Privacy Policy

1. Introduction

Cyans SEZC Ltd ("Autark", "we", "us", or "our") respects your privacy and is committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you.

2. The Data We Collect

Due to the nature of our product (the Autark API), we operate under a strict principle of data minimization and zero-retention for operational payloads.

• Account Data: We collect your email address, name, and billing information when you register for an account or subscribe to our services.
• Telemetry Data: We log aggregated, anonymous metadata regarding API usage (e.g., token counts, latency metrics) strictly for billing and performance monitoring.
• Prompt Payloads: Autark does not store, log, or persist any prompt payloads, rehydrated text, or model responses passing through our systems. Your data is your data.

3. Data Retention

Account data: retained while your account is active. Usage telemetry: aggregated and anonymized after 90 days. Prompt payloads: processed in memory and discarded immediately — architectural zero retention, not a policy promise. Billing records: retained for 7 years as required by financial regulations.

4. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Where we need to perform the contract we are about to enter into or have entered into with you.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal obligation.

5. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. Additionally, we employ end-to-end AES-256-GCM encryption for all telemetry and transit data. For detailed information, please review our Trust Center.

6. Your Rights

Under GDPR and applicable privacy laws, you have the right to: access your personal data, request correction of inaccurate data, request deletion of your data, object to or restrict processing, data portability, and withdraw consent. To exercise any of these rights, email [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

7. International Transfers

Autark processes data in Helsinki, Finland. Prompt payloads transit through our subprocessor providers (see Subprocessors page). For EU customers, we rely on Standard Contractual Clauses (SCCs) as the lawful transfer mechanism for any processing outside the EEA. A Data Processing Agreement including SCCs is available on request — contact [email protected].

8. Breach Notification

In the event of a personal data breach, Autark will notify affected users and the relevant supervisory authority within 72 hours of becoming aware, as required by GDPR. Notifications will be sent to the email address associated with your account.

9. Third-Party Links

This website may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

10. Contact Details

If you have any questions about this privacy policy or our privacy practices, please contact our Data Privacy Officer in the following ways:

• Email address: [email protected]
• Postal address: Cyans SEZC Ltd, The Valley, Anguilla, 2640-AI, British West Indies.