Privacy

Version 2026-08-15. Zephyria is operated by Zia Labs.

This page explains what we collect, why, and what we do not do. We have written it so that every sentence is checkable against how the software actually behaves, rather than against what we intend to build.

What we collect when you request beta access

Only what you type into the form: your name, your email address, the products you are interested in, and — if you tell us you are requesting on behalf of an organization — your organization’s name and type, team size, an optional phone number, and your timeline. We use it to contact you about the beta and for nothing else. We do not sell personal information, and we do not share it with advertisers or data brokers.

We also record that you agreed to our Terms of Use, Privacy Policy and Demonstration disclaimer, together with the version of each document you were shown and the time you agreed. That record exists so that we can tell you later exactly what you agreed to.

We may email you about the beta, including product demonstrations and early access.

If you use the Iris demonstration

• Your speech is processed in real time to produce her reply. No audio file is written and no transcript is stored. What you say exists for the length of the conversation and no longer.
• When a demonstration ends, everything from it is deleted. No exceptions.
• No voiceprint or biometric identifier is created from a demonstration. Voice recognition is a capability for full production accounts and is not active in the demonstration. See the demonstration disclaimer.
• Speech recognition, reasoning and speech synthesis run on servers we own and operate. Your conversation is not sent to a third-party AI provider for processing.
• If you ask Iris for something that needs a live answer from the web, the search query leaves our servers to be searched. Nothing else about your conversation does.
• We keep session metadata that contains none of your words — a session identifier, start and end times, and why the session ended — to operate the service and investigate abuse.

Everything above describes the demonstration. A full production account is different, and we say so plainly rather than letting one page contradict another: on a production account Iris can keep a transcript, but only if you turn that on. It is off unless you choose it, opted-in transcripts have identifying details removed before they are stored, and you can ask us to erase them. None of that applies to the demonstration, which keeps nothing.

Voiceprints on a production account

A voiceprint is a mathematical representation of how a voice sounds, and it is biometric data. If we ever create one for you on a production account, it will only be after we have told you plainly what it is, asked you, and you have said yes. We would keep it until you ask us to delete it, and we would never begin silently. This does not happen in demonstrations.

Server logs and analytics

Our web server records requests, including IP addresses, for security and troubleshooting. We do not run analytics of any kind, we set no advertising or tracking cookies, and we do not track you across sites. If we add analytics later, they will be cookieless and will not follow you off this site.

We set two cookies, both short-lived and neither carrying personal data. The first tells the confirmation page that you have just completed the form. The second is issued only if you open the Iris demonstration: it is an opaque session pass for that conversation, scoped to the demonstration path, and it expires with the session. Neither is used for advertising, and neither follows you off this site.

Where your data is

Zephyria runs on hardware we own and operate in the United States. Beta request details are stored there. Our outbound email is sent through Microsoft 365, which means your email address and the message we send you pass through Microsoft’s infrastructure.

How long we keep it

We keep your beta request until you ask us to delete it, or until we have finished the beta programme and no longer need it. Demonstration conversations are not kept at all. Server logs are kept for a short operational period and then rotated.

Deleting your data

Email hello@zephyria.ai and we will delete your request and the contact details attached to it. One email is enough — you do not need to give a reason.

Deletion is complete: we remove the request itself and the record of any email we sent you, and we do not keep a derived token or a hashed placeholder behind it. The practical consequence is that we would not recognize you afterwards — if you later submit the form again, you would be treated as a new request.

Your rights

Depending on where you live, you may have rights to access, correct, delete or export your personal information, and to object to how we use it. We honour these requests regardless of where you live — write to us and we will action it. We will not treat you differently for exercising them.

Age

Zephyria is not intended for anyone under 16, and we do not knowingly collect information from children. If you believe a child has given us information, write to us and we will delete it.

Changes

We may update this policy. The version and date at the top identify the text in force, and the version you agreed to is recorded with your request.

Contact

Questions about this policy: hello@zephyria.ai
Security reports: security@zephyria.ai