Privacy policy

Introduction

Nyria LLC ("Nyria," "we," "us," or "our") respects your privacy. This policy describes what is collected, how it is used, when it is shared, and how it is protected when you use the trade automation platform and related services (the "platform").

By using the platform, you consent to the practices described here. If you do not agree, do not use the platform.

1. What we collect

2. How your data is used

The data collected is used to:

• Run the platform: process alerts, execute trades, and manage your account.
• Bill: handle subscriptions and payments.
• Communicate: service notifications, security alerts, support responses, and important updates.
• Improve: analyze usage, diagnose issues, ship new features.
• Protect: detect and prevent fraud, abuse, and security threats.
• Comply: meet applicable laws, regulations, and legal processes.
• Analyze: generate aggregated, anonymized usage statistics.
• Market (opt-in): send promotional communications you can opt out of at any time.

3. Sharing and disclosure

Nyria does not sell your personal information. We may share it in the following circumstances:

4. Security

TLS 1.2+ in transit; at-rest credential hardening in progress. Specifically:

• In transit: TLS 1.2 or higher between your browser, our services, and connected brokers.
• At rest: sensitive credentials (broker OAuth tokens, API keys) live in access-controlled databases. At-rest encryption and key rotation are in progress; until they ship, we do not represent those credentials as encrypted at rest.
• Access controls: least-privilege internal access with multi-factor authentication.
• Security reviews: regular assessments, penetration testing, and vulnerability scanning.
• Incident response: documented procedures for detection, response, and reporting.
• Employee training: recurring security training for all personnel with data access.
• Vendor management: security review of third parties that touch sensitive data.

No system on the public internet is 100% secure. We use commercially reasonable measures to protect your information, but cannot guarantee absolute security. You are responsible for keeping your account credentials safe.

4B. Breach notification

If a security breach affects your personal information, Nyria will:

• Notify affected users within 72 hours of discovery (or as required by applicable law).
• Describe the nature of the breach and the types of data affected.
• Explain steps taken to address it and prevent recurrence.
• Provide guidance on actions you can take to protect yourself.
• Notify relevant regulators as required by law.

If you believe your account is compromised, immediately: (1) change your Nyria password, (2) revoke broker authorizations from both Nyria and your broker, (3) review your broker account for unauthorized activity, and (4) email security@nyria.io.

5. Retention

Personal information is retained while your account is active or as needed to provide the service. Some categories are kept longer when required by law or for legitimate business purposes:

• Transaction records and trading history (compliance and audit).
• Communications and support tickets (service improvement).
• Anonymized or aggregated data (indefinitely, for analytics).
• Data needed to resolve disputes or enforce agreements.

After account deletion, backups may persist for a reasonable period; anonymized data may be kept indefinitely.

6. Your rights and choices

Depending on your location, you may have the following rights:

To exercise these rights, email privacy@nyria.io. Identity verification may be required before a request is processed.

7. California privacy rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the CCPA (as amended by the CPRA):

• Right to know: request the categories and specific pieces of personal information collected, used, and disclosed.
• Right to delete: request deletion, subject to certain exceptions.
• Right to correct: request correction of inaccurate personal information.
• Right to opt out of sale or sharing: Nyria does not sell personal information or share it for cross-context behavioral advertising. If that changes, an opt-out will be provided.
• Right to limit sensitive personal information: limit certain uses of sensitive personal information.
• Right to non-discrimination: no penalty for exercising your privacy rights.

To submit a CCPA/CPRA request, email privacy@nyria.io. Identity verification is required before processing. You may designate an authorized agent to act on your behalf.

7A. Other state privacy rights

8. International data transfers

Nyria is based in the United States. If you access the platform from outside the U.S., your information may be transferred to, stored, and processed in the U.S. or other countries where our service providers operate.

Those countries may have data protection laws that differ from yours. By using the platform, you consent to the transfer.

Where required by law, appropriate safeguards are applied to international transfers, such as Standard Contractual Clauses approved by the European Commission.

9. European privacy rights (GDPR)

If you are in the EEA, United Kingdom, or Switzerland, you have additional rights under the GDPR:

• Legal basis: processing relies on contract performance, legitimate interests, consent, or legal obligations.
• Right to object: object to processing based on legitimate interests.
• Right to restrict: request restriction of processing in certain cases.
• Right to complain: file a complaint with your local data protection authority.

For GDPR inquiries, email the Data Protection Officer at dpo@nyria.io.

10. Cookies and tracking

Cookies and similar technologies are used to operate the platform, analyze usage, and remember preferences. Full details live in the cookie policy.

Categories used:

• Essential: required for platform operation, authentication, and security.
• Analytics: usage patterns and platform improvement.
• Preference: remember settings and preferences.

11. Children's privacy

The platform is not intended for users under 18. We do not knowingly collect personal information from anyone under 18. If we learn we have, we will delete it. If you believe a child under 18 has provided data to us, email privacy@nyria.io.

12. Third-party links and services

The platform may link to third-party sites and services. Nyria is not responsible for their privacy practices. Review their policies before you use them.

13. Changes to this policy

This policy may change to reflect new practices, technology, legal requirements, or other factors. When changes are material, we will:

• Update the "Last updated" date at the top of this page.
• Notify you by email or prominent notice on the platform.
• Provide a summary of key changes where appropriate.

Continued use of the platform after changes means you accept the updated policy.