Privacy Policy

Introduction

Zyna Labs LLC ("Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website (zynalabs.com), applications, and services, including Avturo, Seluna, Consilience, and any other products or services we offer (collectively, the "Services").

By using our Services, you consent to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our Services.

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, password, phone number, profile information
• Payment Information: Credit card details, billing address, transaction history (processed securely by Stripe)
• Communications: Messages you send us, support requests, feedback, survey responses
• User Content: Any content you upload, submit, or create using our Services

1.2 Information Collected Automatically

• Device Information: Device type, operating system, browser type, unique device identifiers
• Usage Data: Pages visited, features used, time spent, clickstream data
• Log Data: IP address, access times, referring URLs, error logs
• Location Data: General location based on IP address (we do not collect precise GPS location)

1.3 Product-Specific Data Collection

2. Third-Party AI Services

3. How We Use Your Information

We use collected information to:

• Provide Services: Deliver, maintain, and improve our AI products and features
• Process Transactions: Handle payments, billing, and account management
• Communicate: Send service updates, security alerts, and support messages
• Personalize: Customize your experience based on preferences and usage
• Analyze and Improve: Understand usage patterns to enhance our products
• Security: Detect, prevent, and address fraud, abuse, and security issues
• Legal Compliance: Comply with applicable laws and legal obligations
• Marketing: Send promotional communications (with your consent, where required)

4. How We Share Your Information

4.1 Service Providers

We share information with trusted third parties who help us operate our Services:

• AI Providers: OpenAI, Anthropic, Google (as described above)
• Payment Processing: Stripe
• Cloud Hosting: Google Cloud Platform, Firebase
• Analytics: Google Analytics, Vercel Analytics
• Email Services: SendGrid, Resend
• Customer Support: Intercom (if applicable)

4.2 Other Disclosures

We may also share information:

• Legal Requirements: When required by law, court order, or governmental authority
• Safety and Rights: To protect the safety, rights, or property of Zyna Labs, our users, or others
• Business Transfers: In connection with a merger, acquisition, bankruptcy, or sale of assets
• With Consent: When you have given us explicit permission

4.3 What We Don't Do

We do NOT sell your personal information to third parties for advertising or marketing purposes.

5. Cookies and Tracking Technologies

We use cookies and similar technologies for:

Types of Cookies

• Essential Cookies: Required for basic functionality (authentication, security)
• Analytics Cookies: Help us understand how you use our Services (Google Analytics)
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Used to deliver relevant advertisements (only with consent)

Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may affect functionality. Most browsers allow you to refuse cookies or alert you when cookies are being sent.

Do Not Track

Our Services do not currently respond to "Do Not Track" (DNT) browser signals. However, you can use browser settings and extensions to limit tracking.

6. Data Security

We implement appropriate security measures including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure cloud infrastructure with access controls
• Regular security assessments and monitoring
• Employee training on data protection practices
• Incident response procedures

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as necessary to:

• Provide our Services while your account is active
• Comply with legal obligations (typically 7 years for financial records)
• Resolve disputes and enforce agreements
• Maintain security and prevent fraud

When you delete your account, we will delete or anonymize your personal information within 90 days, except where retention is required by law or for legitimate business purposes.

8. Your Rights and Choices

Depending on your location, you may have rights to:

• Access: Request a copy of the personal information we have about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Receive your data in a portable format
• Restriction: Request restriction of processing
• Objection: Object to certain processing activities
• Withdraw Consent: Withdraw consent where processing is based on consent
• Opt-Out: Opt-out of marketing communications

To exercise these rights, contact us at hello@zynalabs.com. We will respond within the timeframe required by applicable law (typically 30-45 days). We may request verification of your identity before processing requests.

9. Automated Decision-Making

Our AI Services analyze information you provide to generate recommendations, insights, and content. These automated processes are designed to assist you but do not make legally binding decisions about you. You maintain full control over any decisions you make based on our AI outputs. If you have concerns about automated processing, please contact us.

10. International Data Transfers

Zyna Labs LLC is based in the United States. If you access our Services from outside the U.S., your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate. These countries may have different data protection laws than your country of residence. By using our Services, you consent to the transfer of your information to the United States and other countries.

11. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: What personal information we collect, use, and disclose
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate information
• Right to Opt-Out: Opt-out of the sale or sharing of personal information (we do not sell personal information)
• Right to Limit: Limit use of sensitive personal information
• Right to Non-Discrimination: Not be discriminated against for exercising your rights

To exercise your California privacy rights, email us at hello@zynalabs.com or call +1 (747) 309-0444.

12. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland:

• Legal Basis: We process your data based on: (a) your consent, (b) performance of a contract, (c) our legitimate interests, or (d) legal obligations
• Data Controller: Zyna Labs LLC is the data controller for your personal information
• Additional Rights: You have the right to lodge a complaint with your local supervisory authority
• Data Transfers: We rely on Standard Contractual Clauses for transfers outside the EEA

13. Children's Privacy

Our Services are not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information. If you believe we have collected information from a child under 18, please contact us immediately.

14. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law. For breaches requiring notification, we will notify affected users within 72 hours of becoming aware of the breach (or as otherwise required by law) via email or prominent notice on our website.

15. Third-Party Links and Services

Our Services may contain links to third-party websites, applications, or services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you access through our Services. We are not responsible for the privacy practices of third parties.

16. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a new effective date. For significant changes, we may also notify you via email. Your continued use of our Services after changes take effect constitutes acceptance of the updated policy.

17. Contact Us

For privacy-related questions, concerns, or to exercise your rights: