Privacy Policy - Wyre Technology

1. What We Collect

We collect the following information:

Account information: Your name and email address, provided when you sign in via Auth0.
API credentials: Third-party platform credentials (API keys, tokens) you submit to connect your MSP tools. These are encrypted at rest and never stored in plaintext.
Usage data: Audit logs of MCP tool calls made through the Service, including timestamps, vendor, and tool name. These logs are associated with your account and are accessible to you.
Waitlist data: If you signed up for the waitlist, we stored your email address and optionally your name.

2. How We Use Your Data

To authenticate you and operate your account.
To proxy your requests to connected MSP platforms using your stored credentials.
To provide audit logs for your own compliance and security monitoring.
To send transactional emails (account setup, service notices). We do not send marketing email without your consent.

3. How We Protect Your Data

All API credentials are encrypted at rest using AES-256 encryption with per-user key isolation.
All data is transmitted over TLS.
Credentials are only decrypted in memory, for the duration of a proxied request.
Our infrastructure runs on Microsoft Azure with access restricted to Wyre Technology staff.

4. Data Sharing

We do not sell your data. We do not share your credentials or personal information with third parties except:

The third-party MSP platforms you explicitly connect (your credentials are passed to their APIs on your behalf).
Auth0, our identity provider, which processes your authentication.
Stripe, our payment processor, if you subscribe to a paid plan.
As required by law.

5. Data Retention

Your credentials and account data are retained while your account is active. Audit logs are retained for 90 days. You may request deletion of your data at any time by contacting us — we will process deletion within 30 days.

6. Your Rights

You have the right to access, correct, or delete your personal data at any time. You can remove connected credentials directly within the Service. For account deletion or data export requests, contact us via Discord or email.

7. Cookies

The Service uses a session cookie to maintain your authenticated session. No third-party tracking or advertising cookies are used.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email. Continued use of the Service after changes constitutes acceptance.

9. Contact

Questions or requests regarding your data? Find us on Discord or reply to any email from us.