Gyria

Privacy Policy

Last updated: July 8, 2026

This Privacy Policy explains how [Gyria — Legal Entity Name] (“Gyria”, “we”) collects, uses, and protects information when you use the Gyria service (the “Service”).

Information we collect

  • Account data — name, email, hashed password, and workspace details you provide at sign-up.
  • Content you ingest — documents, web pages you ask us to crawl, connector data, and Q&A pairs, along with derived embeddings and metadata. This is processed to provide retrieval and answering.
  • Usage data — API/usage events, token counts, logs, and diagnostic information used to operate, secure, and bill the Service.

How we use information

To provide and improve the Service, generate grounded answers, meter usage, secure the platform, and communicate with you. We do not sell your personal information. Your ingested content is used only to serve your workspace and is isolated per tenant.

Sub-processors

We rely on infrastructure and AI providers to run the Service, including [Amazon Web Services / AWS Bedrock] (model inference & embeddings), [Neon] (database), and [Vercel] (hosting). A current sub-processor list is available on request.

Data retention & deletion

We retain content while your workspace is active. Deleting a source or workspace triggers a soft-delete followed by permanent removal of its articles, chunks, and derived data. You may request export or deletion of your data at any time by contacting us.

Security

Passwords are hashed (scrypt); connector credentials are encrypted at rest (AES-256-GCM); sessions use signed, httpOnly cookies; and every workspace’s data is access-scoped to that tenant. No method of transmission or storage is 100% secure, but we work to protect your data.

Your rights

Depending on your location (e.g. GDPR/CCPA), you may have rights to access, correct, delete, or port your data. To exercise them, contact us at privacy@gyria.ai.

Contact

[Gyria — Legal Entity Name], [address]. Email: privacy@gyria.ai.

This document is a starting template and is not legal advice. Have it reviewed by qualified counsel for your jurisdiction before launch.