Privacy Policy
Last Updated: August 20, 2026
Zyphra Technologies, Inc. (“Zyphra,” “we,” “our,” and/or “us”) values the privacy of individuals who use our website, including https://www.zyphra.com/, along with other related websites, proprietary SaaS service, APIs, applications, and other services provided by us (our “Services”). This privacy policy (the “Privacy Policy”) explains how we collect, use, and disclose information from users of our Services (“you” or “your”). By using our Services, you acknowledge the collection, use, disclosure, and procedures this Privacy Policy describes.
This Privacy Policy does not apply to the extent we process information in the role of a processor or service provider on behalf of our customers. In that context, our processing of your personal information is subject to our agreements with our customers. Our customers are the data controllers and their privacy policies will apply to the processing of your personal information.
Personal Information We Collect
We may collect a variety of information from or about you or your devices from various sources, as described below.
A. Personal Information You Provide to Us
Registration and Account Information. When you sign up for an account, including to test our services, we ask you for your email address. If you sign up using a Google account, we will also receive information such as your name, email address, and profile photo.
Communications. If you contact us directly, we may receive personal information about you, such as your name, email address, the contents of a message or attachments that you may send to us, and other information you choose to provide. When you communicate with us, third party vendors may receive and store these communications on our behalf. If you subscribe to our newsletter, we may collect personal information from you, such as your email address. When we send you emails, we may use embedded pixels or other technologies to track information about your receipt and interaction with our emails, such as whether and when you open them, whether you access any links included in our emails, how long you read our emails, whether you forward our emails and to whom, your Location Information (described below), and your Device Information (described below), to learn how to deliver a better customer experience and improve our Services.
Careers. If you decide that you wish to apply for a job with us, you may submit your information and your resume online. We will collect the information you choose to provide on your resume, such as your education and employment experience. You may also apply through a third-party service, such as LinkedIn. If you do so, we will collect the information you make available to us through that service.
B. Personal Information We Collect When You Use Our Services
Location Information. When you use our Services, we may receive your location information (for example, your IP address may indicate your general geographic region).
Device Information. We receive information about the device and software you use to access our Services, such as internet protocol (IP) address, device type, device identifiers, web browser type and version, and operating system version.
Usage Information. To help us understand how you use our Services and to help us improve it, we automatically receive information about your interactions with our Services, such as the pages or other content you view and the dates and times of your visits.
Prompts and Outputs. Our Services allow you to submit text, audio, images, video, documents, and other materials to the Services (“Prompts”), which generate responses based on your Prompts (“Outputs”). We will collect any information you choose to provide in your Prompts, and this information may be reproduced in the Outputs.
Information from Cookies and Other Tracking Technologies. We and our third-party partners collect information about your activities on our Services using cookies, pixel tags, SDKs, or other tracking technologies. Our third-party partners, such as analytics, and security partners, may also use these technologies to collect information about your online activities over time and across different services.
C. Personal Information We Receive from Other Sources.
Information from Third-Party Services. If you choose to link our Services to a third-party account, such as a productivity, messaging, storage, or calendar service, we may receive information about you, including your profile information and your use of the third-party account. If you wish to limit the information available to us, you should visit the privacy settings of your third-party accounts to learn about your options.
Google Services. If you choose to connect your Google account to the Services, we may access Google user data through Google APIs in accordance with the permissions you grant. Depending on the features you enable, this may include your Google Account identity information, including your name, email address, and profile photo; Google Calendar events; files in Google Drive and Google Docs, Sheets, and Slides; Gmail messages and settings, including drafts and messages you direct us to send; and information in your Google Workspace directory. We use this access to authenticate you, locate information you request, provide relevant context, and take actions you direct through the Services, such as managing calendar events, drafting or sending email, or creating or modifying files. We request only the Google permissions necessary to provide the features you choose to use.
How We Use the Personal Information We Collect
We use the personal information we collect:
To provide, maintain, improve, and enhance our Services;
To personalize your experience on our Services, such as by providing tailored content and recommendations;
To train, develop, and improve the artificial intelligence, machine learning, and models that we use to support our Services;
To understand and analyze how you use our Services and develop new products, services, features, and functionality;
To communicate with you, provide you with updates and other information relating to our Services, provide information that you request, respond to comments and questions, and otherwise provide user support;
For marketing and advertising purposes, such as developing and providing promotional and advertising materials that may be relevant, valuable, or otherwise of interest to you;
To generate anonymized or aggregate data containing only de-identified, non-personal information that we may use for any lawful purposes, such as to publish reports;
To find and prevent fraud and abuse, and respond to trust and safety issues that may arise;
For compliance purposes, including enforcing our legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency; and
For other purposes for which we provide specific notice at the time the information is collected.
Google User Data. Notwithstanding the foregoing, we use Google user data only to provide or improve the user-facing features of the Services that you have authorized. This may include authenticating your identity; executing actions you direct through the Services; using relevant Google data to provide context for a requested feature; looking up people in your Google Workspace directory; and monitoring service reliability and performance using aggregated or de-identified information. We do not use Google user data for advertising or marketing, to create advertising profiles, or to train, develop, or improve general-purpose artificial intelligence or machine learning models. We do not permit our employees or contractors to access Google user data except with your affirmative consent to access the specific data involved, as necessary for security or abuse prevention, as required by applicable law, or where the data has been aggregated and de-identified. Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
How We Disclose the Personal Information We Collect
Partners and Affiliates. We may disclose any information we receive to our current or future partners and affiliates for any of the purposes described in this Privacy Policy.
Vendors and Service Providers. We may disclose any information we receive to vendors and service providers retained in connection with the operation of our Services.
AI Service Providers. We may disclose information we receive to vendors that provide artificial intelligence services that provide backend support for our Services.
Analytics Partners. We use analytics services such as Google Analytics to collect and process certain analytics data. These services may also collect information about your use of other websites, apps, and online resources. You can learn more about Google’s practices by visiting https://www.google.com/policies/privacy/partners/.
As Required By Law and Similar Disclosures. We may access, preserve, and disclose your information if we believe doing so is required or appropriate to comply with law enforcement requests and legal process, such as a court order or subpoena, respond to your requests, or protect your, our, or others’ rights, property, or safety.
Merger, Sale, or Other Asset Transfers. We may transfer your information to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell, liquidate, or transfer all or a portion of our assets. The use of your information following any of these events will be governed by the provisions of this Privacy Policy in effect at the time the applicable information was collected.
Consent. We may also disclose your information with your permission.
Google User Data. We do not sell Google user data. We disclose Google user data only to service providers that process the data on our behalf and are subject to contractual confidentiality and data protection obligations; when required by applicable law or legal process; or with your explicit consent. Service providers may use Google user data only as necessary to provide services to us and may not independently use, resell, or commercially exploit it. We do not disclose Google user data to advertising networks, data brokers, or analytics providers for user tracking or profiling. Any artificial intelligence service provider that processes Google user data on our behalf is subject to the same use restrictions and data protection obligations. In connection with a merger, acquisition, or sale of assets involving Google user data, we will obtain any user consent required by the Google API Services User Data Policy before transferring such data to a successor entity.
Your Choices
Location Information. You can prevent your device from sharing precise location information at any time through your device’s operating system settings.
Marketing Communications. You can unsubscribe from our promotional emails via the link provided in the emails. Even if you opt out of receiving promotional messages from us, you will continue to receive administrative messages from us.
Do Not Track. There is no accepted standard on how to respond to Do Not Track signals, and we do not respond to such signals.
Google Account Connections. You may revoke Zyphra’s access to your Google account at any time through your Google Account permissions settings. If you disconnect your Google account or revoke access, we will stop accessing Google user data through the revoked authorization.
Data Retention and Deletion. We retain personal information for as long as reasonably necessary to provide the Services, fulfill the purposes described in this Privacy Policy, comply with our legal obligations, resolve disputes, and enforce our agreements. The applicable retention period may vary depending on the type of information and the purposes for which it is processed.
Google User Data. We retain Google user data only for as long as necessary to provide the Services and features you have requested or as otherwise required by applicable law. If you disconnect your Google account or revoke Zyphra’s access through your Google Account permissions settings, we will stop accessing Google user data through the revoked authorization. Any Google user data that we have stored will be deleted or de-identified when it is no longer necessary for the purposes for which it was collected, unless a longer retention period is required by applicable law. You may request deletion of Google user data associated with your account at any time by contacting privacy@zyphra.com. We will process deletion requests within a reasonable period and in accordance with applicable law.
Third Parties
Our Services may contain links to other websites, products, or services that we do not own or operate. We are not responsible for the privacy practices of these third parties. Please be aware that this Privacy Policy does not apply to your activities on these third-party services or any information you disclose to these third parties. We encourage you to read their privacy policies before providing any information to them.
Security
We make reasonable efforts to protect your information by using security measures designed to safeguard the information we maintain. However, because no electronic transmission or storage of information can be entirely secure, we can make no guarantees as to the security or privacy of your information.
Google User Data. We use administrative, technical, and organizational safeguards designed to protect Google user data. Google user data is transmitted using TLS-encrypted connections, and Google user data that we store is encrypted at rest using industry-standard encryption. Access is restricted to authorized personnel and systems on a need-to-know basis and is controlled through role-based access controls. Google OAuth authorization tokens are stored securely and are not exposed in application logs, client-side code, or to unauthorized parties. Service providers that process Google user data on our behalf are required to maintain appropriate confidentiality and data protection safeguards. We also maintain procedures designed to detect, investigate, and respond to security incidents and to provide notifications as required by applicable law.
Children’s Privacy
We do not knowingly collect, maintain, or use personal information from children under 18 years of age, and no part of our Services is directed to children. If you learn that a child has provided us with personal information in violation of this Privacy Policy, then you may alert us at privacy@zyphra.com.
International Visitors
Our Services are hosted in the United States (“U.S.”) and intended for visitors located within the U.S. If you choose to use our Services from the European Union or other regions of the world with laws governing data collection and use that may differ from U.S. law, then please note that you are transferring your personal information outside of those regions to the U.S. for storage and processing. We may also transfer your data from the U.S. to other countries or regions in connection with storage and processing of data, fulfilling your requests, and operating our Services. By providing any information, including personal information, on or through our Services, you consent to such transfer, storage, and processing.
Changes to this Privacy Policy
We will post any updates to this Privacy Policy on this page, and the revised version will be effective when it is posted. If we make a material update, we may notify you of such update by through our Services, by email, or other means.
Contact Information
If you have any questions, comments, or concerns about our processing activities, please email us at privacy@zyphra.com or write to us at:
Zyphra Technologies, Inc.
415 Mission Street, 44th Floor
San Francisco, CA 94105