CATO← Back to home

Privacy Policy

Last updated: July 5, 2026

This Privacy Policy describes how NYRUS AI, Corp. (“NYRUS AI,” “we,” “us,” or “our”), a Delaware corporation, collects, uses, discloses, and safeguards information in connection with CATO, our AI-powered biomedical data-analysis platform, together with our websites, applications, and related services (collectively, the “Service”). By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

We collect the following categories of information:

Information you provide

  • Account information, your name, email address, password (stored only in salted, hashed form), and, where applicable, your organization, role, and profile details.
  • Content and datasets, the files, datasets, prompts, questions, conversations, figures, and other outputs you upload to or generate within the Service (“Customer Content”).
  • Payment information, billing details processed by our payment processor, Stripe. We do not receive or store full payment-card numbers.
  • Support and communications, information you provide when you contact us, submit feedback, or request support.

Information collected automatically

  • Usage and log data, device and browser type, IP address, pages and features accessed, timestamps, and diagnostic events, collected via product analytics (e.g., PostHog) and error monitoring (e.g., Sentry).
  • Cookies and similar technologies, used to keep you signed in, remember preferences, and understand how the Service is used.

Information from integrations

  • Connected services, if you link a third-party account such as Google Drive, we access only the files and metadata you authorize. OAuth tokens are stored in encrypted form and may be revoked by you at any time.

2. How We Use Information

We use the information we collect to:

  • provide, operate, maintain, and secure the Service;
  • execute the analyses, code, literature searches, and document generation you request, and return results to you;
  • process transactions and manage subscriptions and billing;
  • provide customer support and respond to your inquiries and feedback;
  • monitor, debug, and improve the performance, reliability, and safety of the Service;
  • detect, prevent, and address fraud, abuse, security incidents, and violations of our Terms; and
  • comply with legal obligations and enforce our agreements.

3. AI Processing of Your Content

To perform analyses, your prompts and relevant portions of your Customer Content may be transmitted to and processed by third-party model providers (for example, Anthropic and Together AI) solely to generate results for you. Code is executed in isolated, ephemeral, network-restricted sandboxes. Where providers offer such controls, we configure them so that your Customer Content is not used to train their foundation models. You remain responsible for ensuring you have the right to submit any data you provide to the Service.

4. How We Disclose Information

We do not sell your personal information. We disclose information only as described below:

  • Service providers and subprocessors, cloud hosting (e.g., Google Cloud), payment processing (Stripe), analytics, error monitoring, email delivery, and AI model providers, each acting on our behalf under contractual confidentiality and security obligations.
  • Legal and safety, where required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of NYRUS AI, our users, or others.
  • Business transfers, in connection with a merger, acquisition, financing, or sale of assets, subject to this Privacy Policy.
  • With your direction or consent, for example, when you choose to share a conversation via a public link.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service, and thereafter as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. You may delete Customer Content within the Service, and you may deactivate (reversible) or delete (permanent) your account. When you delete your account, we delete or anonymize associated personal information and cancel your subscription, except where retention is required by law.

6. Security

We employ technical and organizational measures designed to protect information, including encryption in transit and at rest, access controls, and sandbox isolation for code execution (gVisor-based, non-root, network-restricted, ephemeral compute). No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your location, you may have rights to access, correct, update, port, restrict, or delete your personal information, and to object to or withdraw consent for certain processing. Residents of the European Economic Area and the United Kingdom have rights under the GDPR/UK GDPR; California residents have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them. To exercise any of these rights, contact us at contact@nyrus.ai. We will respond consistent with applicable law and may need to verify your identity.

8. International Data Transfers

We are based in the United States and may process information in the United States and other countries. Where we transfer personal information across borders, we rely on appropriate safeguards, such as Standard Contractual Clauses, where required.

9. Children’s Privacy

The Service is not directed to children. It is intended for users who are at least 18 years old, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, please contact us so we can remove it.

10. Third-Party Links and Services

The Service may contain links to, or integrate with, third-party websites and services that operate under their own privacy policies. We are not responsible for the practices of those third parties.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at contact@nyrus.ai, or write to NYRUS AI, Corp., Attn: Privacy.