At Erys AI Ltd ("Erys", "we", "us", or "our"), we take your privacy seriously. This policy explains how we collect, use, store, and protect your personal data when you use our AI agent platform.

1. Information We Collect

Account Information

When you create an account, we collect:

Email address
Name (if provided)
Organisation name (if applicable)
Authentication credentials (securely hashed)

Usage Data

We automatically collect information about how you interact with our services:

Agent interactions and session data
Feature usage and preferences
Browser type and device information
IP address and approximate location
Timestamps of access and activity

AI Conversation Data

When you interact with AI agents, we process and store conversation content to provide the service. This includes messages you send, agent responses, and any files or data you share during sessions.

2. How We Use Your Data

We use your information to:

Provide our services — Run AI agents, manage sessions, and deliver features
Improve our platform — Analyse usage patterns to enhance performance and user experience
Communicate with you — Send service updates, security alerts, and (with consent) product news
Ensure security — Detect and prevent fraud, abuse, or security threats
Meet legal obligations — Comply with applicable laws and regulations

We do not sell your personal data to third parties. Ever.

3. Data Storage and Security

Your data is stored on Google Cloud Platform infrastructure in the europe-west4 (Netherlands) region. We implement industry-standard security measures including:

Encryption in transit (TLS 1.3) and at rest (AES-256)
Regular security audits and penetration testing
Access controls and authentication requirements
Automated backups and disaster recovery procedures

4. Third-Party Services

We work with trusted third parties to deliver our services:

Payment Processing

We use Stripe to process payments. Stripe handles your payment card details directly — we never see or store your full card number. See Stripe's Privacy Policy.

AI Model Providers

AI capabilities are provided by third-party large language model providers including Anthropic, OpenAI, and Google. Conversation data is sent to these providers to generate responses. Each provider has their own data handling practices:

5. Your Rights

Under GDPR and UK data protection law, you have the right to:

Access — Request a copy of your personal data
Rectification — Correct inaccurate or incomplete data
Erasure — Request deletion of your data ("right to be forgotten")
Data portability — Export your data in a machine-readable format
Restriction — Limit how we process your data
Objection — Object to certain types of processing
Withdraw consent — Where processing is based on consent

To exercise these rights, contact us at privacy@erys.ai. We will respond within 30 days.

6. Data Retention

We retain your data for as long as necessary to provide our services:

Account data — Until you delete your account
Conversation data — Retained according to your session settings (configurable)
Usage logs — 90 days for operational purposes
Billing records — 7 years as required by law

When you delete your account, we remove your personal data within 30 days, except where retention is required by law.

7. Analytics

With your consent, we use Google Analytics 4 to understand how visitors use our website. Google Analytics collects:

Page views and navigation paths
Click interactions and scroll depth
Session duration and bounce rates
Browser type, device type, and approximate location (country level)
Traffic source and referral information

This data helps us identify usability issues, understand which features matter most, and improve the overall experience. We have IP anonymisation enabled and data retention set to 14 months. Google Analytics data is subject to Google's Privacy Policy.

Analytics cookies are only set if you opt in via our cookie consent banner. You can change your preference at any time using the "Cookie preferences" button on any page, or through our Cookie Policy.

8. Cookies

We use essential cookies required for our service to function. With your consent, we also use analytics cookies to improve our website. For full details, see our Cookie Policy.

9. International Transfers

Your data is primarily stored and processed within the UK/EU. Where data is transferred to third-party AI providers outside this region, such transfers are protected by appropriate safeguards including Standard Contractual Clauses approved by the European Commission.

10. Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect personal data from children. If you believe we have collected such data, please contact us immediately.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or a notice on our platform. Your continued use of our services after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related enquiries or to exercise your data rights:

Email: privacy@erys.ai
Address: Erys AI Ltd, United Kingdom

If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.