Privacy Policy

1. Introduction

Wyre AI (“Wyre AI,” “we,” “our,” or “us”) is committed to safeguarding the privacy and security of your personal and business information.

This Privacy and Security Policy outlines how we collect, use, and safeguard information when you use our products — including ScopeBuilder and related AI-driven preconstruction tools — as well as when you visit our website or communicate with us.

By using our services, you consent to the terms of this Policy.

At a Glance

2. Our Commitment to Privacy and Security

• We handle your data with the highest standards of responsibility, transparency, and security.
• Wyre AI never sells, rents, or shares your personal or project information for advertising or marketing purposes. Wyre AI does not “sell” or “share” personal information as those terms are defined under the California Consumer Privacy Act (CCPA).
• No AI model training on customer data. Wyre AI never uses your proprietary content, documents, or personal identifiers for AI model training or any purpose unrelated to your service.
• Security by design. Our platform is built on a multi-layered security architecture that incorporates encryption, access controls, continuous monitoring, and rigorous compliance practices.
• Privacy by design. Data protection is integrated into every stage of our product lifecycle — from system architecture to feature deployment — ensuring that privacy is a default, not an afterthought.

3. Information We Collect

Wyre AI collects only the data necessary to deliver, secure, and continuously improve our products and services. We are committed to data minimization — ensuring that every piece of information we collect has a clear and legitimate purpose.

Business and Contact Information

We collect your name, company name, job title, email address, and communication details to create and manage customer accounts, provide service updates, and respond to support inquiries.

Project Data

We collect construction drawings, specifications, and other related files that you upload to our platform. These materials are processed by Wyre AI’s AI Engine to generate preconstruction scopes, structured insights, and analysis outputs relevant to your projects. All data is securely contained within each customer’s dedicated environment — no project data or insights are shared, mixed, or made accessible across customers.

Usage Data

We collect your IP address, browser type, device identifiers, and details about your interactions with our platform. This helps us maintain system reliability, monitor performance, protect against misuse, and enhance your user experience.

Payment and Subscription Information

We collect billing details and transaction records to manage subscriptions and invoicing. All payment processing is handled securely by trusted third-party providers. Wyre AI does not store or process any sensitive payment data, including credit card numbers.

4. How We Use Your Data

Wyre AI uses the information we collect solely to deliver, operate, and continuously improve our AI-powered products and services. This includes:

• Analyzing and processing project documents to generate accurate, actionable preconstruction insights
• Communicating service updates and providing customer support
• Maintaining platform reliability and strengthening security
• Ensuring compliance with applicable legal and regulatory requirements

AI Processing

All project files are processed securely within controlled, isolated environments. Our AI Engine extracts relevant construction and design data to generate insights specific to your organization.

Wyre AI never uses your proprietary content, documents, or personal identifiers for AI model training. Data processing is strictly limited to fulfilling your intended business functions within the Wyre AI platform.

All AI processing is request-driven and ephemeral:

• Customer data is transmitted to the AI service only for the duration of the active processing request.
• Data is held in volatile, in-memory (ephemeral) storage at the AI service for the duration of the inference call and is not written to persistent storage at the provider.
• No customer content, prompts, or generated outputs are retained by the third-party AI provider after the request completes.
• No metadata that could identify customer projects, users, or content is logged at the AI provider beyond standard, anonymized service telemetry (e.g., request counts, latency).

Third-Party AI Services

Wyre AI uses select third-party AI services to process documents. These services are governed by enterprise agreements that include contractual controls prohibiting the use of customer data for model training. No customer project data is retained by any AI service provider beyond the completion of the processing request.

Legal Basis for Processing (GDPR)

For users in jurisdictions governed by the GDPR or equivalent regulations, Wyre AI processes personal data on the following legal bases:

5. Security Controls

Wyre AI employs enterprise-grade security controls to protect the confidentiality, integrity, and availability of customer data across all environments.

Encryption

• Data at rest: All stored data is encrypted using AES-256 encryption.
• Data in transit: All communications are protected using TLS 1.2 or higher.
• Key management: Encryption keys are managed through secure key management services with access logging.

Access Controls

• Role-based access control (RBAC) with least-privilege principles
• Multi-factor authentication (MFA) enforced for all administrative access
• Centralized identity management via single sign-on (SSO)
• All credentials managed through secure secrets management — no hardcoded secrets

Infrastructure Security

Wyre AI’s infrastructure is designed to minimize attack surface and enforce environment isolation:

• Separate environments for development and production with independent access controls
• Private network configurations with restricted access to backend services
• Continuous threat detection and monitoring
• Automated vulnerability scanning

Monitoring and Logging

• Centralized audit trails with log file validation
• Application and access logs retained per our internal retention policy
• Automated configuration compliance monitoring
• Real-time alerting for security findings

6. Data Isolation

Each customer’s data is logically isolated within our platform:

• Customer data is segregated to prevent cross-customer access
• Each processing job is scoped to a single customer and project
• Development and production environments are fully separated

7. Data Retention and Deletion

Wyre AI retains customer data only for as long as necessary to fulfill the purposes for which it was collected.

• Project data and processing results: Retained for the duration of the active contract, plus a 30-day grace period following termination, during which customers may export or request deletion of their data.
• Audit and security logs: Retained per our internal log retention policy to support security investigations and regulatory obligations.
• Account and profile data: Retained for the duration of the contract, plus a reasonable period for administrative closure (typically up to 30 days).

Upon account termination or verified written request, customers may request permanent deletion of their files, project data, and associated personal information. Deletion requests are processed promptly and verified to ensure complete removal from active systems.

8. Incident Response

Wyre AI maintains a formal Incident Response Plan with defined procedures for detecting, containing, investigating, and resolving security incidents.

• Detection: Real-time automated monitoring and alerting
• Containment: Rapid security team assessment and isolation of affected resources
• Customer notification: Affected customers notified promptly in accordance with applicable regulations
• Investigation: Root cause analysis and scope assessment
• Remediation: Controls strengthened and lessons learned documented

9. Your Rights

Wyre AI is committed to transparency and to giving you control over your personal information. Depending on your jurisdiction and applicable privacy laws, you may exercise the following rights:

• Access and Correction: Request access to your personal information and ask for corrections.
• Data Deletion and Portability: Request deletion of your personal data, or request a copy of your data in a portable, machine-readable format — available as JSON, CSV, or the original uploaded file format.
• Withdrawal of Consent: Withdraw consent to non-essential data processing at any time.

To exercise your rights or raise privacy-related concerns, please contact us at srikanth.kancherla@wyreai.io.

10. Cookies and Analytics

Wyre AI’s website uses cookies and analytics technologies to enhance functionality and ensure a secure browsing experience. These tools help us optimize site performance, analyze engagement trends, and maintain platform security.

You can manage or disable cookies at any time through your browser settings. Disabling certain cookies may affect the functionality of some website features.

11. Compliance

Wyre AI’s security program is developed in alignment with recognized industry standards. We are committed to achieving strong governance, security maturity, and regulatory readiness as we scale.

Our compliance efforts include:

• Formal security policies and procedures
• Automated compliance monitoring
• Regular security assessments and vulnerability scanning
• Employee security awareness training

12. Subprocessors

Wyre AI engages a limited set of trusted third-party service providers (“subprocessors”) to deliver our services. The current list of named subprocessors is:

Each subprocessor is bound by a written data-processing agreement requiring confidentiality, security controls aligned with industry standards, and prohibition of any use of customer data outside the agreed scope.

We will provide advance notice of material changes to this subprocessor list (such as adding a new subprocessor that processes customer content) through this page or via direct communication. Customers may contact srikanth.kancherla@wyreai.io to subscribe to subprocessor change notifications.

13. Contact and Updates

Wyre AI may update this Privacy and Security Policy periodically to reflect new features, changes in applicable regulations, or enhancements to our security practices. We will notify you of material changes through our platform or via email.

Information Security Contact:

Srikanth Kancherla
Information Security Lead
Wyre AI, Inc.

Email: srikanth.kancherla@wyreai.io