Privacy Policy

1. Introduction

Cytherra Inc. ("Cytherra," "we," "us," or "our") operates the cytherra.com website and the Cytherra search API platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your email address, name (optional), and password (hashed, never stored in plaintext). If you subscribe to a paid plan, Stripe processes your payment information — we never store credit card numbers.

2.2 API Usage Data

We log API requests including: search queries, response latency, endpoint called, status codes, timestamps, and the API key prefix used. This data is used to enforce rate limits, track usage against your plan quota, and improve search quality.

2.3 Automatically Collected Data

When you visit our website, we may collect: IP address, browser type, operating system, referring URL, pages viewed, and timestamps. We use this for analytics and security purposes.

2.4 Crawled Web Content

Our crawlers index publicly available web pages. We store the URL, page title, extracted text content (as Markdown), and vector embeddings. We respect robots.txt directives and do not crawl pages that disallow our bot.

3. How We Use Your Information

• To provide, maintain, and improve the Cytherra search platform
• To process your API requests and return search results
• To manage your account, billing, and plan quota
• To send transactional emails (welcome, API key created, usage alerts)
• To monitor and enforce rate limits and acceptable use
• To detect and prevent fraud, abuse, and security incidents
• To improve search quality using aggregated, anonymized query data
• To communicate product updates (you can opt out at any time)

4. How We Share Your Information

We do not sell your personal data. We may share information with:

• Supabase — database hosting and authentication (data stored in US data centers)
• Stripe — payment processing (PCI-DSS compliant, we never see your card number)
• Resend — transactional email delivery
• OpenAI — embedding generation for search queries (query text is sent for vectorization)
• Vercel — website hosting and edge delivery

We may also disclose information if required by law, court order, or to protect our rights and safety.

5. Data Security

• All data transmitted over HTTPS (TLS 1.3)
• Passwords hashed with bcrypt via Supabase Auth
• API keys hashed with SHA-256; raw key shown only once at creation
• Row-Level Security (RLS) enabled on all Supabase tables
• Service role keys used only server-side, never exposed to clients
• Environment variables stored securely, never committed to source control

6. Data Retention

Account data is retained for the lifetime of your account. API usage logs are retained for 90 days. Crawled web content is retained indefinitely as part of our search index. When you delete your account, your personal data is removed within 30 days; anonymized usage metrics may be retained.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access — request a copy of the data we hold about you
• Correction — update inaccurate information
• Deletion — request that we delete your personal data
• Portability — receive your data in a machine-readable format
• Objection — opt out of certain processing activities

To exercise these rights, contact privacy@cytherra.com. We will respond within 30 days.

8. Cookies

We use essential cookies for authentication (Supabase session cookies). We do not use advertising cookies or third-party tracking cookies. You can disable cookies in your browser settings, but this may prevent you from using authenticated features.

9. Children's Privacy

Cytherra is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children. If we discover that we have, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our website. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, contact us at: