Privacy Notice

Digital Warehouses of America Inc., a Florida corporation and member of Warehouse Company Holdings (“Company,” “we,” “us”), operates the Zyclopps platform (the “Services”). This Privacy Policy is part of, and incorporated into, the Zyclopps Terms of Service. By creating an account and checking the acknowledgment box, you confirm you have read this Privacy Policy. Capitalized terms not defined here have the meaning given in the Terms of Service.

We collect the following, from you or automatically as you use the Services:

• Account information — name, business name, email, phone, job role, and license type if you give it. From you.
• Credentials — your password, stored only as a salted cryptographic hash, and your multi-factor settings. From you.
• Billing information — billing name and address, the last four digits of your card, and transaction history. Full card numbers are held by our payment processor, Stripe, not by us. From you and from the processor.
• User Content — prompts, inputs, uploaded files, conversation history, outputs, agents, workflows and integrations. From you.
• Usage and device data — IP address, browser, device type, log-in times, features used and error logs. Collected automatically.
• Cookies and similar technologies — session cookies, security cookies and analytics. Collected automatically.
• Acceptance records — the date, time, IP address and version of the Terms and Privacy Policy you accepted. Collected automatically.
• Communications — support requests, feedback and survey responses. From you.

Third-party personal information. If you submit personal information about other people — for example your clients or leads — you are responsible for having a lawful basis and all required consents and notices. Do not submit Social Security numbers, financial account numbers, health information, or other sensitive data about others unless you are legally permitted to do so.

• To create and manage your account and verify your identity
• To provide, operate, maintain and secure the Services, including processing your prompts through AI models
• To process payments, send billing and past-due notices, and enforce the non-payment terms
• To send service, security and legal notices
• To detect, prevent and investigate fraud, abuse, security incidents and violations of the Terms
• To comply with legal obligations and respond to lawful requests
• To analyze aggregated, de-identified usage to improve the Services
• To send marketing communications, where permitted and subject to your right to opt out (Section 11)

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

4.1 Third-party AI providers. To generate outputs, your prompts and User Content are sent to third-party AI model providers acting as our service providers: OpenAI, Anthropic, Google, xAI and Perplexity for text, and Deepgram and ElevenLabs for speech. Each processes the data under its own terms. OpenAI, Anthropic, xAI, Perplexity and ElevenLabs do not train their models on data submitted through their APIs. For Deepgram, we opt out of its model improvement program on every call. Google's Gemini API is the exception: on its free tier, Google may use the data to improve its products, and only a billed Google project is excluded — so if you connect your own Google key and this matters to you, use a billed project.

4.2 Our use for training. We do not use your personal content to train AI models. However, we may use de-identified User Content to improve our models unless you opt out in account settings.

4.3 Human review. Authorized personnel or contractors may review limited User Content only when needed for security, abuse investigation, legal compliance, or when you ask for support. They are bound by confidentiality obligations.

We share personal information only as follows:

• Service providers that host, process payments, provide AI models, send email, provide analytics, or support us, under contracts requiring confidentiality and security
• Affiliates within Warehouse Company Holdings, only to support operation of the Services, not for their own marketing unless you separately consent
• Legal and safety — when required by law, subpoena or court order, or when we believe disclosure is needed to protect rights, property or safety, or to investigate fraud or violations of the Terms
• Business transfers — in connection with a merger, acquisition, financing or sale of assets, subject to this Policy
• With your direction — when you connect third-party integrations or instruct Zyclopps agents to send data elsewhere. Those parties’ own privacy policies then apply.

6.1 Active accounts. We keep User Content while your subscription is active and paid, unless you delete it sooner.

6.2 NON-PAYMENT AND CANCELLATION. IF YOUR SUBSCRIPTION IS NOT PAID BY THE END OF THE GRACE PERIOD IN THE TERMS OF SERVICE, YOUR ACCOUNT IS DISCONNECTED AND WE DO NOT SAVE YOUR USER CONTENT.

User Content is permanently deleted from active systems upon disconnection, or at the end of your final paid cycle if you cancel, and residual encrypted backup copies are overwritten within 30 days. Deleted User Content cannot be recovered, including if you later pay or re-subscribe. Export anything you want to keep before your subscription lapses.

6.3 Records we must keep. Even after deletion, we keep only the minimum records needed for the following purposes and periods, after which they are deleted or de-identified:

• Billing and transaction records — for tax, accounting, chargebacks and collections. Kept for 7 years.
• Acceptance records for the Terms and Privacy Policy — as proof of agreement and for dispute resolution. Kept for the life of any claim plus 5 years.
• Account identifier, email and payment status — for collections, fraud prevention, and to prevent banned users re-registering. Kept for 3 years.
• Security and access logs — for security, fraud and incident investigation. Kept for 12 months.
• Anything under a legal hold, subpoena or government request — for legal compliance. Kept until the hold is released.
• De-identified or aggregated data — for analytics and service improvement. Kept indefinitely, as it no longer identifies you.

7.1 Safeguards. We use reasonable administrative, technical and physical safeguards, including encryption in transit and at rest, access controls, logging, and mandatory strong passwords of at least 12 characters with an uppercase letter, a lowercase letter, a number and a special character. No system is completely secure, and we cannot guarantee absolute security.

7.2 Your role. You are responsible for keeping your credentials secret, using a unique password, and securing your devices. Report suspected unauthorized access to security@digitalwarehouses.com immediately.

7.3 Breach notice. If we determine that a breach of security has affected your personal information, we will notify you as required by law. For Florida residents, we will provide notice under the Florida Information Protection Act (Section 501.171, Florida Statutes) no later than 30 days after determining a breach occurred, subject to lawful delays, and we will notify the Florida Department of Legal Affairs when a breach affects 500 or more Florida residents.

8.1 All users. While your account is active you may access, correct, export or delete your User Content in account settings, or by emailing privacy@digitalwarehouses.com. We will verify your identity before acting on a request and respond within the time required by law.

8.2 State privacy laws. Depending on where you live, and if a state privacy law applies to us, you may have the right to know what personal information we hold, to obtain a copy, to correct it, to delete it, and to opt out of sale, targeted advertising or profiling. We do not sell personal information or use it for targeted advertising. You may use an authorized agent where the law allows. We will not discriminate against you for exercising your rights. If we deny a request, you may appeal by replying to our decision.

8.3 International users. The Services are operated in the United States and intended for users in the United States. If you access them from elsewhere, your information will be transferred to and processed in the United States.

If you use Zyclopps through an account provided by your employer or another organization, that organization controls the account and may access, retain or delete your User Content. For personal information you submit about your own clients or customers, you act as the controller or business responsible for that data, and we process it on your behalf as a service provider. You are responsible for providing any privacy notices and obtaining any consents required by law, including under the Gramm-Leach-Bliley Act, insurance privacy laws, and real estate or lending regulations that apply to you.

The Services are only for users 18 and older. We do not knowingly collect personal information from children under 13 or from anyone under 18. If we learn we have, we will delete it and close the account.

11.1 Email. You may unsubscribe from marketing email at any time using the link in each message. We will still send service, billing, past-due, security and legal notices.

11.2 Text messages. We will send marketing texts only with your prior express written consent. Reply STOP to opt out. Message and data rates may apply.

11.3 Cookies. We use essential cookies to operate and secure the Services — to keep you signed in and to remember which of your businesses you are working in. We do not use analytics or advertising cookies. You can control cookies in your browser; blocking essential cookies may prevent the Services from working.

We may update this Privacy Policy. For material changes, we will notify you by email or in the Services before they take effect and require you to acknowledge the updated Policy before continuing to use the Services. The effective date above shows when it was last updated.

Digital Warehouses of America Inc. — attn: Zyclopps Privacy, 6200 Metrowest Blvd, Suite 204, Orlando, FL 32835.