Skip to main content
PYRAMYD

Legal

Privacy Policy

Last Updated: June 30, 2026

PYRAMYD Inc. (“PYRAMYD”, “us”, “we”, or “our”) operates the website located at https://pyramyd.ai and provides associated services, including our Sourcing Solution and other offerings (collectively, the “Service”). This Privacy Policy explains our policies regarding the collection, use, and disclosure of information we receive through the Service. By using the Service, you agree to the terms of this Privacy Policy and our Terms and Conditions. Unless otherwise defined herein, terms used in this Privacy Policy have the same meanings as in our Terms and Conditions.

1. About This Policy

We use your information to provide and improve the Service. By using the Service, you consent to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.

Data controller & privacy contact. The controller responsible for your Personal Information is PYRAMYD, Inc. (PO Box 114, Orinda, CA 94563, USA). For any privacy or data-protection question, or to exercise your rights, contact our Data Protection contact at privacy@pyramyd.ai. A formal statutory Data Protection Officer is not required for an organization of our size; this address reaches the person responsible for privacy.

2. Types of Data Collected

Personal Information

We may ask you to provide certain personally identifiable information that can be used to contact or identify you (“Personal Information”). Personal Information may include, but is not limited to:

  • Email address
  • First and last name
  • Phone number
  • Job title and employer
  • Cookies and Usage Data

Usage Data

We may also collect information on how the Service is accessed and used (“Usage Data”). This Usage Data may include your computer's Internet Protocol (IP) address, browser type, browser version, the pages of our Service you visit, the time and date of your visit, the time spent on those pages, device identifiers, diagnostic data, and other similar information.

Tracking & Cookies Data

We use cookies and similar tracking technologies to track the activity on our Service and store certain information. Cookies are small files with a unique identifier sent to your browser and stored on your device. Other tracking technologies like beacons, tags, and scripts may also be used to analyze and improve the Service.

  • Session Cookies: Used to operate our Service.
  • Preference Cookies: Used to remember your preferences.
  • Security Cookies: Used for security purposes.

You can instruct your browser to refuse cookies or indicate when a cookie is being sent. However, if you do not accept cookies, some portions of our Service may be limited.

Non-essential cookies (functional, analytics, and marketing) load only after you opt in. For the specific cookies we set and how to manage or withdraw consent at any time, see our Cookie Policy and the “Cookie Preferences” link in the site footer.

3. Use of Data

PYRAMYD uses the collected data for various purposes, including:

  • To provide and maintain the Service
  • To notify you about changes to our Service
  • To allow you to participate in interactive features, when you choose to do so
  • To provide customer care and support
  • To analyze and improve the Service's performance and user experience
  • To monitor usage of the Service
  • To detect, prevent, and address technical issues or potential fraud

We may also aggregate and anonymize Personal Information and Usage Data to develop statistical analysis, product improvement insights, and for other lawful business purposes.

Lawful Bases for Processing (GDPR Article 6)

Where the GDPR or UK GDPR applies, we rely on the following lawful bases:

  • Contract: to provide the Service you or your organization requested — for example, account and identity data.
  • Legitimate interests: to secure, operate, and improve the Service, where those interests are not overridden by your rights — for example, usage and diagnostic data.
  • Consent: for non-essential cookies, analytics, and marketing communications, which you may withdraw at any time.
  • Legal obligation: where processing is necessary to comply with applicable law.

Artificial Intelligence and Large Language Models

Certain features of our Service use artificial intelligence and large language models (LLMs) provided by third parties — currently OpenAI, Azure OpenAI, and Anthropic (see our Sub-processors). When you use AI-powered features, relevant data is processed by these providers to generate responses or insights. Consistent with an AI-management approach aligned to ISO/IEC 42001, our safeguards include:

  • No training on your data. Our AI providers process data solely to provide the requested functionality and do not use it to train their models.
  • Data minimization. We transmit only the personal data necessary to fulfill your request, and data from third-party integrations (such as Slack, Microsoft, or Google) is processed only to deliver the features you request.
  • Human oversight. AI outputs are advisory and citation-grounded; a person remains responsible for decisions made using them.
  • No solely-automated decisions with legal effect. We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing (GDPR Article 22).
  • Transparency. Where you are interacting with an AI feature, we make that clear in the interface.

4. Transfer of Data

Your information, including Personal Information, may be stored and processed on servers located outside of your state, province, or country, and therefore may be subject to different data protection laws than those in your jurisdiction.

For users in the European Economic Area (EEA), United Kingdom, or Switzerland: When we transfer your Personal Information outside of these regions, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Transfers to countries recognized as providing adequate data protection
  • Contractual obligations with our service providers requiring equivalent data protection standards

We will take all reasonable steps necessary to ensure your data is treated securely and in accordance with this Privacy Policy. No transfer of your Personal Information will occur unless adequate controls are in place to protect your information.

5. Disclosure of Data

PYRAMYD may disclose your Personal Information if required by law or in good faith belief that such action is necessary to:

  • Comply with a legal obligation
  • Protect and defend the rights or property of PYRAMYD
  • Prevent or investigate possible wrongdoing related to the Service
  • Protect the personal safety of Service users or the public
  • Protect against legal liability

6. Data Retention

We retain your Personal Information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

  • Active Accounts: We retain your Personal Information for the duration of your account and use of the Service.
  • Terminated Accounts: Following account termination or deletion request, we will delete or anonymize your Personal Information within 30 days, except where retention is required for legal, regulatory, or legitimate business purposes (such as resolving disputes or enforcing agreements).
  • Third-Party Integration Data: Data synced from third-party services (such as Slack, Google, or Microsoft) is retained only while the integration is active. Upon disconnection of an integration, associated data is deleted within 30 days.
  • Aggregated Data: Anonymized and aggregated data that does not identify any individual may be retained indefinitely for analytics and product improvement purposes.

You may request deletion of your Personal Information at any time by contacting us at privacy@pyramyd.ai.

7. Security of Data

We care about the security of your data. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee absolute security. Transmission over the internet and electronic storage methods carry inherent risks.

8. Service Providers

We may employ third-party companies and individuals to:

  • Facilitate our Service
  • Provide the Service on our behalf
  • Perform Service-related functions
  • Assist us in analyzing how the Service is used

These third parties have access to your Personal Information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

We use the third-party sub-processors listed at pyramyd.ai/subprocessors, each bound by a data-processing agreement (DPA); we will give notice of material changes to that list.

9. Analytics and Third-Party Tools

We may use third-party service providers to monitor and analyze the use of our Service, including but not limited to tools like Google Analytics or similar platforms. These service providers track and report on website traffic to help us understand usage patterns and improve our Service.

10. Links to Other Sites

Our Service may contain links to other websites not operated by us. If you click a third-party link, you will be directed to that third party's site. We strongly advise reviewing the privacy policies of any such sites. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of third-party sites or services.

11. Children's Privacy

Our Service is not directed to anyone under the age of 18. We do not knowingly collect Personal Information from children under 18. If you are a parent or guardian and believe your child has provided Personal Information, please contact us. If we discover Personal Information of a child without parental consent, we will delete it promptly.

12. International Users and Data Processing

If you are located outside of the United States or Canada and choose to provide information to us, please note that we may transfer the data, including Personal Information, to the U.S. and/or Canada and process it there. Your submission of such information represents your agreement to that transfer.

For Users in the European Economic Area (EEA), United Kingdom, and Switzerland

If you are located in the EEA, UK, or Switzerland, you have certain rights under the General Data Protection Regulation (GDPR) and similar laws, including:

  • Right of Access: Request a copy of the Personal Information we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete Personal Information.
  • Right to Erasure: Request deletion of your Personal Information, subject to legal retention requirements.
  • Right to Restrict Processing: Request that we limit how we use your Personal Information.
  • Right to Data Portability: Request a copy of your data in a structured, machine-readable format.
  • Right to Object: Object to processing of your Personal Information for certain purposes.
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
  • Right to Lodge a Complaint: You may lodge a complaint with your local data-protection supervisory authority.

To exercise these rights, please contact us at privacy@pyramyd.ai. We will respond to your request within 30 days.

13. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with additional rights.

Categories of Personal Information We Collect

In the preceding 12 months, we may have collected the following categories of personal information:

  • Identifiers — name, email address, phone number, IP address.
  • Commercial / professional information — job title and employer.
  • Internet or network activity — usage, device, and diagnostic data.
  • Inferences — drawn from the above to provide and improve the Service.

We collect this information directly from you, automatically through your use of the Service, and from our service providers. We disclose it for the business purposes described in this Policy to the service providers and sub-processors listed at pyramyd.ai/subprocessors.

Sale or Sharing of Personal Information

We do not sell your personal information for money. We may “share” personal information for cross-context behavioral advertising (for example, marketing cookies). You can opt out of this sharing at any time using the “Do Not Sell or Share My Personal Information” and “Cookie Preferences” links in our site footer. We also honor the Global Privacy Control (GPC) browser signal as a valid opt-out of sharing. We do not knowingly sell or share the personal information of consumers under 16.

Your California Rights

  • Right to know / access the personal information we collect, use, and disclose.
  • Right to delete personal information, subject to legal exceptions.
  • Right to correct inaccurate personal information.
  • Right to opt out of the sale or sharing of personal information.
  • Right to limit the use and disclosure of sensitive personal information.
  • Right to non-discrimination for exercising your rights.

To exercise these rights, contact privacy@pyramyd.ai. We will verify your identity before responding and will not discriminate against you for exercising your rights. You may use an authorized agent to submit a request on your behalf.

14. Your Choices

You may opt out of certain data processing activities, such as marketing emails, by following the unsubscribe link or contacting us at the address below. However, we may still send you administrative messages, such as changes to our policies or Service updates.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last Updated” date. Your continued use of the Service after any changes constitutes your acceptance of the revised Privacy Policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Privacy & data-protection enquiries: privacy@pyramyd.ai. General enquiries and postal address are below.