Privacy Policy

1. Introduction

This Privacy Policy describes how Zyphra ("we," "our," or "us"), operated by Alex Kem, collects, uses, processes, shares, and protects your information when you use the Zyphra website, web application, and related services (collectively, the "Service"). By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Data Controller

The data controller responsible for your personal data is:

Alex Kem
Am Hellweg 10
32105 Bad Salzuflen, Germany
Email: support@zyphra.app

3. Information We Collect

3.1 Account Information

When you create an account, we collect your name, email address, password (hashed), and billing information. Legal basis: Contract performance (GDPR Art. 6(1)(b)).

3.2 Usage Data

We automatically collect information about your interactions with the Service, including video generation logs, API usage, browser type, IP address, device information, and pages visited. Legal basis: Legitimate interest (GDPR Art. 6(1)(f)).

3.3 Content Data

Your video configurations, generated content, uploaded assets, and project data are stored to provide the Service. We do not access your content data except as necessary to provide support or as required by law. Legal basis: Contract performance (GDPR Art. 6(1)(b)).

3.4 Cookies and Tracking Technologies

The website uses cookies, web beacons, and similar technologies for analytics, functionality, and security. For full details, please see our Cookie Policy. You will be presented with clear options to accept or decline cookies upon your first visit.

4. How We Use Your Information

• •Provide, maintain, and improve the Service
• •Process transactions and send billing communications
• •Send technical notices, security alerts, and support messages
• •Respond to your comments, questions, and customer service requests
• •Monitor and analyze trends, usage, and activities
• •Detect, investigate, and prevent fraudulent or unauthorized activity
• •With your explicit consent, send newsletters or marketing communications

5. Legal Basis for Processing (GDPR Art. 6)

We process personal data on the following legal bases:

• •Consent (Art. 6(1)(a)): For marketing cookies, newsletters, and non-essential data processing. You may withdraw consent at any time.
• •Contract (Art. 6(1)(b)): To provide the Service, process payments, and fulfill our obligations.
• •Legal obligation (Art. 6(1)(c)): To comply with tax, accounting, and regulatory requirements.
• •Legitimate interest (Art. 6(1)(f)): For fraud prevention, security, analytics, and service improvement.

6. Data Sharing & Third Parties

We do not sell your personal information. We may share data with trusted third-party service providers who assist us in operating the Service, including:

• •Payment processors: For processing payments securely (e.g., Stripe)
• •Cloud hosting providers: For data hosting and infrastructure
• •Analytics providers: Anonymized usage data for service improvement
• •AI/ML services: For video generation and processing functionality

All third-party processors are contractually bound to protect your data and are prohibited from using it for any other purpose.

7. International Data Transfers

Your data may be transferred to and processed in countries outside the EU/EEA. Where such transfers occur, we ensure adequate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or reliance on the EU-US Data Privacy Framework for transfers to certified entities in the United States.

8. Data Security

We implement robust administrative, technical, and physical safeguards to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (SSL/TLS) and at rest, strict access controls, and regular security reviews. However, no online system is entirely secure, and we cannot guarantee absolute security of your data.

9. Data Retention

We retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected. Account data is retained as long as your account is active. Upon account deletion, personal data is removed within 30 days, with backups purged within 90 days, unless legally required to retain it for longer (e.g., for tax, accounting, or audit purposes). You can request deletion of your data at any time by contacting support@zyphra.app.

10. Your Rights Under GDPR/DSGVO

If you are in the EU/EEA, you have the following rights under the GDPR:

• •Right of access (Art. 15): Request what personal data we process about you
• •Right to rectification (Art. 16): Correct inaccurate personal data
• •Right to erasure (Art. 17): Request deletion of your personal data ("right to be forgotten")
• •Right to restrict processing (Art. 18): Limit how we use your data
• •Right to data portability (Art. 20): Receive your data in a structured, machine-readable format
• •Right to object (Art. 21): Object to processing based on legitimate interests
• •Right to withdraw consent (Art. 7(3)): Withdraw consent at any time without affecting prior processing
• •Right to lodge a complaint: File a complaint with your local data protection supervisory authority

11. Your Rights Under CCPA

If you are a California resident, you additionally have the right to:

• •Know what personal information is collected and how it is used
• •Request deletion of personal information
• •Opt out of the sale or sharing of personal information
• •Non-discrimination for exercising your privacy rights

We do not sell personal information. To exercise CCPA rights, email support@zyphra.app.

12. Cookies & Tracking Technologies

We use cookies and similar technologies to improve your experience, analyze usage patterns, and personalize content. You can manage your cookie preferences through our cookie consent banner or by visiting our Cookie Policy page.

13. Third-Party Links

The Service may contain links to third-party websites or services that are not operated by us. We strongly advise you to review the privacy policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

14. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children under 18. If we become aware that we have inadvertently collected personal data from a child under 18, we will take steps to delete that information as quickly as possible. If you believe we might have any information from or about a child under 18, please contact us at support@zyphra.app.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website and, where appropriate, by sending you an email notification. We encourage you to review this Privacy Policy periodically.

16. Contact Us

For privacy-related inquiries, to exercise your rights, or to lodge a complaint, contact us at: