Privacy Policy

1. Who We Are

CypAI is an AI-powered customer service platform designed for businesses in Cyprus and the MENA region. We help businesses capture leads, respond to customers instantly, and automate bookings—all through intelligent AI chat.

Contact: cypai.app@cypai.app

CypAI is a registered business operating in Northern Cyprus, providing AI solutions to businesses across the island and beyond.

2. What Data We Collect

We collect only the data necessary to provide and improve our service:

• Email address — for account creation and communication
• Business name and details — to personalize AI responses for your business
• Conversation logs — to train and improve AI responses for your customers
• Payment information — processed securely via Paddle; we never see or store your card details
• Website and WhatsApp usage data — to understand how customers interact with your AI assistant

3. Why We Collect It

We use your data for the following purposes:

• To provide the CypAI AI assistant service
• To personalize responses for your specific business
• To process payments and manage subscriptions
• To improve our AI through conversation analysis
• To communicate important account information

4. How We Store It

Your data is stored securely using industry-standard measures:

• Secure cloud servers — hosted on Supabase/PostgreSQL infrastructure
• Encryption — data is encrypted at rest and in transit
• Access controls — only authorized personnel can access your data
• Regular audits — we conduct periodic security audits to ensure compliance

5. Third Parties

We work with trusted third-party providers to deliver our service:

• Paddle — Payment processing (Merchant of Record)
• OpenAI — AI model provider (conversation data is processed solely for generating responses)
• WhatsApp API — Message delivery and communication
• Vercel — Hosting and infrastructure
• Supabase — Database and authentication

These providers are contractually obligated to handle your data in accordance with this privacy policy and applicable data protection laws.

6. Your Rights

You have full control over your data:

• Access — view all your data anytime from your dashboard
• Correction — request data corrections by emailing cypai.app@cypai.app
• Deletion — request complete data deletion (account deletion)
• Export — download your conversation history at any time

We respond to all data requests within 24 hours on business days.

7. Cookies

We use only essential cookies:

• Authentication cookies — required for secure login
• Analytics cookies — to understand site usage and improve performance

We do not use advertising cookies or tracking cookies, and we do not share data with third-party ad networks.

8. GDPR Compliance

CypAI complies with the General Data Protection Regulation (GDPR) as Cyprus is part of the European Union. Your rights under GDPR include:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to data portability
• Right to object to processing

We act as Data Controller for your account data, and as Data Processor for your customer conversation data. A Data Processing Agreement (DPA) is available upon request for business customers who require formal documentation.

9. Data Retention

• Active subscription: Data is retained for as long as you use our service
• After cancellation: Data is retained for 90 days, then permanently deleted
• Backups: All backups are purged within 30 days of account deletion
• Immediate deletion: You can request immediate deletion at any time

10. Contact

For any questions or requests regarding your data:

Email: cypai.app@cypai.app

Response time: Within 24 hours on business days

For data deletion requests, please include "Data Deletion Request" in the email subject line to ensure fast processing.