Privacy policy

1. Who we are

Cyrus Mission Control ("Cyrus") is a solution by Elite Digital - Sociedade Unipessoal, Lda (elitedigital.it.com), tax number (NUIT) 401326571, legal entity number (NUEL) 101614646, registered at Avenida Paulo Samuel Kankhomba, no. 179, ground floor, Bairro Polana Cimento, KaMpfumu District, Maputo City, Mozambique, represented by its managing director, Luís Miguel de França Bettencourt. Elite Digital is the controller of the data described here.

Cyrus is a team of AI agents (Coordinator, Support, Email, Development, News and Finance) that works for the owner of one or more companies. The agents read the accounts the customer connects, prepare drafts, and send nothing until a person approves it.

2. This website

The cyrusms.app website uses no cookies, no advertising and no visitor analytics. The "Request early access" form sends nothing to our servers: it opens WhatsApp (+258 84 848 5642) with a pre-filled message, and you decide whether to send it. From then on, the conversation is also subject to WhatsApp’s privacy policy.

The site is served by Cloudflare, which logs technical data for each request (IP address, browser, time) to deliver the pages and protect the site from abuse.

3. What data we keep

When a company uses Cyrus, we keep:

• Account data: name, email and, if the company gives other people access, each person’s role (owner, admin, operator, viewer).
• Content from connected accounts: the messages, emails and records the agents read to do their work (see section 4).
• The agents’ work: conversations with Cyrus, drafts, the steps each agent took, approvals, rejections and the reason given.
• Memory: preferences and facts Cyrus learns from the owner’s messages, with a note of where they came from.
• Voice: when you talk to an agent, the audio is turned into text so the agent can reply. The audio is not stored: it is deleted right after it is turned into text. Only the text of the conversation is kept.
• Technical logs: access times, errors and the audit log of who approved what.

We use this data only to provide the service to the customer who connected it: drafting replies, alerting when something fails, writing summaries and learning from that customer’s approvals. We don’t sell data and don’t use it for advertising.

4. Accounts you connect

The customer connects each account (for example Gmail, a support inbox or a code repository) one at a time, and can disconnect it at any moment in the settings.

• Everything starts read-only. When an account is connected, the agents can only read it.
• Nothing goes out without approval. A reply, email or message is sent only after a person at the company taps "Approve". After approving, there are a few seconds to undo.
• Autonomy by topic. A topic is answered without approval only after 20 drafts in a row were approved unchanged, and the customer can take that back at any time. Payments and clinical topics always stay with a person.

5. Google data (Gmail)

Cyrus accesses an account’s Gmail only if the account holder grants permission on Google’s consent screen. With that permission:

• the Email agent reads messages to summarise them, sort them and prepare replies;
• Cyrus sends an email on the holder’s behalf only after they approve that email;
• Gmail data is not used for advertising, is not sold and is not used to train AI models;
• no one at Elite Digital reads this data, except with the holder’s explicit permission to fix a problem, for security reasons, or when the law requires it.

Cyrus’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke access at any time in Cyrus’s settings or at myaccount.google.com/permissions.

6. AI models

The agents use AI models from Anthropic (Claude) to read, summarise and write. The text each task needs is sent to Anthropic while the agent works. Under Anthropic’s commercial terms, that content is not used to train its models.

7. Subprocessors

We use these companies to provide the service:

Company	Purpose	Location
Anthropic	AI models the agents use	United States
Convex	Real-time database: conversations, agents, approvals, memory	United States
Cloudflare	Hosting for this website, network and email routing	Global network
Hostinger	Server where the agents run	France (European Union)

Some of these services are outside the customer’s country. In these cases we only use providers that commit by contract to protect the data, including standard contractual clauses where they apply.

8. How long we keep data

We keep data while the customer’s account is active. When a connected account is disconnected, the agents stop reading it. When the customer closes their Cyrus account, we delete the data within 30 days, except what the law requires us to keep for longer.

9. Security

Connections to the website and the apps are encrypted (HTTPS). Access to data is limited by role, and every approval is recorded in an audit log. Cyrus does not hold any security certification yet. If you find a vulnerability, write to seguranca@cyrusms.app.

10. Your rights

At any time you can ask to:

• see the data we hold about you and get a copy;
• correct wrong data;
• delete your data;
• restrict or object to processing;
• withdraw a permission you gave, such as Gmail access.

Write to privacidade@cyrusms.app. We reply within 30 days. If you think your data was mishandled, you can also complain to the data protection authority in your country.

Cyrus is not intended for anyone under 18.

11. Changes

When we change this policy, we update the date at the top. If the change is significant, we email customers before it takes effect.

12. Contact

Privacy: privacidade@cyrusms.app
Legal: legal@cyrusms.app
Elite Digital, represented by Miguel Bettencourt.