Terms & Policies

Privacy Policy

This Privacy Policy explains how Cyrus AI collects, uses, stores, shares, and protects information when you use our website, translation tools, account features, dashboard, payment workflows, support features, miniapp flows, and related services.

Introduction

This Privacy Policy explains how Cyrus AI collects, uses, stores, shares, and protects information when you use our website, translation tools, account features, dashboard, payment workflows, support features, miniapp flows, and related services.

This Privacy Policy focuses on privacy, data handling, storage, sharing, security, retention, and your privacy rights. Contractual rules for using Cyrus AI are explained separately in our Terms of Use.

Who We Are

Cyrus AI provides AI-assisted document translation, file processing, translation output generation, formatting-preservation tools, account features, dashboard features, payment workflows, and support features.

For the purposes of this Privacy Policy, “Cyrus AI,” “we,” “us,” and “our” refer to Cyrus AI.

Contact details are provided at the end of this Privacy Policy.

Information We Collect

We collect information that is necessary to provide, operate, secure, improve, and support Cyrus AI.

Depending on how you use the Service, we may collect:

  • account and login information;
  • uploaded files and document content;
  • source and target language selections;
  • translation outputs and generated files;
  • payment, wallet, and transaction information;
  • dashboard activity and service usage information;
  • device, browser, IP address, and log information;
  • language, theme, cookie, and browser storage preferences;
  • support messages, contact requests, refund requests, and related communications;
  • miniapp, Telegram, Bale, or external login context where applicable.

We do not intentionally collect more information than is reasonably needed for the Service.

Account and Login Information

When you create an account, log in, or use account-based features, we may collect and process information such as:

  • your email address;
  • your name, if provided;
  • your phone number or external login identifier, if applicable;
  • account ID and user ID;
  • login method;
  • authentication tokens or session information;
  • account status;
  • dashboard preferences;
  • security and access logs.

We use this information to create and manage your account, authenticate you, protect your account, provide dashboard features, maintain security, and communicate with you about your use of the Service.

Uploaded Files, Translation Content, and Outputs

When you upload a file or submit content for translation or processing, we may process:

  • uploaded files;
  • file names;
  • file type and file size;
  • text extracted from files;
  • source language and target language;
  • translation job ID;
  • processing status;
  • translated text;
  • generated output files;
  • formatting and layout data needed to produce the translated document.

We use uploaded files and translation content only to provide the Service, including file processing, translation generation, formatting preservation, output delivery, dashboard download access, troubleshooting, security, and support.

Uploaded files and generated outputs are stored for 15 days so that you can access and download them from your dashboard during that period. After 15 days, files and outputs are scheduled for deletion or removal from active access, unless a longer period is required for security, dispute resolution, legal compliance, accounting, abuse prevention, or technical backup processes.

Cyrus AI does not use uploaded files, extracted text, translation content, or generated outputs to train AI models.

Payment, Wallet, and Transaction Information

When you make a payment, use wallet features, purchase credits, request a refund, or use paid features, we may process information such as:

  • payment amount;
  • transaction ID;
  • payment reference;
  • payment status;
  • wallet balance or credit activity;
  • purchase history;
  • refund request details;
  • payment gateway response data;
  • account and user ID connected to the transaction.

Payments may be processed by third-party payment providers, including Zarinpal or other payment providers we support.

We do not intentionally store full payment card numbers or sensitive payment credentials unless expressly stated and technically required. Payment providers may process payment information according to their own terms and privacy policies.

We use payment and transaction information to process payments, provide paid features, manage wallet or credit balances, prevent fraud, resolve disputes, process refunds, keep accounting records, and comply with legal obligations.

Device, Log, Security, and Usage Information

When you use the Service, we may automatically collect technical and log information, including:

  • IP address;
  • browser type and version;
  • device type;
  • operating system;
  • user agent;
  • pages visited;
  • timestamps;
  • session information;
  • error logs;
  • security events;
  • referrer information;
  • approximate location derived from IP address;
  • actions taken within the Service, such as upload, download, login, payment, or dashboard activity.

We use this information to operate the Service, secure accounts, detect abuse, prevent fraud, debug errors, improve reliability, monitor performance, and protect Cyrus AI and its users.

Cookies, localStorage, sessionStorage, and Similar Technologies

Cyrus AI may use cookies, localStorage, sessionStorage, and similar browser storage technologies for essential service functions.

These may include:

  • login and authentication;
  • session management;
  • security and CSRF protection;
  • language preference;
  • theme preference;
  • dashboard functionality;
  • payment flow state;
  • miniapp context;
  • temporary session data;
  • cookie consent preferences.

Essential cookies and storage are used to make the Service work properly.

Optional analytics, marketing, tracking, heatmap, or advertising technologies are not currently used unless separately implemented and disclosed. If optional technologies are added in the future, they will be used only where permitted by law and, where required, with your consent.

You can manage cookie choices through the Cookie Settings link in the website footer. More details are available in our Cookie Policy.

Support, Contact, and Refund Requests

When you contact us for support, send a message, report an issue, request a refund, or communicate with us, we may process:

  • your name;
  • email address;
  • account information;
  • message content;
  • attachments you provide;
  • payment or job references;
  • support history;
  • technical information needed to resolve the issue.

We use this information to respond to your request, provide support, investigate issues, process refunds, improve the Service, and keep records of communications.

Miniapp, Telegram, Bale, and External Login Context

If you use Cyrus AI through a miniapp, Telegram, Bale, or another external login or platform context, we may process information needed to connect your session and provide the requested features.

This may include:

  • platform identifier;
  • temporary session data;
  • miniapp context;
  • user ID or external platform ID where applicable;
  • language or interface preferences;
  • authentication or verification data provided by the platform.

We use this information only to provide login, session continuity, miniapp functionality, account connection, security, and support.

External platforms may process your information under their own terms and privacy policies.

How We Use Information

We use information for the following purposes:

  • to provide the Service;
  • to create and manage user accounts;
  • to authenticate users and maintain sessions;
  • to process uploaded files;
  • to generate translations and output files;
  • to make files available for dashboard download for 15 days;
  • to process payments, wallet balances, credits, and refunds;
  • to provide customer support;
  • to maintain security and prevent fraud;
  • to detect abuse, misuse, and unauthorized access;
  • to troubleshoot technical issues;
  • to improve reliability, performance, and user experience;
  • to maintain business, accounting, tax, and legal records;
  • to comply with applicable laws, regulations, payment provider requirements, or legal requests.

We do not use uploaded files, extracted text, translation content, or generated outputs to train AI models.

AI Processing and Model Training

Cyrus AI uses AI-assisted processing to provide translation and document processing features.

Uploaded files, extracted text, translation content, and generated outputs may be processed by Cyrus AI systems and, where applicable, AI processing providers only as needed to provide the requested translation or processing service.

Cyrus AI does not use uploaded files, extracted text, translation content, or generated outputs to train AI models.

We do not sell uploaded files or translation content.

We do not allow uploaded files or translation content to be used for unrelated AI training, advertising, or profiling purposes.

Legal Bases, Where Applicable

Where privacy laws such as the GDPR or UK GDPR apply, we may process personal data based on one or more of the following legal bases:

  • performance of a contract, when processing is necessary to provide the Service you requested;
  • legitimate interests, such as securing the Service, preventing fraud, improving reliability, and supporting users;
  • consent, where required for optional cookies, optional analytics, marketing, or certain communications;
  • legal obligation, where processing is necessary for tax, accounting, payment, compliance, or legal requirements;
  • establishment, exercise, or defense of legal claims.

The applicable legal basis may depend on the feature, data type, and jurisdiction.

How We Share Information

We do not sell your uploaded files or translation content.

We may share information only where necessary for the purposes described in this Privacy Policy, including with:

  • hosting and infrastructure providers;
  • file storage and processing systems;
  • AI processing providers, only as needed to provide the requested Service;
  • payment providers such as Zarinpal or other supported payment gateways;
  • security, logging, and abuse-prevention services;
  • customer support systems or internal support staff;
  • Telegram, Bale, or miniapp platforms where you use those integrations;
  • professional advisors, such as legal, accounting, or compliance advisors;
  • authorities, courts, regulators, or law enforcement where required by law or necessary to protect rights, safety, and security.

Service providers are expected to process information only as needed to provide services to Cyrus AI or to comply with applicable obligations.

Third-Party Services

The Service may include or rely on third-party services, such as:

  • payment gateways;
  • hosting and infrastructure providers;
  • AI processing providers;
  • Telegram or Bale miniapp/login flows;
  • trust seals such as eNamad;
  • social links;
  • security or support tools.

Third-party services may collect or process information under their own terms and privacy policies. Cyrus AI does not control the privacy practices of third-party services.

You should review the privacy policies of third-party services you use or interact with.

Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.

Uploaded files and generated outputs are retained for 15 days so that users can download them from their dashboard. After 15 days, uploaded files and generated outputs are scheduled for deletion or removal from active access.

Different types of information may be retained for different periods:

  • uploaded files and generated outputs: 15 days;
  • account information: for as long as your account remains active or as needed for legal, security, or operational purposes;
  • payment and transaction records: as long as needed for accounting, tax, fraud prevention, dispute resolution, and legal obligations;
  • support messages: as long as needed to respond, maintain support history, resolve disputes, and improve service quality;
  • security logs: as long as needed for security monitoring, abuse prevention, fraud detection, and technical reliability;
  • cookie consent records and browser preferences: until you change or delete them, or until they expire according to the relevant storage mechanism.

Backup copies may persist for a limited period after deletion from active systems, but they are not used for ordinary access and are removed according to backup rotation and security procedures.

Security

We use reasonable technical, organizational, and administrative measures designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

These measures may include access controls, authentication, encryption where appropriate, logging, monitoring, secure infrastructure practices, and limited access to files and account data.

However, no internet service, storage system, or transmission method is completely secure. We cannot guarantee absolute security.

You are responsible for keeping your account access, login methods, devices, and credentials secure.

International Data Transfers

Cyrus AI may process information in countries or regions other than the country where you live.

Our servers, service providers, payment providers, AI processing providers, or infrastructure providers may be located in different countries.

Where required by applicable law, we take steps designed to protect personal data when it is transferred internationally.

Your Privacy Rights

Depending on your location and applicable law, you may have rights regarding your personal information, including the right to:

  • request access to your personal information;
  • request correction of inaccurate information;
  • request deletion of certain information;
  • request restriction or objection to certain processing;
  • request a copy of certain information;
  • withdraw consent where processing is based on consent;
  • object to certain uses of information;
  • complain to a privacy or data protection authority.

To make a privacy request, contact us at privacy@cyrusaico.com.

We may need to verify your identity before responding to a request. Some requests may be limited by legal, security, payment, accounting, fraud prevention, or technical obligations.

GDPR / UK GDPR Rights, Where Applicable

If the GDPR or UK GDPR applies to your personal data, you may have additional rights, including:

  • the right of access;
  • the right to rectification;
  • the right to erasure;
  • the right to restriction of processing;
  • the right to data portability;
  • the right to object;
  • the right to withdraw consent;
  • the right to lodge a complaint with a supervisory authority.

You may contact us at privacy@cyrusaico.com to exercise these rights.

You may also have the right to contact your local supervisory authority, depending on where you live.

California / CCPA Rights, Where Applicable

If the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to you, you may have rights to:

  • know what categories of personal information we collect;
  • know the purposes for which personal information is used;
  • know the categories of third parties to whom information is disclosed;
  • access certain personal information;
  • request deletion of certain personal information;
  • request correction of inaccurate personal information;
  • opt out of sale or sharing of personal information, where applicable;
  • limit the use of sensitive personal information, where applicable;
  • not be discriminated against for exercising privacy rights.

Cyrus AI does not sell uploaded files, translation content, or generated outputs.

Cyrus AI does not use uploaded files, extracted text, translation content, or generated outputs to train AI models.

To submit a CCPA-related request, contact us at privacy@cyrusaico.com.

Do Not Sell or Share Personal Information

Cyrus AI does not sell uploaded files, translation content, or generated outputs.

Cyrus AI does not currently use advertising or marketing pixels for cross-context behavioral advertising unless separately disclosed and implemented.

If we introduce technologies that may qualify as “sale” or “sharing” under applicable privacy laws, we will provide appropriate notice and choice where required.

Children’s Privacy

The Service is not intended for children under the age of 13, or under the minimum age required by applicable law.

We do not knowingly collect personal information from children where parental consent is required.

If you believe a child has provided personal information to Cyrus AI without appropriate permission, contact us at privacy@cyrusaico.com, and we will take reasonable steps to review and address the issue.

Business Transfers

If Cyrus AI is involved in a merger, acquisition, financing, reorganization, sale of assets, transfer of business, bankruptcy, or similar transaction, information may be transferred as part of that transaction.

If this happens, we will take reasonable steps to ensure that information remains protected in a manner consistent with this Privacy Policy or provide notice where required.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

When we update it, we will change the “Last updated” date above.

For material changes, we may provide additional notice through the website, dashboard, email, or other reasonable means.

Contact

For privacy requests, data access, deletion, correction, cookie questions, or similar privacy rights requests, contact Privacy at privacy@cyrusaico.com.

For account or service support, contact Support at support@cyrusaico.com.

For formal legal notices, contact Legal at legal@cyrusaico.com.

Company/Owner: [LEGAL ENTITY OR OWNER NAME]

Address: [BUSINESS ADDRESS, IF APPLICABLE]