Privacy Policy

1. Our Commitment to Your Privacy

Cycle Financial ("Cycle," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you use our applications, products, services, and websites (collectively, the "Services").

Cycle serves startups, businesses, and other organizations, not consumers. Most of the personal information we handle belongs to people acting for those organizations, such as account owners, team members, and billing contacts, or to their customers, which organizations send to us to bill on their behalf.

This policy explains:

• What data we collect when you sign up and use our Services
• How we manage your information throughout our relationship
• What choices you have regarding your data

2. How We Use Your Information

We use your personal information only for legitimate business purposes, including:

• Providing, maintaining, and improving our Services
• Metering usage, calculating billing, and generating invoices and entitlements on your behalf
• Verifying your identity and preventing fraud and abuse
• Communicating with you about our Services and offerings
• Complying with legal and regulatory requirements
• Protecting the legal rights, property, and safety of Cycle and our users
• Developing new features and improving our billing engine and pricing tools

3. Information We Collect

3.1 Information You Provide Directly

We collect information you provide when creating an account or using our Services:

• Name, work email address, phone number, and role of the people who use Cycle for your organization
• Organization information (legal name, address, tax details)
• Payment details used to pay Cycle's fees
• Pricing configuration you create, such as plans, prices, meters, entitlements, and customer records
• Information provided during account setup, verification, or support requests

3.2 Billing and Usage Data

We collect the usage events you send to our metering APIs, the aggregated usage and charges calculated from them, invoices, entitlement checks, and logs of your API requests. This data may include information about your own customers, such as names, identifiers, and contact details, that you choose to send to us.

3.3 Device Information

We automatically collect information about the devices you use to access our Services, including:

• Hardware model and operating system
• Unique device identifiers
• Mobile network information
• Browser type and version
• IP address

3.4 Location Data

We may collect location data to help prevent fraudulent use of our Services and to provide location-based features. You can control location access through your device settings.

3.5 Usage Data

We collect information about how you interact with our Services, including pages visited, features used, time spent, and interaction patterns.

3.6 Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Cookies: Small data files stored on your device to manage engagement, remember preferences, and collect aggregated analytics
• Web Beacons: Electronic images used to deliver cookies and measure engagement with our Services and emails

3.7 Information from Third Parties

We may receive information about you from third-party sources, including:

• Identity verification services and publicly available sources
• Payment Processors: Payment providers that process the fees you pay to Cycle
• Integrations You Connect: When you connect a payment, accounting, CRM, or data tool, we retrieve and, where you enable it, write back billing data (including customers, usage, invoices, and entitlements) as necessary to provide our Services
• Your Customers' Data: Information about your own customers that you or your systems send to us through our APIs
• Third-party services you choose to connect

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Your Organization: With the administrators and other members of the organization account you belong to, who can see account activity and the data in it
• Service Providers: With third-party vendors who perform services on our behalf, such as payment processing, data storage, analytics, and customer support
• Payment Processors: With payment processors as necessary to collect the fees you owe Cycle
• Integrations You Connect: With the payment, accounting, CRM, or data tools you connect, to send and, where you enable it, receive billing data on your behalf
• Legal Requirements: With government and law enforcement agencies when required by law or legal process
• Safety and Security: When necessary to protect the security of our Services or the safety of our users
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets
• With Your Consent: When you explicitly authorize us to share your information
• Aggregated Data: We may share anonymized, aggregated information that cannot identify individuals

5. Your Customers' Data

When your organization sends us information about its own customers, such as usage events, customer identifiers, and invoice details, we process it on your organization's behalf to meter usage, calculate billing, and serve billing and entitlement APIs. Your organization decides what data it sends to us and how it is used, and we act as its service provider.

You are responsible for having the rights, notices, and consents needed to send this data to Cycle, and for responding to requests from your customers about their data. We use this data to provide the Services to you and as otherwise described in this Privacy Policy, and we do not sell it.

If your organization needs a data processing agreement, contact us atprivacy@usecycle.co.

6. Data Security

We take reasonable measures, including administrative, technical, and physical safeguards, to help protect your personal data from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction.

Our security practices include:

• Data encryption at rest and in transit
• Firewalls and intrusion detection systems
• Secure server authentication
• Regular security audits and testing
• Employee training on privacy and security standards
• Access controls and authentication mechanisms

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Your Choices and Rights

7.1 Account Information

You can review and update your personal information through your account settings or by contacting us at privacy@usecycle.co. Your organization's administrators can also manage who has access to its account and remove members.

7.2 Location Data

You can control location access through your device settings. Please note that disabling location access may affect certain features of our Services.

7.3 Cookies

Most browsers allow you to refuse cookies or alert you when cookies are being sent. However, some features of our Services may not function properly without cookies.

7.4 Marketing Communications

You can opt out of promotional emails by clicking the "unsubscribe" link in any marketing email. You may also opt out of promotional text messages. Please note that you will continue to receive transactional messages related to your account and Services.

7.5 Push Notifications

You can choose whether to receive push notifications through your device settings. Our Services will function without push notifications enabled.

7.6 Online Tracking and Advertising

You can opt out of interest-based advertising by visiting aboutads.info. We do not currently respond to "Do Not Track" browser signals.

7.7 Data Subject Rights

Depending on your location, you may have additional rights under applicable privacy laws, including the right to:

• Access and receive a copy of your personal data
• Correct inaccurate or incomplete data
• Request deletion of your personal data
• Object to or restrict processing of your data
• Data portability
• Withdraw consent at any time

To exercise these rights, please contact us at privacy@usecycle.co.

8. Third-Party Analytics

We use third-party analytics services, including Google Analytics, to help us understand how users interact with our Services. These services may collect information about your use of our Services and other websites, which helps us improve our offerings and user experience.

9. Third-Party Websites and Services

Our Services may contain links to third-party websites and services. This Privacy Policy does not apply to those third-party websites, and we make no representations regarding the privacy policies or practices of any third-party websites. We encourage you to review the privacy policies of any third-party services you use.

10. Data Retention

We retain your information for as long as necessary to provide our Services and fulfill the purposes described in this Privacy Policy. When you close your account, we will delete or anonymize your data within a reasonable period, except where we are required to retain it for legal, regulatory, or compliance purposes.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

12. Children's Privacy

Our Services are built for businesses and are not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at privacy@usecycle.co.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make changes that significantly affect how we use your personal information, we will notify you in advance via email or through our Services. The updated policy will be effective upon posting, with a revised "Last updated" date.

Your continued use of our Services after any changes constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at: