Privacy Policy

Autorys LLC, a Wyoming Limited Liability Company with its principal office at 30 N Gould St, Ste N, Sheridan, WY 82801, United States (“Autorys”, “we”, “our”, or “us”), is committed to respecting your privacy and protecting your personal data across our digital platforms, domains (including autorys.com, autorys.online, autorys.net, and autorys.info), multi-tenant CRM systems, artificial intelligence services, cloud infrastructure, and domain management solutions.

This Privacy Policy explains how we collect, process, disclose, and safeguard personal information in accordance with applicable United States privacy laws and international data protection standards, including the European Union and United Kingdom General Data Protection Regulation (GDPR) and the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA / CPRA).

1. Information We Collect

1.1 Information You Provide Directly

• Account and Contact Details: Full name, business title, corporate email address, telephone numbers, and billing addresses.
• Commercial & Account Data: Service subscription records, invoices, payment transaction references, and support history.
• Customer Content: Text, files, audio, communications, contacts, and materials submitted to our CRM, AI conversational agents, or custom web portals.
• Domain Registration Data: Registrant, administrative, and technical contact details provided when purchasing or transferring domain names.

1.2 Automatically Collected Technical Data

When accessing our platforms, we automatically log technical diagnostic data including IP addresses, browser types, operating system versions, access timestamps, HTTP referrers, and system performance metrics essential for network security and intrusion prevention.

2. How We Use Your Information

We process personal information exclusively for the following operational purposes:

• To provision, maintain, and secure customer accounts within our multi-tenant CRM and cloud platforms;
• To execute autonomous AI workflows, customer service bots, and intelligent messaging on behalf of Client;
• To register, renew, and manage internet domain names with accredited registries in compliance with ICANN policies;
• To process recurring subscription billing, invoices, and payment processing through secure payment gateways (Stripe);
• To detect, prevent, and mitigate unauthorized access, denial-of-service attacks, fraud, and security vulnerabilities;
• To fulfill legal, regulatory, and corporate compliance obligations under United States and international law.

3. Artificial Intelligence Processing and Non-Training Pledge

Autorys provides artificial intelligence tools, conversational workflows, and autonomous agents powered by advanced machine learning models.

• Operational Scope: Customer inputs and communications processed by AI models are utilized strictly to generate real-time responses and execute designated business workflows.
• Non-Training Pledge: Autorys LLC does NOT sell customer communications, and does NOT use private customer conversation data to train publicly accessible foundation models without affirmative written consent.
• Security: AI model communications are encrypted in transit using industry-standard TLS protocols.

4. Google API Services User Data Policy ("Limited Use")

When you choose to connect Google account services (such as Google Contacts via People API or Gmail synchronization) with your Autorys CRM workspace, the following standard applies:

We do not transfer Google user data to third parties, external ad platforms, or data brokers, and we never use Google user data for advertising purposes.

5. Messaging Integrations & Data Deletion (Meta Platforms & WhatsApp)

When operating communication services integrated with Meta Platforms (such as Facebook Messenger, Instagram Direct, and WhatsApp Business API):

• We process message content, timestamps, sender names, and platform-specific IDs strictly to deliver conversational responses on behalf of the integrated business.
• We do not utilize messaging content for third-party advertising profiling or behavioral tracking.
• Data Deletion Instructions: Users may request the deletion of conversation data at any time in accordance with our User Data Deletion Instructions or by emailing systems@autorys.com.

6. Domain Registrations and ICANN Compliance

When registering domain names through Autorys, international regulations established by the Internet Corporation for Assigned Names and Numbers (ICANN) require that registrant contact details be shared with the relevant registry operators and accredited registrars. Where permitted by applicable registry rules, privacy protection and proxy masking are applied to safeguard personal contact information from public WHOIS/RDAP directories.

7. Data Sharing and Third-Party Disclosures

Autorys LLC does not sell, rent, or monetize personal information. We disclose data solely to trusted third-party service providers under strict confidentiality and data protection agreements:

• Infrastructure & Hosting Providers: Secure data centers providing physical servers, storage, and networking;
• Payment Processors: PCI-DSS certified payment gateways (Stripe) for payment authorization and settlement;
• Communication Carriers: Telecom and messaging networks (WhatsApp API, SMS gateways) required to deliver messages;
• Legal & Regulatory Authorities: Where required by binding court orders, subpoenas, or applicable laws.

8. International Data Transfers (GDPR / UK GDPR)

Autorys LLC is headquartered in Wyoming, United States, and utilizes infrastructure located in the United States and tier-1 European data centers. If you access our Services from the European Union, European Economic Area, or United Kingdom, your personal data may be transferred to and processed in the United States. We implement appropriate technical, contractual, and organizational safeguards, including standard contractual clauses (SCCs) approved by the European Commission, to ensure adequate protection of cross-border data transfers.

9. United States State Privacy Rights (CCPA / CPRA)

Residents of California, Virginia, Colorado, and other U.S. states with comprehensive privacy laws possess specific rights:

• Right to Know & Access: The right to know the categories and specific pieces of personal information collected;
• Right to Delete: The right to request deletion of personal information, subject to statutory exemptions;
• Right to Correct: The right to request correction of inaccurate personal information;
• No Sale or Sharing: Autorys does not sell personal information or share personal information for cross-context behavioral advertising. We do not sell personal data of minors.
• Non-Discrimination: We will not discriminate against you for exercising your statutory privacy rights.

10. Data Security and Retention

We enforce rigorous security controls designed to protect personal data against accidental loss, unauthorized access, and malicious destruction:

• Encrypted network communications utilizing TLS 1.3 cryptographic protocols;
• Encrypted data storage (AES-256) for credentials, access tokens, and private configuration data;
• Strict multi-tenant logical partitioning of customer databases;
• Perimeter firewalls, intrusion prevention systems, and automated threat monitoring.

We retain personal data only for as long as necessary to provide active Services, maintain legitimate business records, and satisfy legal, statutory, and accounting retention mandates.

11. Phone Calls and Recording

We only call people who asked us to call them or who gave us their number for that purpose: for example, by messaging us on WhatsApp or through our website chat, by calling us, by signing up or leaving their details with an Autorys sales partner, or because they are already customers. We keep a record of that request (the conversation or the sign-up) together with the call.

Recording notice. At the start of every call we make, before you speak with our staff, a recorded message tells you that the call will be recorded for quality and service purposes and where to read this notice. By staying on the line you consent to the recording. If you do not want to be recorded, you may hang up and ask us to continue in writing (email or WhatsApp).

What we keep and why. The phone number, date and time, duration, the Autorys team member who called, the recording of the conversation and the record showing that you requested the call. We use it to serve you better, train our team, keep a record of what was agreed (quotes, purchases) and comply with the law. Recordings are only accessed by authorized Autorys personnel, are never sold or used to train artificial intelligence models, and are kept for up to two (2) years unless the law requires longer.

If you do not want us to call you. Tell us during the call or write to privacy@autorys.com and your number will be added to our internal do-not-call list. We also honor the U.S. National Do Not Call Registry and, in Mexico, the REPEP registry. You may request a copy of your recording or ask us to delete it, unless we are legally required to keep it.

12. Users in Mexico

If you are in Mexico, your personal data is processed under the Mexican Federal Law on the Protection of Personal Data Held by Private Parties (published March 20, 2025). You may exercise your rights of access, rectification, cancellation and opposition (ARCO) by writing to privacy@autorys.com. The competent authority in Mexico is the Ministry of Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno). When you contract through our distributor in Mexico, its own privacy notice also applies.

13. Your Privacy Rights and Contact Details

To exercise any privacy rights, submit a data subject access request (DSAR), or ask questions concerning this Privacy Policy, please contact our designated compliance office:

Autorys LLC · Privacy & Data Protection Office
30 N Gould St, Ste N
Sheridan, WY 82801, United States
Email: privacy@autorys.com
Technical Support: systems@autorys.com
Website: https://autorys.com