Privacy Policy

This Privacy Policy explains how Alyria, LLC (“Alyria,” “we,” “us”) handles information collected through our marketing website at alyria.ai(the “Site”). It covers the public marketing site only. Your organization’s use of the Alyria platform (Constellation, Beacon, Umbra, Lyra, Spectra, and the Observatory console) is governed by a separate Master Services Agreement (MSA) and Data Processing Addendum, not this policy. See Terms of Service.

The short version

• We collect what you send us through the contact form, plus privacy-first, aggregate analytics about how the Site is used.
• Our analytics use no session recording and no autocapture of arbitrary page content, and are proxied first-party.
• We set essential cookies only by default. We do not sell your personal data.
• The Alyria product is engineered so fleet data is encrypted under keys you hold and can revoke, a custody arrangement you can verify in your own logs. That stance is described below, and it is distinct from this marketing site.

Information we collect

Information you give us

When you submit the contact or “book a demo” form, we collect the fields you provide: your name, email address, company, team size, area of interest, and message. We use this solely to respond to your inquiry, evaluate fit, and follow up about Alyria.

Information collected automatically

To keep our Site secure and to understand aggregate usage, we and our analytics provider process limited technical data: your IP address, browser user-agent, language, referring page, and coarse device characteristics (for example screen size, timezone, platform, and hardware concurrency). When you submit a form, a snapshot of this technical context is attached to your submission to help us detect spam and abuse.

What we do not collect

We do not run session replay, we do not autocapture your clicks and keystrokes across the Site, and we do not build advertising profiles or sell personal data. This marketing site is not where you enter your organization’s agent secrets; those never touch it.

Analytics

We use PostHog for product analytics, configured privacy-first:

• No session recording. Session replay is disabled.
• No autocapture. We instrument only a small number of explicit events (for example, a page view or a contact-form submission) rather than capturing every DOM interaction.
• First-party proxied. Analytics requests are routed through a first-party reverse proxy on our own domain, so no third-party analytics host is contacted directly from your browser.

Analytics data is used in aggregate to improve the Site and understand demand. It is not used to make decisions that produce legal or similarly significant effects about you.

Cookies and consent

By default we set only essential cookies and local storage: the items required for the Site to function (for example, remembering your light/dark theme preference) and for privacy-first analytics attribution. We do not use third-party advertising or cross-site tracking cookies. You can block or clear cookies in your browser at any time; the Site remains usable without them, though your theme preference will not persist.

The product’s data-custody stance

Alyria’s trust claim, “under your keys,” is a statement about the product architecture, and it is worth being precise about the boundary:

• In the Alyria platform, fleet data and the audit chain are encrypted under a key that lives in your own KMS. You can revoke that key at any time and verify in your own CloudTrail that our access ended. Static blobs stored with us are opaque to us at rest. Client-held keys, where we never hold the key at all, are a roadmap item that will ship only behind an externally audited protocol; until then, we describe them as future work, not a present property.
• This marketing site is an ordinary public website. Data you choose to send us here, such as a contact message, is readable by us, because that is how we reply to you. Do not send secrets, credentials, or confidential material through the contact form.

How we use information

• To respond to your inquiries and provide the information or demo you requested.
• To operate, secure, and improve the Site and defend against spam and abuse.
• To communicate with you about Alyria where you have asked us to or where we have a legitimate interest, consistent with applicable law.

Sharing

We do not sell your personal data. We share it only with service providers who help us run the Site and communicate with you, such as our hosting, storage, email, and privacy-first analytics providers, under contracts that limit their use of it to providing services to us. We may also disclose information where required by law or to protect our rights, users, and the public.

Data retention

We keep contact-form submissions for as long as needed to follow up on your inquiry and for a reasonable period afterward for our records, then delete or anonymize them. Aggregate analytics are retained on a rolling basis. You can ask us to delete your inquiry at any time using the contact details below.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, email hello@alyria.ai. We will respond within the timeframe required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

Security

We protect information collected through the Site with appropriate technical and organizational measures. To report a vulnerability, see our security.txt or email security@alyria.ai.

Children

The Site is intended for businesses and is not directed to children. We do not knowingly collect personal data from anyone under 16.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “last updated” date above. Material changes will be reflected on this page.

Contact

Questions about this policy or your data? Email hello@alyria.ai. Alyria, LLC.