Draft for legal review. This notice describes how Ysra handles personal information when you visit our website or use the Ysra AI agent and related services (the “Services”). It must be checked against Ysra’s actual legal entity, infrastructure, AI providers, and retention practices before being treated as final.
1. Who is responsible
The service provider is Ysra. For privacy questions or requests, contact contact@ysra.ai. “Ysra,” “we,” and “us” refer to the provider of the Services.
2. Information we handle
Depending on how you use the Services, this may include:
- Account and contact details: name, email address, workspace and organization details, and sign-in or account settings.
- Your instructions and work content: prompts, conversations, uploaded material, code, files, task requirements, and the agent’s plans, outputs, and evidence.
- Connected service data: information from repositories and services such as GitHub, Slack, or Jira that you or your workspace authorize and select, plus integration identifiers and authorization tokens needed to connect them.
- Usage and operational information: feature use, session and budget information, model-call and run records, errors, security events, and support correspondence.
- Technical information: information made available by your browser, device, and network when you access the website or Services, such as IP address, timestamps, and diagnostic data collected by service infrastructure.
Please do not submit passwords, access keys, or sensitive personal information unless the relevant feature requires it and you are authorized to do so.
3. How we use information
We use information to provide and operate the Services; authenticate users and manage workspaces; execute the tasks you request; retrieve information from sources you authorize; produce and preserve outputs and evidence; apply budgets, permissions, and approval controls; provide support; secure, troubleshoot, and maintain the Services; prevent abuse; and meet legal obligations. We may also use aggregated or de-identified operational information to understand and improve service performance.
4. AI processing
To answer a request or perform a task, Ysra may process your prompts and relevant work content with AI models and other service providers. This can include content from repositories, files, or connected sources that you have authorized for that task. The models can produce incomplete or incorrect results. Review outputs and evidence before relying on them or taking action.
Third-party providers process information under the terms and instructions applicable to the Services. The specific provider, processing location, and provider-level retention may depend on the feature and configuration. Do not submit information unless you have the rights and authority to let Ysra and the relevant providers process it for your requested task.
5. When information is shared
We may make information available to: (a) infrastructure, hosting, storage, security, support, and AI providers that help us operate the Services; (b) integrations you connect, when you ask Ysra to read from or take an approved action in those services; (c) workspace administrators and members according to workspace permissions; and (d) authorities or other parties when required by law or necessary to protect rights, safety, and the Services. We do not sell personal information.
6. Customer and workspace content
If you use Ysra on behalf of an organization, that organization may control the work content and connected-source information processed in its workspace. In that case, Ysra may process it on the organization’s instructions to provide the Services, while acting as a separate controller for account administration, security, and service operations where applicable. The organization is responsible for giving appropriate notices and obtaining permissions for the information it connects or submits.
7. Retention
We retain information for as long as needed to provide the Services and for legitimate operational purposes such as security, resolving disputes, and meeting legal obligations. Retention can vary by information type, workspace settings, and provider. Deleted information may remain temporarily in backups or records that must be retained for security or legal reasons. Contact contact@ysra.ai to ask about a particular account or data set.
8. International processing
Ysra and its service providers may process information in countries other than the country where you live. Where applicable law requires safeguards for an international transfer, Ysra will use a legally recognized transfer mechanism.
9. Security
We use technical and organizational safeguards intended to protect information. No online service can guarantee absolute security. You are responsible for protecting your credentials, choosing appropriate permissions, and reviewing the actions and outputs you authorize.
10. Your choices and rights
Depending on the law that applies, you may have rights to request access to, correction or deletion of, or a copy of your personal information; to object to or restrict certain processing; or to withdraw consent where processing relies on consent. You may also have the right to complain to a data protection authority. Contact contact@ysra.ai to make a request. We may need to verify your identity and may direct workspace-content requests to the organization that controls the workspace.
11. Cookies and website analytics
The marketing website does not currently install an analytics provider by default. It may use cookies or similar technologies needed for site operation, security, or features you choose to use. Our website code can emit a limited set of non-content analytics events for an approved integration; it does not include prompt text, repository names, or source content in those events. If this changes, this notice should be updated before the change is deployed.
12. Children
The Services are designed for business use and are not intended for children under 18. We do not knowingly seek to collect personal information from children.
13. Changes and contact
We may update this notice as the Services or applicable requirements change. The version and effective date at the top identify the current text. Questions or requests: Ysra, contact@ysra.ai.