data can be sensitive. Voice uploads should only be submitted where the person has the right to submit them and has given proper consent.

4.6 Uploaded content

This may include:

Images
Audio
Video
Documents
Text files
Design files
Project files
Prompts
Generated outputs
Store listing assets
Creator content
Metadata connected to uploads

Users must not upload content they do not have the right to use, private information about others without permission, illegal material, or unsafe material.

4.7 Store and creator information

This may include:

Creator profile
Store listings
Product descriptions
Prices
Sales history
Payout details
Refund/dispute history
Buyer account details
Creator/buyer messages
Ratings/reviews
Licensing choices
Export/download records
Moderation decisions

4.8 Marketing information

This may include:

Marketing consent status
Email consent
Text/SMS consent
Call consent
Consent timestamp
Consent wording version
Withdrawal timestamp
Marketing preferences
Records of messages sent
Do-not-contact status

Marketing consent must be clear and recorded. If consent is withdrawn, Lay Your Layer should stop the optional marketing covered by that consent.

4.9 Technical and security information

This may include:

IP address
Browser type
Device type
Operating system
Approximate region
Referrer page
Session ID
Error logs
Abuse logs
Rate-limit logs
Security event logs
Blocked origin logs
Cloudflare/Wix/server logs
Public safety audit logs
Timestamps
System version information

4.10 Crisis and safety information

If a user says something suggesting self-harm, suicide risk, harm to others, panic, emotional distress, abuse, exploitation, child-safety risk, or another serious safety issue, Lay Your Layer may create a limited safety audit record.

This may include:

Session ID
Time
Safety category
Short prompt preview
Origin/source page
Action taken
Whether crisis-support text was shown

Lay Your Layer should avoid storing unnecessary full details in crisis logs unless required for safety, legal, or abuse-prevention reasons.

4.11 Children and age-gated information

Lay Your Layer may collect age confirmation or guardian consent information where needed.

Some services may be adult-only, creator-only, or guardian-approved only. If Lay Your Layer is likely to be accessed by children, child privacy protections need to be built into the service. The ICO Children’s Code is a set of standards for online services likely to be accessed by children, including apps, games, connected devices, and online services.  

5. Information we do not want users to enter

Users should not enter the following into public chat:

Passwords
Private keys
Seed phrases
Recovery phrases
Bank card numbers
CVV/security codes
Full bank details
Private legal documents unless needed and clearly understood
Medical records unless needed and clearly understood
Another person’s private information without permission
Illegal content
Sexual content involving children
Hacking instructions
Fraud instructions
Weapon instructions
Emergency-only information where emergency services are needed

If such data is entered, Lay Your Layer may block it, delete it, or create a limited safety/security record.

6. How we collect information

We may collect information when:

You visit the website
You create an account
You use the AI chat
You use voice tools
You upload content
You buy a subscription
You use store access
You create or sell a layer
You contact support
You give or withdraw consent
You click buttons or use settings
You receive marketing messages
You trigger safety or abuse systems
You use beta, sandbox, admin, test, or live areas

We may also receive information from service providers, such as payment providers, website platforms, cloud/security tools, email/SMS tools, analytics tools, AI providers, support tools, and app/platform providers.

7. Why we use information

Lay Your Layer may use personal information for these purposes:

To provide the website
To provide AI replies
To provide account access
To run subscriptions
To process payments
To manage customer-retention plans
To freeze or restart accounts
To provide store access
To provide creator tools
To provide buyer tools
To save user preferences where allowed
To build and maintain personalisation layers
To provide voice recording/upload/export features
To process store listings and sales
To provide support
To send service messages
To send marketing where consent allows
To improve safety
To prevent abuse
To block hacking, fraud, exploitation, or unsafe use
To protect children and vulnerable users
To detect crisis/self-harm/harm-to-others wording
To create limited safety logs
To comply with legal obligations
To defend legal claims
To test and improve the service
To keep records of consent and withdrawal
To manage complaints, refunds, disputes, and takedowns

8. Lawful bases we may rely on

Depending on the situation, Lay Your Layer may rely on one or more lawful bases.

8.1 Contract

We may use data to provide the service you requested, such as account access, AI tools, subscriptions, store access, creator tools, downloads, exports, support, and payments.

8.2 Consent

We may rely on consent for optional marketing, optional memory storage, optional voice recordings, optional uploads, optional training use, cookies where required, and other optional features.

Consent should be specific, informed, freely given, and capable of being withdrawn. The ICO says consent needs to be managed and recorded, and people should be told about the right to withdraw it.  

8.3 Legitimate interests

We may use data where needed for legitimate business interests, such as security, fraud prevention, abuse prevention, service improvement, customer support, basic analytics, safety logging, and protecting the service.

Where legitimate interests are used, Lay Your Layer should balance its interests against user rights and freedoms.

8.4 Legal obligation

We may use or keep data where required by law, tax rules, accounting rules, consumer protection rules, court orders, regulatory duties, or lawful requests.

8.5 Vital interests

In rare cases, we may use information to protect someone’s life or safety, such as serious self-harm risk, suicide risk, emergency risk, or risk of harm to others.

8.6 Special category data

Some information may be more sensitive, such as health information, voice data, biometric-like data, information about children, emotional distress, or crisis information. Where this applies, Lay Your Layer should use stronger protection and only process it where a lawful basis and special condition apply.

9. AI and automated processing

Lay Your Layer uses AI-assisted systems. This may include public chat, private user layers, coding support areas, voice systems, store tools, moderation systems, safety classifiers, and routing tools.

AI systems may process prompts, replies, preferences, files, voice recordings, and safety signals.

Lay Your Layer should not make legal, medical, financial, immigration, emergency, or similarly significant decisions about users solely by automated processing unless that is lawful, explained, and appropriate. UK data protection rights include rights related to automated decision-making and profiling.  

AI replies may be generated by different backend systems. The backend AI may change over time. Users should check important information before relying on it.

10. AI memory and personalisation

Lay Your Layer may allow users to create personal layers that remember preferences and instructions.

Memory may include:

Preferred name
Preferred tone
Preferred explanation style
Project preferences
Creative preferences
Saved facts
User corrections
Training preferences
Layer instructions

Memory should be optional where possible. Users should be able to request deletion or correction of saved memory.

Public chat should not automatically store full prompts and replies unless consent or another lawful reason applies. If consented memory is used, Lay Your Layer should explain what is saved, why it is saved, how long it is kept, and how to remove it.

11. Training use

Lay Your Layer may use user content to improve or train personal layers only where allowed by the user’s settings, consent, contract terms, or another lawful basis.

Unless clearly stated and agreed:

Public chat prompts should not be used to train a general model.
Private uploads should not be used to train shared systems.
Voice recordings should not be used to create or train a voice unless the required consent and rights are in place.
Creator store content should only be used according to creator/store terms.

A separate AI Training Consent page should explain exactly what can be used for training, whether it is used only for the user’s own layer or wider systems, and how to opt out.

12. Voice privacy

Voice recordings can reveal identity, accent, age range, emotion, health, background noise, and other personal information.

For voice tools, Lay Your Layer should explain:

What is recorded
Why it is recorded
Whether it is stored
Whether it is used to make a voice clone or voice layer
Who can access it
Whether it can be sold or exported
How consent is proven
How a person can delete it
How guardian consent works for under-18 users
How misuse is reported

Users must not upload another person’s voice unless they have permission and rights to do so.

13. Store privacy

If users buy, sell, upload, export, or publish through the Lay Your Layer Store, Lay Your Layer may process store-related information.

This may include:

Creator profile
Buyer profile
Listings
Sales
Payout details
Download records
Licence status
Disputes
Reports
Takedown requests
Reviews
Moderation decisions

Public listings may display public creator information chosen by the creator. Private payment details should not be shown publicly.

14. Payment privacy

Payments may be handled by third-party payment providers such as PayPal, Stripe, Wix Payments, app stores, or another provider chosen by Lay Your Layer.

Lay Your Layer may receive payment status, subscription status, customer ID, transaction ID, amount, plan, date, and dispute information.

Payment providers may process payment information under their own privacy policies.

Lay Your Layer should not ask users to enter full card details into AI chat.

15. Marketing privacy

Lay Your Layer may send marketing emails, texts, calls, or other messages only where allowed.

Marketing records may include:

Consent type
Consent wording
Consent timestamp
Contact method
Withdrawal timestamp
Message history
Suppression/do-not-contact status

Users can withdraw marketing consent. Withdrawal should stop future optional marketing covered by that consent, though service messages may still be sent where necessary.

Lawyer-review warning: If free access is conditional on marketing consent, this must be checked carefully by a lawyer because consent rules require clear, freely given consent and easy withdrawal.

16. Cookies and similar technologies

Lay Your Layer may use cookies, local storage, pixels, analytics tags, Wix tools, Cloudflare tools, or similar technologies.

These may be used for:

Website function
Security
Session management
Remembering preferences
Analytics
Marketing
Fraud prevention
Performance monitoring
Store operation

A separate Cookie Policy should explain what cookies are used, why, whether they are essential or optional, and how users can manage them.

17. Security and abuse protection

Lay Your Layer may process technical and security data to:

Protect the website
Block unsafe requests
Prevent fraud
Prevent hacking
Protect accounts
Protect children
Protect creators and buyers
Apply rate limits
Detect abuse
Investigate complaints
Defend legal claims
Maintain logs

Security logs may include IP address, origin, device/browser details, session ID, timestamps, blocked request category, and short prompt snippets.

Lay Your Layer should minimise security logging where possible while keeping enough information to protect the service.

18. Crisis and emergency safety

The AI chat may detect words suggesting emotional distress, self-harm, suicide risk, or risk of harm to others.

If that happens, Lay Your Layer may:

Show calming support
Show emergency or helpline information
Avoid sending the prompt through normal AI flow first
Create a limited safety audit
Avoid storing full prompt and reply where possible
Suggest contacting emergency services, crisis lines, or trusted real people

Lay Your Layer is not an emergency service. Users in immediate danger should contact emergency services where they are.

19. Children’s privacy

Some Lay Your Layer features may be restricted by age. Some features may require guardian consent.

Children should not use adult-only tools, paid creator tools, voice-selling tools, or store-selling tools unless allowed by the relevant terms and law.

Where Lay Your Layer is likely to be accessed by children, it should apply child-friendly privacy protections, high privacy defaults, clear explanations, and reduced data collection. The ICO Children’s Code applies to a wide range of online services likely to be accessed by children.  

If Lay Your Layer discovers that a child has provided data without required permission, it may restrict the account, delete data, request guardian confirmation, or take other protective steps.

20. Sharing information

Lay Your Layer may share information with:

Website platform providers
Hosting providers
Cloud/security providers
AI providers
Payment providers
Email/SMS/call providers
Analytics providers
Customer support providers
Storage providers
Store/payout providers
Legal advisers
Accountants
Insurance providers
Law enforcement or regulators where required
Emergency or safeguarding bodies where necessary
Business transfer parties if the business is sold or reorganised

Lay Your Layer should share only what is necessary for the purpose.

21. Third-party services

Lay Your Layer may use services such as website builders, cloud tunnels, hosting, payment processors, AI systems, analytics, email tools, SMS tools, support tools, app stores, and storage tools.

Third-party providers may process data under their own privacy terms.

Lay Your Layer should keep a current list of main processors and providers, including what data each receives and why.

22. International transfers

Some service providers may process data outside the UK.

Where personal information is transferred internationally, Lay Your Layer should use appropriate safeguards where required, such as adequacy decisions, standard contractual clauses, international data transfer agreements, transfer risk assessments, or other lawful mechanisms.

23. How long we keep information

Lay Your Layer should not keep personal information longer than needed.

Indicative retention periods:

Account data: while the account is active, then for a reasonable legal/accounting period
Payment records: as required for accounting, tax, dispute, and legal purposes
Support records: for as long as needed to handle support and disputes
Marketing consent records: while marketing is active and then as needed to prove consent/withdrawal
AI chat full prompts/replies: not stored by default in public chat unless consent or another lawful reason applies
Consented memory: until deleted, withdrawn, account closed, or retention period expires
Voice recordings: until deleted, withdrawn, licence ends, or retention period expires
Store listings: while active and then archived as needed for disputes/legal records
Crisis/safety audits: kept only as long as needed for safety, abuse prevention, and legal protection
Security logs: kept for a limited security period unless needed for investigation
Deleted account records: some records may be retained where needed for legal, accounting, fraud prevention, safety, or dispute reasons

If exact retention periods are not known, Lay Your Layer should explain the criteria used to decide retention. The ICO says privacy information should include retention periods or the criteria used to decide them.  

24. Your rights

Depending on the situation, users may have rights to:

Be informed about data use
Access their personal data
Correct inaccurate data
Request deletion
Restrict processing
Object to processing
Data portability
Withdraw consent where consent is used
Challenge certain automated decisions
Complain to the ICO

These rights are subject to legal limits and may not apply in every situation. The ICO lists individual rights under UK GDPR, including access, rectification, erasure, restriction, portability, objection, and rights related to automated decision-making.  

25. How to make a rights request

To make a privacy request, contact:

Email: [insert privacy email]
Subject: Privacy Request

Please include:

Your name
Your account email
What right you want to use
Enough information to identify your account
Any specific data or feature involved

Lay Your Layer may need to verify identity before acting on a request.

26. Deleting account data

Users may request deletion of account data.

Some data may be deleted quickly. Some data may need to be kept for legal, accounting, safety, fraud-prevention, dispute, or security reasons.

Deleting an account may affect access to:

AI Core
Coding Layer
Voice system
Store access
Created layers
Export rights
Purchased products
Creator listings
Payouts
Saved memory
Training history

27. Withdrawing consent

Where Lay Your Layer relies on consent, users can withdraw consent.

This may affect:

Marketing messages
Optional memory
Optional training use
Voice processing
Uploads
Personalisation features
Free-use features
Cookies or analytics
Store creator features

Withdrawal of consent does not automatically make earlier processing unlawful where it was lawful at the time. But future optional processing covered by that consent should stop.

28. Accuracy and updates

Users should keep account information accurate.

Lay Your Layer may update records when users correct data, change settings, withdraw consent, freeze accounts, cancel accounts, or update payment/store information.

29. Security measures

Lay Your Layer should use reasonable technical and organisational measures such as:

HTTPS
Access controls
Rate limits
Origin/CORS restrictions
Security logs
Admin restrictions
Separate public/admin areas
Backups
Least-privilege access
Secret/token protection
Payment provider separation
Safety filters
Abuse blocking
Data minimisation
Deletion processes

No system is perfectly secure. Users should not send secrets into public chat.

30. Data breach handling

If Lay Your Layer becomes aware of a personal data breach, it will investigate, take steps to reduce harm, and notify affected users or regulators where legally required.

31. Complaints

Users can contact Lay Your Layer first:

Email: [insert privacy email]

Users may also complain to the UK Information Commissioner’s Office if they are unhappy with how their data is handled. The ICO is the UK regulator for data protection.

32. Changes to this Privacy Policy

Lay Your Layer may update this Privacy Policy when the service changes, laws change, providers change, AI systems change, or new features launch.

The updated version should show a new “Last updated” date.

For important changes, Lay Your Layer may notify users by email, account notice, website notice, or another reasonable method.

33. Contact

For privacy questions, requests, deletion, consent withdrawal, or complaints:

Lay Your Layer Privacy Contact
Email: help@layyourlayer.com
Website: www.layyourlayer.com
Address: 51 Ruddlesway Windsor SL$ 5SG