← Back to Home

Privacy Policy

Last updated: May 30, 2026

1. Introduction

Cysora (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, APIs, widgets, and related services (collectively, the “Service”).

2. Information We Collect

We collect the following types of information:

2.1 Information You Provide

  • Account registration details (name, email address, website URL).
  • Business information used to configure your AI sales agent (sales process descriptions, pricing data, product catalogs).
  • Communications with our support team.
  • Payment and billing information processed through our third-party payment provider.

2.2 Information Collected Automatically

  • Device and browser information (IP address, browser type, operating system).
  • Usage data (pages visited, features used, interaction patterns).
  • Cookies and similar tracking technologies.

2.3 Visitor Data from Deployed Agents

When your AI agent is deployed on your website via the JavaScript snippet, we may collect information from your website visitors, including conversation content, lead information submitted through the agent, and basic device/browser data. This data is processed on your behalf as a data processor.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service.
  • Build and train your custom AI sales agent based on your business data.
  • Process and log conversations between your agent and website visitors.
  • Generate leads and deliver them to your dashboard.
  • Send transactional emails (account creation, password resets, lead notifications).
  • Improve the Service, including AI model performance and user experience.
  • Respond to customer support requests.
  • Comply with legal obligations.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

  • Service providers: Third-party vendors who assist us in operating the Service (e.g., hosting, email delivery, payment processing, AI model providers).
  • Legal compliance: When required by law, regulation, legal process, or governmental request.
  • Business transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets.
  • With your consent: When you have given us explicit permission to share your information.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Conversation logs and lead data are retained in accordance with your account plan. You may request deletion of your data by contacting us at hello@cysora.com.

6. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS/SSL), secure database access controls (Row-Level Security), and regular security reviews. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Cookies and Tracking

We use cookies and similar technologies to maintain session state, remember your preferences, and analyze usage patterns. The Cysora widget uses a persistent identifier stored in localStorage and cookies to maintain conversation continuity across sessions. You may disable cookies through your browser settings, but some features of the Service may not function properly.

8. Third-Party Services

Our Service integrates with third-party services including OpenAI (AI model provider), Supabase (database and authentication), Postmark (email delivery), and Vercel (hosting). These services have their own privacy policies, and we encourage you to review them. We share only the minimum data necessary for these services to function.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data.
  • Object to or restrict certain processing activities.
  • Request data portability.
  • Withdraw consent where processing is based on consent.

To exercise any of these rights, please contact us at hello@cysora.com.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the revised policy on this page with an updated “Last updated” date. Continued use of the Service after changes take effect constitutes your acceptance of the revised policy.

13. SMS Messaging

We use your phone number to send account verification and login security codes. We do not sell or share your mobile opt-in information with third parties for marketing or promotional purposes.

14. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at hello@cysora.com.