Privacy Policy

Information you give us:

• Contact details you submit through our audit request form: name, work email, company, support platform, and approximate monthly conversation volume.
• Anything you send us by email, or when you book a call through our scheduling provider.

Information collected automatically:

• Standard server and security logs from our hosting provider, such as IP address, browser type, pages requested, and timestamps.
• We do not use advertising cookies or cross-site tracking.

Customer data for audits:

• If your company asks us to run an audit, we process the customer support conversations and policies your company authorizes us to access, through a read-only connection or exported files. These conversations may contain personal information about your customers and support staff.

• To respond to your request and communicate with you about Gyfra.
• To run audits and deliver results to the company that requested them.
• To operate, secure, and improve our website and services, including improving detection with anonymized customer data as described below.
• To comply with legal obligations and enforce our terms.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

When we process conversation data for a company, we do so to provide our services to that company under our agreement with it, and, after anonymization, to improve Gyfra as described in the next section. That company is responsible for its relationship with its own customers. If you are a customer of a company that uses Gyfra and have a question about your data, please contact that company directly. We will help them respond.

Gyfra gets more accurate by learning from the conversations it reviews. Here is exactly how that works.

What we receive:

• Customer support conversations, through a read-only connection or files you upload.
• Policy documents you provide, such as refund, pricing, or cancellation policies.

How we anonymize it. Before any data is used to improve Gyfra, we remove:

• Personal details: names, email addresses, phone numbers, addresses, account and order IDs, and payment data.
• Company-identifying details: company names, product names, prices, and internal policy specifics.

What we use anonymized data for:

• Improving our detection rules and AI models.
• Measuring how accurate our detection is.

What we never do:

• Sell customer data.
• Share one customer's data with another customer.
• Try to re-identify anonymized data.
• Use customer data to train third-party AI models, such as models from OpenAI or Anthropic.

Your choice: enterprise customers can opt out of anonymized learning by emailing j@getgyfra.com.

Retention: we keep customer conversation data for [RETENTION PERIOD]. After that, we delete it, keeping only anonymized data that no longer identifies any person or company.

We share information only as needed to run Gyfra:

• Service providers that help us operate, such as hosting, email, scheduling, and AI model providers used to analyze conversations. They may use the information only to provide services to us.
• When required by law, or to protect the rights, safety, and security of Gyfra, our users, or others.
• In connection with a reorganization, financing, or acquisition, including when Gyfra incorporates. Any successor will be bound by this policy for information collected under it.

We keep contact information for as long as needed to respond to you and maintain our relationship, unless you ask us to delete it.

Customer conversation data is kept as described in How we use customer data to improve Gyfra.

We use reasonable technical and organizational measures to protect information, including read-only access to support platforms and encryption in transit and at rest. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Depending on where you live, including California, you may have the right to know what personal information we hold about you, and to access, correct, or delete it. You may also opt out of marketing emails at any time. To make a request, email us. We will not discriminate against you for exercising these rights.

Gyfra is based in the United States, and information is processed in the United States and wherever our service providers operate.

Gyfra is a business service and is not directed to children. We do not knowingly collect personal information from anyone under 16.

We may update this policy. If we make material changes, we will update the effective date above and, where appropriate, notify you.

Questions or requests: j@getgyfra.com