Website Privacy Notice
The essential information about data collected before you sign in to a Cayra product.
Last updated: September 8, 2026
Scope and responsible entities
This notice applies to the public pages of cayra.io, cayraai.com and erpgpt.ai. Product and account processing after sign-in is covered by the notice and agreements shown in the relevant product flow.
The responsible entity depends on the website, request and service involved.
- Cayra AI Inc. handles cayra.io and cayraai.com public-site analytics, Cloud inquiries and self-service Cloud sales. Address: 1007 N Orange St. 4th Floor Ste 1382, Wilmington, DE 19801, United States.
- CAYRA YAPAY ZEKA TEKNOLOJİLERİ ANONİM ŞİRKETİ handles erpgpt.ai public-site analytics and on-premises or enterprise inquiries. Address: Üniversiteler Mah. 1596 Cad. Teknokent Kuluçka Merkezi Binası No: 6C, İç Kapı No: 10, Çankaya / Ankara, Türkiye.
- A request may be transferred between these entities only when needed to route and answer it.
Data collected on the public websites
- Technical data such as IP address, browser and device information, requested URL, timestamp and security logs.
- Language, theme and consent preferences stored in your browser.
- Consent-based analytics identifiers and page-interaction information.
- Information you submit through a contact form, including name, email, optional phone number, selected subject and message.
- Information you send through the cayra.io live-support chat, including conversation content and any contact details or files you choose to provide.
- The public websites do not ask you to submit customer database contents. Do not place confidential, special-category or production data in a contact form or live-support chat.
Purposes and legal bases
- Operate, secure and troubleshoot the websites.
- Remember language, display and consent preferences.
- Measure website use only after the required consent.
- Route and answer contact, Cloud, on-premises, support or partnership requests.
- Meet applicable legal obligations and establish, exercise or defend legal claims.
Depending on the entity and jurisdiction, processing may rely on consent, steps requested before a contract, legitimate interests subject to balancing, or a legal obligation.
Service providers and international transfers
Cayra may use Cloudflare for delivery, security and cookie-free performance measurement, Google Analytics after consent, Resend for contact-form email delivery, and Crisp IM SAS for user-requested live support on cayra.io.
A provider may process data outside your country. Where required, the responsible Cayra entity uses the applicable contractual or statutory transfer mechanism.
Retention
- Browser preferences remain until you clear them or change your choice.
- Analytics information follows the configured provider retention period.
- Contact records are kept only for the request lifecycle, documented lead-retention period and applicable legal needs.
- Live-support conversations and related session identifiers follow the support lifecycle and the retention settings configured for the Crisp workspace.
- Security logs are retained according to documented security, operational and legal requirements.
Your rights
Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, withdraw consent and complain to a competent authority.
Requests are assessed by the Cayra entity responsible for the relevant processing.
Product and customer data
This is a public-website notice, not the complete product privacy notice or a data processing agreement.
Before a paid Cloud service is activated, the signed-in flow must provide the applicable product terms and privacy information. On-premises and enterprise data terms are documented in the signed order form and related data-processing documents.