Legal
Last updated: October 27, 2026
Version: PRIVACY-2026-10-24-v3
This Privacy Policy explains how Zyrova Technologies LLC ("Zyrova," "we," "us," or "our") collects, uses, discloses, stores, and protects personal information in connection with zyrova.com and all Zyrova websites, software-as-a-service products, web or mobile applications, APIs, dashboards, digital products, automation tools, artificial-intelligence or model-assisted features, subscription services, beta and early-access programs, support channels, integrations, communications, and other products or services we make available now or in the future (collectively, the "Services"). Zyrova Pulse and Zyrova Chart are Zyrova Services. Zyrova Pulse may involve product-specific data such as marketplace licence and support records, and Zyrova Chart may involve license, trial and update records.
For direct-to-user Services, Zyrova generally determines the purposes and means of processing personal information and may act as a business or controller where those concepts apply. For certain business or enterprise Services, Zyrova may instead process information on behalf of a customer under a separate data-processing agreement, order form, or contract. Product-specific privacy notices may supplement this Policy where a Service has materially different data practices.
This Policy does not govern independent third-party services that operate under their own privacy notices, including payment processors, app stores, identity providers, analytics providers, hosting providers, or other integrations.
Depending on the Service and how you use it, we may collect:
We may collect information directly from you; automatically from your browser, device, network connection, or use of the Services; from your organization or an administrator that provides you access; and from service providers, processors, integrations, or platforms involved in providing the Services. Depending on the Service, those providers may include payment processors, cloud and hosting providers, database providers, email-delivery providers, analytics providers, identity providers, messaging platforms, app stores, support or form providers, artificial-intelligence or model providers, data vendors, market-data providers, security tools, monitoring providers, and other infrastructure or integration vendors.
We may use personal information to:
Payment checkout and subscription processing may be provided by Stripe or another payment processor identified at checkout. Payment-card information is submitted to the payment processor rather than stored directly by Zyrova. We receive billing identifiers, transaction status, subscription status, invoice information, payment-dispute information, and related records needed to provide paid Services, manage trials and renewals, reconcile payment events, prevent fraud, and grant or revoke access. Payment processors may collect additional information under their own privacy notices and legal obligations.
When you choose to connect a third-party integration, we may exchange the limited information reasonably necessary to establish, operate, secure, and revoke that integration. Third-party platforms are independent services and process information under their own policies.
Some Services are software that runs on your own devices, such as add-ons for trading platforms like Bookmap (for example, Zyrova Pulse). Unless a Service states otherwise, this software processes data locally and does not send us the content of your work. Zyrova market-data add-ons calculate their readings locally from the market data your platform receives and show them on screen. They do not send your market data, orders, positions, trading-account details, or broker credentials to Zyrova, and they do not write market data to files. Add-on settings, such as window positions and values you type in, are kept by the platform's own settings storage on your computer.
Zyrova Chart is a desktop app that runs on your computer. It gets prices from your own Interactive Brokers account through Trader Workstation (TWS) on your computer. Your market data, charts, drawings, alerts, layouts, snapshots, settings, and the candle history it saves stay on your computer and are not sent to Zyrova. Zyrova never receives your broker login, orders, positions, or account details. If Zyrova Chart uses a license key or free trial, the app sends Zyrova's license service the information needed to issue and check it: the email address you give for a trial, the license key, a one-way identifier derived from your Windows installation ID (it cannot be turned back into that ID and contains nothing from your files), the computer name, the app version, and the time of each check. We use this to deliver keys, limit trials and the number of computers per key, and confirm that a subscription is active. License keys are looked up by a one-way hash; an encrypted copy is also kept so we can email you your key again if you ask. About once an hour, Zyrova Chart also asks Zyrova's update service (license.zyrova.com) whether a newer version is available. That request carries only your IP address and the app version, like any web request, and our server logs it for security and troubleshooting. Updates are installed only when you choose Install now.
If you buy or license an add-on through a third-party marketplace, that marketplace processes your purchase and payment under its own privacy notice. Zyrova may receive limited information from the marketplace or from you, such as your platform username, licence or subscription status, and purchase references, to provide licensing, support, and fraud prevention. If you send us a support request, we receive what you choose to include, such as messages, screenshots, or error logs; please do not include account passwords or broker credentials.
When we provide professional services such as test automation, quality engineering, development, or consulting, we may receive access to a client's systems, test environments, source code, accounts, and data, which can include personal information about the client's own users or employees. We process that information on the client's behalf and under the client's instructions, only to perform the services, keep it confidential, protect it with reasonable safeguards, and return or delete it when the engagement ends or as the agreement requires, except where retention is legally required. The client is responsible for its own privacy notices and legal basis for sharing that information with us, and for providing masked or synthetic test data where possible. A data-processing agreement can be put in place on request.
Where laws such as the EU or UK General Data Protection Regulation apply, we rely on these legal bases: performance of a contract (to provide the Services and process purchases), legitimate interests (to secure, support, improve, and market our Services, prevent fraud, and defend legal claims, balanced against your rights), consent (for optional cookies or marketing where consent is required, which you can withdraw at any time), and legal obligation (for tax, accounting, and compliance records). You may also have the right to lodge a complaint with your local data-protection authority.
Zyrova may offer or deliver Services through, or together with, other companies, such as software platforms, app stores, marketplaces, resellers, distributors, payment providers, integration partners, and business partners. When you find, buy, install, or use a Service through one of them, that company collects and uses your information under its own privacy notice, and Zyrova is not responsible for its practices. We encourage you to read its notice.
Those companies may share limited information with us, and we may share limited information with them, as reasonably needed to deliver, license, support, bill for, secure, and improve the Service, prevent fraud, meet contractual and legal obligations, and handle refunds or disputes. This can include your name or username, email address, account or licence identifiers, purchase and entitlement records, country, and support communications. We do not authorize partners to use information we share for their own unrelated marketing unless you agree or the law allows it. If you sign in through a third-party account or connect an integration, we receive the information that service is set up to share, which you can often control in that service's settings.
Some current or future Services may use automation, statistical models, machine learning, artificial intelligence, large language models, rules engines, or third-party model providers. If a feature requires processing Customer Content or other information through such systems, we may process or transmit that information as reasonably necessary to provide the feature, secure it, evaluate performance, detect abuse, troubleshoot, or improve the applicable Service, subject to applicable law, this Policy, and any product-specific commitments presented to you.
Unless a product-specific notice or agreement states otherwise, Zyrova does not use identifiable private Customer Content to train a generalized model for unrelated customers without separate disclosure or authorization. We may use aggregated, statistical, diagnostic, security, or de-identified information that does not reasonably identify you or reveal protected Customer Content to operate and improve our business and Services.
Do not submit highly sensitive, confidential, regulated, or third-party information to a feature unless the Service documentation or a written agreement states that the feature is designed and authorized to process that category of information. We may change model providers, architectures, or processing methods as our technology evolves, subject to applicable privacy obligations and contractual commitments.
We use cookies or similar technologies for authentication, session continuity, security, fraud prevention, preferences, legal-acceptance continuity, and core website or product functionality. When analytics or optional technologies are enabled, they may also use cookies, local storage, identifiers, or comparable technologies to measure usage, performance, and interactions. You can control many cookies through browser or device settings, but blocking necessary technologies can prevent account or Service functionality from working correctly.
Our website may use Google Analytics, provided by Google LLC, to understand how visitors use the site, such as pages viewed, approximate location, device type, and how visitors arrived. Google processes this information under its own privacy terms. You can limit this by blocking cookies in your browser or by using the Google Analytics Opt-out Browser Add-on.
Where applicable law requires recognition of an opt-out preference signal, such as a legally recognized universal opt-out mechanism, we will process that signal as required for the browser or device from which it is received.
We may disclose personal information in these circumstances:
We do not currently operate a business model that sells personal information for monetary consideration. We do not knowingly disclose personal information for cross-context behavioral advertising or use legally defined sensitive personal information to infer unrelated characteristics unless we provide the notices and choices required by applicable law. If our practices materially change, we will update this Policy and implement legally required controls before or when the change takes effect.
We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including providing and improving the Services; maintaining account, license, subscription, billing, legal-acceptance, support, security, fraud-prevention, entitlement, and audit records; complying with tax, accounting, contractual, legal, and regulatory obligations; and resolving disputes or defending claims. Retention periods vary based on the category of information, Service, account status, legal requirements, operational need, and risk.
We may retain records after account closure where reasonably necessary or legally permitted, including transaction history, acceptance records, security logs, fraud-prevention records, trial-eligibility records, contractual records, and information associated with unresolved disputes. Backup copies may remain for a limited period after deletion from active systems. Aggregated or de-identified information may be retained longer where it no longer reasonably identifies you.
We maintain administrative, technical, and organizational safeguards designed to be appropriate to the nature of the Services and risks involved. Depending on the system and product, safeguards may include encryption in transit, authentication and access controls, hashed or tokenized credentials, limited database permissions, secret management, logging, monitoring, rate limiting, backups, environment separation, and entitlement or access-reconciliation controls. These measures may change as our systems evolve. No system, storage method, or transmission is completely secure, and we cannot guarantee absolute security.
If a security incident involving personal information occurs, Zyrova will investigate and provide legally required notifications where applicable. You are responsible for protecting access to your email, devices, sessions, organization credentials, API keys, payment account, and connected third-party accounts and for notifying us promptly if you reasonably believe your account or credentials have been compromised.
Depending on where you live and subject to applicable exceptions, you may have rights to request access to, correction of, deletion of, or a portable copy of certain personal information, or to object to or restrict certain processing. Certain U.S. state laws may provide rights concerning sale, targeted advertising, profiling, sensitive data, or appeals of privacy-request decisions when those activities and laws apply.
You may submit a privacy request by email to hello@zyrova.com, by phone at (770) 728-8777, or through our Contact page. Please put "Privacy Request" in the subject. We respond within the time the applicable law requires, generally within 30 to 45 days, and will tell you if we need more time. Where the law allows, you may use an authorized agent, and we may ask the agent for proof of authority and ask you to confirm your identity. If we decline your request, you may appeal by replying with "Privacy Appeal" in the subject, and we will explain our decision on appeal. We may need to verify your identity, account, authority, or residency before completing a request. We may retain or decline to delete information where permitted or required by law, including information needed for security, fraud prevention, transactions, legal-acceptance evidence, contractual obligations, legal claims, or compliance.
Marketing emails will include an unsubscribe method where required. Transactional, authentication, security, billing, account, legal, and service communications may still be sent where necessary to provide the Services, protect accounts, enforce agreements, or comply with law.
If a comprehensive U.S. state privacy law applies to our processing, we will provide the rights and disclosures required by that law. Depending on the Service, the categories described in this Policy may include identifiers, customer records, commercial information, internet or electronic-network activity, approximate location derived from IP address, professional or organization information, user-submitted content, and inferences used to operate, personalize, secure, or improve the Services. We do not knowingly discriminate against users for exercising privacy rights protected by applicable law.
Unless a Service, order form, or written agreement expressly states otherwise, Zyrova Services are not designed to receive protected health information, payment-card security codes, government-classified information, highly sensitive biometric templates, or other specially regulated information that requires a dedicated compliance environment. You are responsible for avoiding submission of data that the applicable Service is not authorized or designed to process.
The Services are intended for adults and business users and are not directed to children under 18. We do not knowingly offer Zyrova Pulse subscriptions or other adult-oriented paid Services to children. If you believe a child has provided personal information to us, contact us so we can evaluate and take appropriate action.
Zyrova and our service providers may process information in the United States and other countries where providers operate. Those locations may have data-protection laws that differ from the laws where you live. Where applicable law requires a particular transfer mechanism or contractual safeguard, we will use an appropriate mechanism for the relevant processing.
We may update this Privacy Policy as our company, Services, vendors, technologies, data practices, or legal obligations change. We will post an updated date and version identifier. Changes apply prospectively from their effective date unless applicable law permits otherwise. If a material change requires additional notice, consent, or an opt-out opportunity under applicable law, we will provide that process. A new or materially different Service may also present a product-specific privacy notice rather than relying solely on this company-wide Policy.
Privacy questions and requests may be submitted through the Zyrova Technologies Contact page. For contractual terms governing the Services, see our Terms of Service.