Privacy Policy

1. Information We Collect. We collect two types of personal data:

  • Account/Client Data: When you contact us or sign a contract, we collect identifiers (name, email, company name, phone), business info, and project details. If you sign up for newsletters or downloads, we collect your email with consent.
  • Website Analytics: We automatically collect technical data such as IP address, browser/OS type, and browsing behavior via cookies and analytics tools. For example, we use Google Analytics to analyze site usage. See “Cookies” below for details.
  • Support/Data Processing: If you use our hosted APIs or data services, we may store certain user-provided data (subject to your control) to deliver those services. This is governed by our service agreements and security standards.
Personal Data = Any information about an identifiable person (e.g. name, email, or online identifier). We do not knowingly collect sensitive data (such as SSNs, health info, or minors’ data) unless explicitly required for a project, in which case we will seek additional consent and safeguards.

2. How We Use Your Data. We use your data for these purposes:

  • To Provide Services: We process client data to perform the services you request (developing APIs, integrations, etc.). This includes communication, project management, and delivering the final product.
  • To Improve Our Website/Services: Usage analytics help us optimize our site and tools. For instance, cookie data and server logs tell us which pages are most visited so we can improve content.
  • Marketing & Communications: With your consent, we may use your contact info to send newsletters, tech updates, or promotional materials. You can opt out at any time.
  • Legal & Safety: We use data to comply with laws (tax, audit, etc.) and to protect our networks (e.g. monitoring for suspicious activity).

We rely on the following legal bases (GDPR concepts) for processing personal data

  • Contractual necessity: Processing client-provided data to perform our contract with you.
  • Legitimate interests: For internal business functions (service improvement, fraud prevention) provided it doesn’t override your rights.
  • Consent: When required (e.g. email newsletters or non-essential cookies), we obtain clear consent that can be withdrawn anytime.

3. Data Sharing and Disclosure. We do not sell or rent personal data. We only share data as necessary to deliver services:

  • Service Providers: We work with trusted third parties (e.g. AWS for hosting, OpenAI for AI processing, Stripe/PayPal for payments, Google Analytics for metrics, email platforms for communication). These providers are bound by confidentiality and data protection obligations. For example, AWS and OpenAI act as data processors under our direction. We have Data Processing Agreements (DPAs) in place where required.
  • Legal Requirements: We may disclose personal data if required by law or a valid subpoena. We will only share the minimum required.
  • Business Transfer: If Cypher Core is acquired or merges with another company, customer data may be transferred, but we will require the buyer to protect it under this policy or a comparable one.

4. Cookies and Tracking. We use cookies and similar technologies:

  • Essential Cookies: Necessary for core site functions (e.g. keeping you logged in, remembering preferences).
  • Analytics Cookies: Used by Google Analytics and similar tools to track website performance (page visits, errors) in aggregate.
  • No Advertising Cookies: We do not place ads on our site or use advertising cookies.

5. Data Security. We implement industry-standard security to protect data:

  • We use encryption (HTTPS/TLS) on our website and encrypt sensitive client data at rest.
  • Access to data is restricted by authentication and authorization controls.
  • We regularly update and test our systems (firewalls, penetration testing) to guard against breaches.
  • Note: No system is 100% secure. In the event of a data breach, we will follow legal notification requirements.

6. Data Retention. We retain personal data only as long as needed:

  • Clients: We keep your data for the duration of our contract plus a reasonable period (typically a few years) to meet legal and business needs (tax records, support history, potential future projects).
  • Website Visitors: Analytics data (cookies, logs) are retained only in anonymized form and generally deleted after 25 months. Contact inquiries are kept until resolved or for 3 years.
  • Deletion Requests: When you ask for deletion (see Rights below), we will erase or anonymize your data unless retention is legally required.

7. Your Privacy Rights. Depending on where you live, you have certain rights over your data:

  • California Consumers (CCPA/CPRA): If you reside in California, you have the Right to Know what personal information we collect, use, share or sell about you; the Right to Delete your personal information (with some exceptions); the Right to Correct inaccurate info ; the Right to Limit use of sensitive data; and the Right to Opt-Out of the sale or sharing of your personal information . (Note: Cypher Core does not sell personal data.) We will not discriminate against you for exercising these rights . To make a request, please email [email protected]. We will authenticate and respond in accordance with law.
  • If you are located in the EEA, you have certain data protection rights under GDPR, including access, correction, deletion, and objection to processing. You may contact us to exercise these rights.

To exercise any rights, contact us at [email protected]. We may require verification of your identity, and under GDPR we may charge a reasonable fee only if requests are clearly unfounded or excessive.

8. Children’s Privacy.

Our website and services are intended for adults and businesses. We do not knowingly collect personal data from children under age 13. If we learn we have inadvertently collected such data, we will promptly delete it. If you are a parent or guardian and believe your child has provided us information, please contact us to remove it.

9. International Transfers.

Cypher Core is US-based, and data may be transferred to and stored in the United States or other countries. We ensure appropriate safeguards (e.g. EU Standard Contractual Clauses) are in place when transferring EU personal data outside the EEA . You have the right to be informed of these safeguards upon request.

10. Third-Party Links.

Our site may link to other websites (e.g. social media, partner sites). This policy does not apply to those sites. We encourage you to review the privacy policies of any site you visit.

11. Policy Updates.

We may update this Privacy Policy periodically (e.g. to reflect new laws or services). Significant changes will be noted on our website and with an updated effective date. Please check this page regularly.

12. Contact.

For privacy inquiries or complaints, email [email protected]. If you believe we have not addressed your concern, you have the right to lodge a complaint with your local data protection authority (e.g. for EU residents) or the California Privacy Protection Agency.

Your privacy is important. By using our site or services, you acknowledge you have read and understood this policy