Privacy Policy | Wyra.ai

Preamble

Wyra AI, Inc. ("Wyra," "we," "us," or "our"), a Delaware corporation with its principal office at 633 3rd Avenue, Suite 19F, New York, NY 10017, respects your privacy and is committed to protecting your personal information.

This Privacy Policy is incorporated into and forms part of our Terms and Conditions (wyra.ai/terms). By accessing or using the Service, you agree to these terms. If you do not agree, please do not use the Service.

We may update this Privacy Policy from time to time. For material changes, we will provide notice via email or a prominent notice on the Service. The current version is always available at wyra.ai/privacy.

1. Scope of This Policy

This Privacy Policy applies to all individuals who use or interact with the Wyra Service, including visitors to wyra.ai, registered platform users, and anyone who contacts us for support or sales enquiries. It covers data collected through our website, platform, email communications, and third-party integrations you connect to your account.

This Policy does not cover third-party platforms, websites, or services that may integrate with or be linked from our platform. We encourage you to review the privacy policies of those third parties before engaging with them.

2. Information We Collect

Information You Provide. When you create an account, subscribe to a plan, request a demo, or contact us, you provide us with information such as your name, business email address, company name, job title, and phone number. If you communicate with our support or sales team, we collect the content of those communications.

Payment Information. Subscription payments are handled by Stripe, Inc. When you subscribe, your payment card details are submitted directly to Stripe — Wyra does not store or access your full card details. We retain limited transaction metadata (invoice ID, amount, status) for billing, audit, and support purposes.

Information Collected Automatically. When you access the Service, we automatically collect technical and behavioural data including your device type, operating system, browser type, IP address, session duration, and usage patterns within the platform. This data is used for performance monitoring, security, and improving the Service. We use cookies and similar technologies to support platform functionality and analyse website performance. For details, see our Cookie Policy at wyra.ai/cookies.

Information from Third-Party Integrations. When you connect third-party tools to your Wyra account — such as CRM systems, email platforms, or calendar services — we receive data from those platforms in accordance with the permissions you grant. This may include contact records, email metadata, or calendar entries.

Prospect and Lead Data. Wyra's platform processes prospect and lead data that you upload or that is generated through the outreach features of the Service. This includes LinkedIn profile URLs, business email addresses, job titles, company information, and outreach communications. This data is processed on your behalf as Data Controller — Wyra acts as Data Processor. The terms governing this processing are set out in our Data Processing Agreement at wyra.ai/dpa.

Website Visitor Identification. We use third-party tools to identify companies and, for US-based visitors, individuals who visit wyra.ai. This is done using IP address lookup and, for US visitors, device fingerprint matching against third-party identity databases. This data is used for our own sales and marketing outreach. EU/EEA visitor data is not used for individual-level identification.

3. How We Use Your Information

We use the information we collect for the following purposes:

To provide and operate the Service: user authentication, account management, platform functionality, integration support, and fulfilling our contractual commitments.
To manage subscriptions and billing: processing payments, issuing invoices, managing subscription status, and resolving billing enquiries.
To communicate with you: product announcements, administrative updates, service notices, system alerts, and responses to support enquiries.
To improve the Service: analysing usage patterns, identifying bugs, measuring feature performance, and developing new capabilities.
For security and fraud prevention: detecting suspicious activity, enforcing platform rules, and protecting the Service from unauthorised access.
For marketing communications: sending promotional content and product updates to users who have not opted out. You may unsubscribe at any time via the link in any marketing email or by contacting privacy@wyra.ai.
To comply with legal obligations: responding to legal requests, enforcing our Terms and Conditions, maintaining processing records, and defending against fraud or abuse.

Our platform uses AI-driven scoring to evaluate and prioritise prospect leads based on publicly available data such as company size, industry, job title, and company signals. Scores are generated algorithmically and used to inform outreach prioritisation. If you wish to object to automated scoring or request human review of a decision affecting you, contact privacy@wyra.ai.

4. Sharing Information with Third Parties

Wyra does not sell your personal information. We share information on a need-to-know basis only, in the following circumstances:

Service providers and sub-processors: we engage trusted vendors to support hosting, payment processing, email delivery, analytics, and customer support. These providers process personal information only as necessary and are contractually bound to maintain confidentiality and security. Our current sub-processor list is available upon written request to privacy@wyra.ai.
Platform integrations: when you connect Wyra to third-party platforms, we share data with those platforms in accordance with the permissions you grant.
Legal compliance: we may disclose information where required by law, regulation, or court order, or to protect the rights, property, or safety of Wyra, our users, or the public.
Business transfers: in the event of a merger, acquisition, or sale of assets, your information may be transferred to a successor entity.
Aggregated or de-identified data: we may share anonymised, aggregated information that cannot reasonably be used to identify you for analytics, research, or benchmarking purposes.

5. Your Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal information:

Access — request a copy of the personal information we hold about you.
Correction — request correction of inaccurate or incomplete data.
Deletion — request deletion of your personal information, subject to legal or contractual exceptions.
Portability — request a copy of your data in a structured, machine-readable format.
Objection or restriction — object to or request restriction of processing under certain circumstances.
Withdrawal of consent — withdraw consent for any processing based on consent, including marketing communications and non-essential cookies.
Opt out of marketing — unsubscribe from promotional emails at any time via the unsubscribe link or by contacting privacy@wyra.ai.

To exercise any of these rights, email privacy@wyra.ai with your request and sufficient information to verify your identity. We will acknowledge receipt within five business days and respond within 30 calendar days (extendable by two months for complex requests under GDPR).

6. Additional Information for EU/EEA Residents

Legal Bases for Processing. Where GDPR applies, Wyra processes your personal data only on the following lawful bases:

Contractual necessity: processing required to deliver the Service, manage your account, and fulfil our contractual obligations.
Consent: processing based on your explicit consent, including non-essential cookies and marketing communications. You may withdraw consent at any time.
Legitimate interests: processing for platform improvement, security, fraud prevention, and analytics, where these interests are not overridden by your fundamental rights.
Legal obligation: processing required to comply with applicable law or respond to lawful governmental requests.

Cross-Border Data Transfers. Wyra is headquartered in the United States. Personal data collected from EU/EEA residents is transferred to and processed in the United States. For these transfers, we rely on the European Commission's Standard Contractual Clauses (SCCs). Our Data Processing Agreement at wyra.ai/dpa sets out the full transfer framework including completed SCC annexes, available to EU/EEA customers upon request.

Your GDPR Rights. In addition to the rights listed in Section 5, EU/EEA residents have the right to lodge a complaint with their local data protection supervisory authority. A list of EU supervisory authorities is available at edpb.europa.eu/about-edpb/board/members_en.

7. Additional Information for California Residents

If you are a California resident, you have additional rights under CCPA/CPRA, including: the right to know what personal information we collect and how we use it; the right to delete your personal information; the right to opt out of the sale or sharing of personal information; and the right not to be discriminated against for exercising these rights.

Wyra AI, Inc. does not sell or share personal information as defined under CCPA/CPRA. To exercise your California privacy rights, email privacy@wyra.ai. We will respond within 45 days of receipt of a verifiable request.

8. Data Security

We implement appropriate technical and organisational measures to protect personal data, including:

Encryption: all personal data in transit is protected by TLS 1.2 or higher. Data at rest is encrypted using AES-256.
Access controls: access to production systems and data is granted on a least-privilege basis. Administrative accounts require multi-factor authentication.
Security assessments: we conduct regular third-party security assessments and penetration testing at least annually. Wyra is pursuing SOC 2 Type I and ISO 27001 certifications.
Incident response: suspected breaches affecting personal data are assessed internally within 24 hours and reported to affected individuals and supervisory authorities in accordance with GDPR Articles 33–34 and applicable US law.

No system can guarantee absolute security. You transmit data to the platform at your own risk and are responsible for maintaining the security of your account credentials.

9. Data Retention

We retain personal information only for as long as necessary for the purposes for which it was collected, or as required by law. Our approximate retention periods are:

Account and profile data: retained while your account is active, plus up to 24 months after account deletion or deactivation.
Billing and transaction records: retained for up to 7 years to meet tax, audit, and financial reporting obligations.
Usage logs and analytics: raw logs retained for up to 12 months, then anonymised. Aggregated analytics may be retained for up to 24 months.
Support correspondence: retained for up to 24 months from the date the support case is closed.
Legal and compliance records: retained for as long as required by applicable law, which may be up to 10 years for certain regulatory records.

Data stored in encrypted backup systems may persist for up to 90 days after deletion before being automatically overwritten. To request deletion of your personal data, email privacy@wyra.ai with the subject line "Data Deletion Request." We will verify your identity and complete deletion within 30 days where no legal exception applies.

10. Children's Privacy

The Service is intended for business professionals aged 18 and over. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected data from a person under 18, we will delete it promptly. If you believe a minor has provided us with personal information, contact privacy@wyra.ai.

11. Third-Party Links and Integrations

The Service may contain links to third-party websites or offer integrations with third-party platforms. Wyra is not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before sharing your information with them.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Privacy enquiries: privacy@wyra.ai | General support: support@wyra.ai

Wyra AI, Inc. — Attn: Privacy — 633 3rd Avenue, Suite 19F, New York, NY 10017, United States