Privacy Policy
Last updated: 26 September 2026
1. Overview
This Privacy Policy explains how CypraEdge ("CypraEdge", "we", "us") collects, uses, discloses, and safeguards information when your organization uses our platform. It applies to the CypraEdge web application, dashboards, APIs, and any connected data-source integrations you authorize.
2. Information We Collect
Account & organization data: name, work email, role, and organization details provided at signup.
Connected data sources: when you authorize integrations (e.g. Google Analytics, Search Console, Google Ads, Meta Ads, WordPress, Blogger, email accounts), we store the OAuth tokens and the metrics/content data those integrations return, scoped to your organization.
Usage data: log-level data such as pages visited, actions taken, and API requests, used for security, debugging, and product analytics.
Content you create: campaigns, briefs, drafts, keyword plans, and other content you or your team create inside the platform.
3. How We Use Information
We use the information above to: operate and improve the platform; authenticate and secure accounts; generate the AI-assisted insights, recommendations, and reports the platform provides; communicate service, security, and billing notices; and comply with legal obligations.
Where AI models are used for content or recommendation generation, processing runs against data your organization has explicitly connected, scoped to that organization only.
4. Data Sharing
We do not sell personal information. We share data only with: sub-processors that host or process data on our behalf under contractual confidentiality obligations (e.g. cloud infrastructure, email delivery); the third-party platforms you explicitly connect (e.g. publishing a post to a connected WordPress site); and where required by law, regulation, or valid legal process.
5. Data Retention
We retain organization and account data for as long as your organization maintains an active subscription, plus a reasonable period afterward to comply with legal, tax, or audit obligations, after which it is deleted or anonymized. You may request earlier deletion by contacting your account administrator or our support team.
6. Your Rights
Depending on your jurisdiction (including under GDPR for EU/UK users), you may have the right to access, correct, export, or delete your personal data, and to withdraw consent for optional processing. Requests can be made through your organization administrator or by contacting us using the details below.
7. Security
We apply industry-standard safeguards including encryption in transit (TLS) and at rest for sensitive credentials, role-based access control, and audit logging. See our Security page for more detail.
8. Cookies
We use essential cookies to keep you signed in and remember your session, and optional cookies for product analytics that you can decline from the cookie banner at any time. See the cookie banner shown on your first visit to manage your preference.
9. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated through the platform or by email to your organization's administrators before they take effect.
10. Contact
Questions about this policy or a data request can be directed to your account administrator, who can escalate to our privacy team.