Privacy Policy
Last updated 30 May 2026
This Privacy Policy explains how John Stark ("we", "us", "our"), operating Cypress (aicypress.xyz), collects, uses and protects your personal information. We are based in New Zealand and handle personal information in line with the Privacy Act 2020 (New Zealand). Contact us about privacy at hello@aicypress.xyz.
1. Information we collect
- Contact & account details — such as your name and email address when you contact us or purchase a product.
- Purchase information — order and transaction records. Payment card details are collected and processed directly by Stripe; we do not see or store full card numbers.
- Benchmark inputs — the brand name, competitors and keywords/prompts you ask us to track or analyse.
- LLM API keys (BYOK) — if you provide your own LLM provider API keys to use the software, they are used only to run the benchmarks you request. Keep your keys confidential; you remain responsible for them.
- Usage & technical data — basic, privacy-respecting analytics and server logs (e.g. pages visited, approximate region, browser type) to operate and improve the site.
2. How we use your information
- To provide, operate and support the software and consultancy service;
- To process payments and send order/service communications;
- To respond to your enquiries;
- To maintain security and prevent fraud or misuse;
- To meet legal and accounting obligations.
We do not sell your personal information. We only use your benchmark inputs and API keys to deliver the service you asked for.
3. Payments
Payments are handled by Stripe. Stripe processes your card data under its own privacy policy and security standards (PCI-DSS). Please review Stripe's Privacy Policy to understand how it handles your payment information.
4. Sharing & sub-processors
We share information only as needed with service providers, including:
- Stripe — payment processing;
- LLM providers (e.g. OpenAI, Anthropic, Google, Perplexity) — to run the benchmarks you request, using your prompts and keys;
- Hosting/infrastructure (e.g. our site host) — to serve the website and store data.
We may also disclose information where required by law. Some providers may process data outside New Zealand; where they do, we take reasonable steps to ensure appropriate protection.
5. Data retention
We keep personal information only as long as needed for the purposes above or as required by law (for example, transaction records for tax purposes). You may ask us to delete data we are not legally required to keep.
6. Your rights
You have the right to access and request correction or deletion of your personal information, and to ask how it is used. To exercise these rights, email hello@aicypress.xyz. We will respond within a reasonable time.
7. Cookies & analytics
The site uses only essential and basic analytics cookies/technologies needed to operate and understand usage. You can control cookies through your browser settings.
8. Security
The site is served over HTTPS and we take reasonable technical and organizational measures to protect personal information. No method of transmission or storage is completely secure, but we work to safeguard your data.
9. Changes
We may update this policy from time to time; the "Last updated" date above reflects the latest version.
10. Contact
John Stark — hello@aicypress.xyz.
This page is provided for general information and to meet payment-processor requirements; it is not legal advice.