Privacy Policy | Sysiphany

This Privacy Policy explains how Sysiphany LLC (“Sysiphany,” “we,” “us,” or “our”) handles personal information when you use our websites, AI consultation workspace, diagnostic conversations, summaries, complete reports, and related support (collectively, the “Service”).

1. Information we collect

Depending on how you use the Service, we collect:

Account and authentication information: email address, name, profile image, authentication provider, session information, account role, credit balance, and report-language preference. We support email magic links and Google authentication; we do not ask you to create a Sysiphany password.
Consulting profile information: industry, company size, role, company name, maturity context, and information you confirm for later consultations.
Consultation content: your questions, answers, uploaded or pasted business context, conversation history, extracted evidence, diagnostic state, signals, and model responses.
Reports and derived information: scores, evidence coverage, issues, recommendations, summaries, complete reports, report status, and generated PDF files.
Transaction and entitlement information: purchased item, amount, currency, payment and checkout identifiers, order status, access-code redemption, and report entitlement. Stripe processes payment-card details; Sysiphany does not receive or store your full card number.
Usage, device, and security information: pages and features used, timestamps, referral URL, approximate location derived from network information, browser and device type, logs, rate-limit signals, and Cloudflare Turnstile challenge information.
Communications: support requests, feedback, and other messages you send us.

We receive this information from you, your browser or device, authentication and payment providers, and information generated through your use of the Service.

2. How we use information

We use information to:

create and secure accounts, authenticate users, and maintain sessions;
conduct consultations, preserve conversation history, retrieve relevant methodology, and generate summaries and reports;
manage credits, purchases, access codes, entitlements, and customer support;
deliver authentication, service, security, and transactional emails;
detect abuse, bots, fraud, prompt-extraction attempts, and security incidents;
monitor reliability, debug errors, understand aggregate product usage, and improve the Service;
comply with law, enforce our Terms, and protect users, Sysiphany, and others; and
communicate product changes or, where permitted, relevant service information.

Where applicable law requires a legal basis, we rely on performance of our contract with you, our legitimate interests in operating and securing the Service, compliance with legal obligations, and consent where required. You may withdraw consent at any time, without affecting earlier lawful processing.

3. How AI processing works

When you use the consulting expert, we assemble relevant company context, conversation messages, diagnostic state, selected Sysiphany methodology, and—when available—summary or report context. We send the information needed for that request to our configured AI model providers, which may include OpenRouter and DeepSeek, or other providers disclosed through an updated policy or service notice.

Sysiphany does not use your consultation content to train a public or foundation AI model. We seek provider configurations that minimize training and retention where available; however, provider processing, routing, caching, abuse monitoring, and retention can vary by provider, model endpoint, and configuration. Their policies also apply to their processing. Please avoid including information that is not necessary for the consultation.

AI-generated content and diagnostic inferences are stored with your consultation so you can return to it, generate deliverables, and ask follow-up questions.

We disclose information only as reasonably necessary to:

Service providers: infrastructure and database hosting, AI model processing, email delivery through Resend, authentication through Google, payments through Stripe, bot protection through Cloudflare Turnstile, and privacy-oriented product analytics through Vercel Analytics.
Professional advisers: lawyers, accountants, auditors, insurers, and security advisers subject to appropriate duties.
Legal and safety recipients: authorities or other parties when required by law or reasonably necessary to protect rights, safety, security, and the integrity of the Service.
Business-transfer recipients: a buyer, investor, successor, or adviser in a merger, financing, reorganization, sale, or similar transaction, subject to appropriate safeguards.

We do not sell personal information and do not share consultation content for third-party behavioral advertising.

5. Cookies, sessions, and analytics

We use essential cookies and similar technologies to authenticate you, maintain sessions, protect forms, and remember necessary settings. Cloudflare Turnstile evaluates browser and environment signals to distinguish people from abusive automation. Vercel Analytics provides aggregate usage information such as page URL, referrer, approximate geography, browser, and device information and is designed not to identify individual visitors by default.

Blocking essential cookies may prevent account or consultation features from working.

6. Retention

We retain account, consulting profile, conversations, summaries, and reports for as long as your account remains active or as reasonably needed to provide the Service. Anonymous or unfinished diagnoses may expire according to operational settings. We may keep limited transaction, entitlement, audit, fraud-prevention, and security records for legal, accounting, dispute, and safety purposes.

When information is deleted, it may remain temporarily in backups or provider systems until their ordinary deletion cycles complete. AI providers and other service providers maintain their own retention practices. We de-identify or delete information when it is no longer reasonably needed, subject to legal obligations and legitimate security needs.

7. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including access controls, hashed access-code verification, scoped authentication, and encrypted network transport where supported. No system is completely secure, and we cannot guarantee absolute security. If you believe your account or information is at risk, contact [email protected].

8. International transfers

Sysiphany is based in the United States, and our providers may process information in the United States and other countries. Those countries may have different data-protection laws. Where required, we use recognized transfer mechanisms or other appropriate safeguards.

9. Your choices and rights

Depending on your location, you may have rights to request access, correction, deletion, restriction, portability, or objection; withdraw consent; or appeal a decision concerning your personal information. You can update certain profile and report-language settings in your account. You may also request account deletion.

Send privacy requests to [email protected]. We may verify your identity and authority before completing a request. Some information may be retained where required for transactions, legal compliance, security, fraud prevention, or disputes. You may also complain to your local data-protection authority.

10. Information about other people

If you provide personal information about employees, customers, partners, or other people, you are responsible for having a lawful basis and providing any notices or choices required by law. Limit submissions to information relevant to the consultation.

11. Children

The Service is intended for business users aged 18 or older and is not directed to children. We do not knowingly collect personal information from children. Contact us if you believe a child has provided information to the Service.

12. Changes to this policy

We may update this Privacy Policy as the Service, providers, and law evolve. We will update the date above and provide additional notice where required. Material changes apply prospectively unless law permits otherwise.

13. Contact us

For privacy questions or requests, email [email protected]. For product support, email [email protected].

Sysiphany LLC

5830 E 2ND ST STE 7000 NM 28445
Casper, WY 82609, United States