Privacy Policy

Cyna ("Cyna", "we", "us", or "our") runs the AI propose-to-deliver platform at cyna.so. This Privacy Policy explains what personal information we collect, how we use and share it, how we protect it, and the choices and rights you have. It applies to our websites and the Cyna platform (the "Service"). By using the Service, you agree to this policy.

This policy covers information about you as a Cyna Customer and User. Separately, when you use Cyna to run your business, you may add information about your own customers ("Clients"). For that data, you are the controller and we act as your processor — see Your Clients' data below.

Information we collect

• Account and profile data — your name, email address, password, company name, role, and similar details you provide when you sign up or configure your account.
• Customer Content — the proposals, templates, briefs, and brand and voice inputs you create, plus the Client and engagement details you add to run your work.
• Billing data — your plan, billing contact, and transaction history. Payments are processed by Stripe; we receive limited details (such as the last four digits and card brand) but never store full card numbers.
• Usage and device data — log data, IP address, browser and device information, pages and features used, and proposal analytics such as views and acceptance events, collected to operate, secure, and improve the Service.
• Cookies and similar technologies — used to keep you signed in, remember preferences, and understand how the Service is used (see below).
• Communications — messages you send us, support requests, and your marketing preferences.

How we collect it

We collect information directly from you when you create an account, configure Cyna, or contact us; automatically as you use the Service (through logs, cookies, and similar technologies); and from third parties such as our payment processor and authentication or integration providers you connect.

How we use your information

We use personal information to:

• provide, maintain, and operate the Service, including drafting proposals in your firm's voice and processing the payments you collect;
• set up your account, authenticate you, and provide customer support;
• send service and transactional messages, and — where permitted — relevant product updates and marketing you can opt out of;
• monitor, secure, and troubleshoot the Service, and prevent fraud and abuse;
• analyse usage to understand and improve the Service; and
• comply with legal obligations and enforce our Terms of Service.

Where the GDPR or similar laws apply, we rely on these legal bases: performance of our contract with you, our legitimate interests in running and improving the Service securely, your consent (for example, certain cookies and marketing), and compliance with legal obligations.

Your content and AI

You own the Customer Content you put into Cyna. We use it to generate drafts and run your engagements, as described in our Terms. We do not sell your data, and we do not use your private Customer Content or your Clients' content to train AI models for the benefit of other customers. Where we use third-party AI providers to power these features, we share only the inputs needed to generate your output, under terms that restrict their use of that data.

Cookies and similar technologies

We use strictly necessary cookies to run the Service (such as keeping you signed in), and optional functional and analytics cookies to remember preferences and measure usage. You can control non-essential cookies through your browser settings or any cookie controls we provide. Blocking some cookies may affect how the Service works.

How we share information

We do not sell your personal information. We share it only as follows:

• Service providers (subprocessors) — vendors that help us run Cyna, such as cloud hosting, our payment processor (Stripe), email delivery, analytics, and AI providers, under contracts that limit their use of the data to providing services to us.
• People you involve — Users you invite to your account and Clients you send proposals or invoices to will see the content you share with them.
• Legal and safety — when required by law, regulation, or legal process, or to protect the rights, safety, and security of Cyna, our users, or the public.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

Your Clients' data

When you upload or process information about your Clients in Cyna, you are the data controller and we act as your processor, handling that data on your behalf and on your instructions to provide the Service. You are responsible for having a lawful basis to provide that data and for the notices and consents required for your own customers. If you need a Data Processing Agreement, contact us at privacy@cyna.so.

International data transfers

Cyna and our service providers may process information in countries other than your own. Where we transfer personal data across borders, we use appropriate safeguards, such as the European Commission's Standard Contractual Clauses, to protect it.

How long we keep your information

We keep personal information for as long as your account is active and as needed to provide the Service. After your account is closed, we delete or anonymise your information in the ordinary course, except where we must retain it to meet legal, tax, accounting, or security obligations, resolve disputes, or enforce our agreements. Billing records, for example, may be retained for the period required by law.

How we protect your information

We use administrative, technical, and organisational measures to protect personal information, including encryption in transit and at rest and least-privilege access controls. Learn more on our Security page. No method of transmission or storage is perfectly secure, but we work hard to protect your data and will notify you of incidents as required by law.

Your rights and choices

Depending on where you live, you may have the right to access, correct, update, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. If you are in the EEA, UK, or a similar region, these rights come from laws such as the GDPR. If you are a California resident, you have rights under the CCPA/CPRA, including to know, delete, correct, and opt out of any "sale" or "sharing" of personal information — and we do not sell your personal information.

To exercise any of these rights, email privacy@cyna.so; we will respond as required by law and may need to verify your identity. You can also unsubscribe from marketing emails at any time using the link in those messages. If a request concerns data we process on a Customer's behalf, we will refer it to that Customer.

Children

The Service is intended for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice, such as by email or in the product, and update the "last updated" date above. Your continued use of the Service after the changes take effect means you accept the updated policy.

Contact us

Questions about privacy, or want to exercise your rights? Email privacy@cyna.so, or reach us at hello@cyna.so.