Effective Date: April 30, 2026
Cyphir is operated by Veridian Software LLC, a Texas limited liability company. This policy explains what data we collect, why we collect it, and how we protect it.
Account information. When you register, we collect your email address, display name, and a bcrypt-hashed version of your password. We never store your password in plain text.
Subscription and billing. Your subscription status, trial end date, and billing history are tracked by us and by Stripe, our payment processor. We never see or store your raw card number. Stripe handles all payment data under their own PCI-compliant infrastructure.
Session data. When you use Cyphir to control AI coding agents on your computer, the messages exchanged between your phone and your computer pass through our relay server. We store session history (messages and metadata) to enable the session history and search features.
Machine data. We store the name, fingerprint, and last-active timestamp of each computer you connect to Cyphir so we can show you your multi-machine dashboard.
Push notification tokens. If you enable push notifications, we store your device's push token to deliver session alerts and approval prompts to your phone.
Security and access logs. We log IP addresses, login timestamps, and authentication events to detect unauthorized access, rate-limit abuse, and enforce security policies.
We do not sell your data. We do not use your data for advertising.
We retain your account data and session history, including the content of the messages in each session, for as long as your account is active. We do not age session history out on a timer: deleting your account is what removes it.
You can delete your account at any time from the Settings tab in the Cyphir app, using Delete Account. That takes effect immediately and removes your personal data, session history and message content, machine records, and push tokens, and cancels any active subscription. If you would rather ask us in writing, email legal@veridiansoftware.net with the subject line "Delete My Account" and we will process it within 30 days. Stripe retains billing records in accordance with their own retention policies and applicable law.
All data in transit is encrypted via TLS. Passwords are hashed using bcrypt before storage. Authentication tokens are short-lived JWTs with a token version invalidation system, meaning signing out immediately revokes all active sessions. Machine connections are authenticated before being granted relay access.
No system is perfectly secure. If you believe you have found a security vulnerability in Cyphir, please contact us at security@veridiansoftware.net.
Cyphir is for adults. You must be at least 18 years of age to create an account, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us with personal information, contact us and we will delete it promptly.
You may access, correct, or delete your personal data at any time. To delete your account and its associated data, use the Delete Account option in the Settings tab of the Cyphir app, or email legal@veridiansoftware.net and we will process the request within 30 days. For other requests, contact us at the address below.
If you are located in the European Economic Area or the United Kingdom, you may have additional rights under the GDPR or UK GDPR, including the right to data portability and the right to lodge a complaint with a supervisory authority.
We may update this policy from time to time. We will notify you of material changes by email or through the app. The effective date at the top of this page reflects the most recent revision.
Veridian Software LLC
Texas, United States
privacy@veridiansoftware.net