Privacy Policy

1. Information We Collect

We collect information that you provide to us directly, information collected automatically, and information from third-party integrations.

• Account Information: Name, email address, password, and organizational domain when you register for Zyra.ai.
• User Content: Audio recordings, video files, live meeting streams, and any documents or text you upload to the platform for transcription and summarization.
• Billing Data: If you purchase a Plus or Business subscription, payment processing is handled securely by Stripe. We do not store full credit card numbers on our servers.
• Automated Usage Data: IP addresses, browser types, device identifiers, and platform interaction metrics to help us optimize the Service.

2. How We Use Your Data

We use the information we collect strictly to operate, maintain, and improve the Zyra.ai Service. This includes:

• Processing your audio to generate transcripts, summaries, speaker identification, and action items.
• Authenticating your account and managing organizational tier limits.
• Providing customer support and responding to your inquiries.
• Detecting, preventing, and addressing technical issues or fraudulent activity.
• Processing subscription payments and managing billing cycles.

3. AI Processing & Training (Zero-Training Policy)

Zyra.ai utilizes advanced artificial intelligence models to transcribe and analyze your meetings. We strictly enforce a Zero-Training Policy on User Content.

Your private audio recordings, uploaded videos, generated transcripts, and Studio AI chat histories are never used to train, improve, or fine-tune public Large Language Models (LLMs) or public acoustic models. Your data remains isolated within your account or organizational workspace.

4. Data Sharing & Disclosure

We do not sell your personal data. We only share your data in the following limited circumstances:

• Service Providers: We utilize trusted third-party infrastructure providers (such as Supabase for database hosting, Stripe for payments, and secure AI API partners) who are bound by strict data processing agreements to protect your data.
• Organizational Accounts: If you use Zyra.ai under a Business plan registered to a corporate or university domain, your administrator may have access to your account and associated meeting data.
• Legal Compliance: We may disclose data if required by law, subpoena, or other legal processes, or to protect the rights, property, and safety of Cartex Data, our users, or the public.
• Business Transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred, provided the receiving party agrees to uphold the material terms of this Privacy Policy.

5. Security & Retention

5.1 Security: We implement industry-standard technical and organizational measures to protect your data, including AES-256-GCM encryption for data at rest and TLS 1.3 for data in transit. We utilize strict Role-Based Access Controls (RBAC) to ensure data isolation. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.

5.2 Retention: We retain your personal information and User Content for as long as your account is active or as necessary to provide the Service. If you delete a meeting or close your account, your data is permanently expunged from our active servers within 30 days, unless a longer retention period is required by law.

6. Third-Party Integrations

If you choose to link Zyra.ai with third-party services (e.g., Google Calendar, Microsoft Outlook, Slack, Zoom, Salesforce), we will access the data necessary to perform the requested actions (such as reading calendar events to auto-join meetings).

Google API Usage: Zyra.ai's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Your Privacy Rights (Global Coverage)

Depending on your location (such as the EEA, UK, California, Virginia, or Texas), you may have specific rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Deletion: Request that we delete your account and associated data ("Right to be Forgotten").
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Opt-Out: We do not sell your data, but you may opt out of non-essential marketing communications.

To exercise any of these rights, please contact us at privacy@cartexdata.com. We will respond to your request within the timeframe required by applicable law.

8. International Data Transfers

Cartex Data is headquartered in Texas, United States. Your information will be collected, processed, and stored in the United States. If you are accessing the Service from outside the U.S. (e.g., the European Union), please be aware that U.S. data protection laws may differ from those of your jurisdiction. By using the Service, you consent to the transfer of your data to the United States.

9. Children's Privacy

Zyra.ai is not intended for or directed at children under the age of 13 (or under 16 in certain jurisdictions). We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child under the applicable age of consent, we will take immediate steps to delete that data.