Privacy policy

1. Who is responsible

CybrFlux makes CybrRM. For the information about the people who sign up and use CybrRM, we decide how it is used. For the customer records that you type or import into your workspace, you decide what goes in and why, and we store and process it for you to run the service. You can reach us at our support address (not set up on this site yet).

2. What we collect

• Your account: your email address, your name if you give it, your password (kept in scrambled form by our sign-in service), and your two-step sign-in settings. Recovery codes are stored only as hashes.
• Your workspace: the records, notes, tasks, files, fields and settings you and your team put in, and the timeline of what changed and who did it. This can include personal information about your own customers.
• What you choose before signing up: the plan and industry template you picked on this website, so we can preselect them for you.
• Billing: which plan and add-ons a workspace has, its status, and its dates. Card details go straight to Stripe. We do not see or store your card number.
• Questions to Cybie: what you ask Cybie and the records it looks up to answer, kept in your private chats so you can come back to them.
• Messages to us: what you send us when you email for support.
• Technical details: like any website, our hosting provider handles your device’s network address and the details of each request in order to deliver pages and keep the service working.

3. Why we use it

• To run the service you asked for: sign you in, show you your workspace, send invitations, and keep your records safe and apart from other workspaces.
• To take payment and manage plans, trials and cancellations.
• To send you messages about your account, such as invitations, sign-in links, and billing notices (a trial ending, a payment failing, a subscription starting or ending).
• To answer your emails and fix problems.
• To keep the service secure and to prevent abuse.
• To meet legal duties.

We do not sell your personal information, and we do not use the records in your workspace for advertising.

4. Who else handles it

These outside services handle personal information on our behalf so CybrRM can run:

• Supabase: Our database and sign-in. It stores your workspace's records and files and signs people in.
• Vercel: Runs the app and serves this website.
• Stripe: Takes card payments and keeps card details. CybrRM never sees your card number.
• Resend: Sends the emails CybrRM sends, such as invitations, billing notices and invoices you email from Books.

Cybie. When you ask Cybie something, your question and the records Cybie looks up to answer it are sent to the outside service that powers Cybie, and its reply comes back. Nothing it suggests is saved until you approve it. [to be decided: name the company that powers Cybie and add it to the list above, which is kept in one place in the code]

We may also share information when the law requires it, or to protect people from harm.

5. Where it is kept

Your information is stored and processed by the services above, in the places they run. [to be decided: the region where the database and the app are hosted, and what that means for people in other countries]

6. How long we keep it

• We keep your account and workspace while the workspace exists.
• When a trial ends or a subscription lapses, the workspace becomes read-only. Your records are not deleted because of billing.
• Items you move to the trash stay there so you can restore them; the timeline entries about changes cannot be edited.
• After you ask us to remove a workspace, or after it has been inactive for a long time: [to be decided: how long we keep data after a workspace is closed, and how long billing records are kept].

7. Cookies and similar tools

We use the small files described on the cookie notice. Nothing that measures how people use the website or app (analytics) is loaded unless you say yes to it first.

8. Your choices and rights

Depending on where you live, you may have rights over your personal information, such as asking to see it, correct it, take a copy, limit how it is used, object to its use, or have it deleted. To use any of these, email our support address (not set up on this site yet) from the address on your account. We may need to check it is you. You can already do some of this yourself: edit your profile, export your records as CSV, move records to the trash, and leave a workspace.

If you are a customer of one of our customers (your information is in someone else’s workspace), ask that business first, because it decides what goes into its records. If we cannot sort it out, you can also contact the data protection authority where you live.

9. Security

Each workspace’s data is kept apart by rules in the database itself. Sign-in uses two-step verification. There is more on the security page. No service can be made perfectly safe, so we cannot promise that nothing will ever go wrong. If we learn of a problem that puts your information at risk, we will tell the people affected as the law requires.

10. Children

CybrRM is for businesses. It is not meant for children, and we do not knowingly collect their information.

11. The free trial and your data

A trial lasts 14 days and needs no card. We collect no payment details for it.

12. Changes to this policy

If we change how we handle personal information, we will update this page and its date, and tell you about important changes before they apply.

13. Contact

CybrFlux, our support address (not set up on this site yet).