Trust at lyynx: built around the people who vouch for you
A customer who agrees to be a reference is doing you a favor. lyynx is built so that favor stays in their hands: advocates decide what is shown, how they are contacted and how often, and anyone can check whether they have been listed. This page gathers every privacy, security and compliance document in one place.
Advocate-first, in practice
Three privacy levels per reference
Every reference is public, approval required or private. Individual details such as photo, LinkedIn link, contact details and testimonial can be shown or hidden. How privacy controls work.
Advocates set their own limit
An advocate chooses how many engagements they will take in a rolling 30 days. When they are at capacity, new requests go to the vendor's team instead of to them. How burnout prevention works.
Advocates own their profile
Once an advocate signs in, their profile is theirs. The vendor can ask for an update but can no longer edit it. Consent can be withdrawn at any time, and a revoked reference is not shown again without a new approval.
No open directory
Real reference content is shown to registered prospects that a vendor has invited or approved. Access can expire. Requests can be routed for approval before anyone is contacted.
Check whether you are listed
Anyone can check whether a company has listed them as a customer reference on lyynx. Search by email address, website domain or company name. You do not need an account, your search is not shared with any vendor, and if you find a listing you did not authorize you can report it for review.
Policies and agreements
Every document below is public. You do not need to sign anything or talk to sales to read them.
Questions about security or privacy
If you are reviewing lyynx for your company, or you are a reference with a question about your own data, contact us and a person will answer.
Frequently asked questions
Can I find out whether a company has listed me as a reference?
Yes. Anyone can use the public listing check to search by email, domain or company name, without an account, and report a listing they did not authorize.
Who controls what a prospect sees about an advocate?
The reference does. Each reference has a privacy level (public, approval required or private), per-field display controls, a chosen contact method and its own engagement limit. Once an advocate signs in, they own their profile.
Can an advocate withdraw consent?
Yes. An advocate can revoke consent at any time. A revoked reference is no longer shown and needs a new approval before it can appear again.
Where are the legal documents?
The privacy policy, GDPR notice, California privacy notice, data processing agreement, subprocessor list, service level agreement, acceptable use policy and security overview are all public and linked from this page.