Legal
Privacy Policy
Effective September 25, 2026
Who we are
Nyra Security LLC (“Nyra Security”, “we”, “us”) provides compliance and cloud workspace security consulting. This policy covers the website at nyrasecurity.com and any application or tool we operate that you sign in to or connect to your accounts (together, the “Services”). Questions about this policy go to support@nyrasecurity.com.
Information we collect
- Information you send us. When you email us or use the scoping form (which opens your own mail client), we receive what you write: typically your name, work email, company and a description of your needs.
- Account information. When you sign in to the Services with Google, we receive your name, email address, profile picture and a Google account identifier.
- Data you authorize through Google APIs. If you grant additional permissions on Google’s consent screen, we access only the data those permissions cover, as described in the next section.
- Technical data. Our hosting provider, Cloudflare, processes IP addresses, request headers and similar data to deliver and protect the site. We use Cloudflare Web Analytics to count page views. It sets no cookies and doesn’t identify or track you across sites. We don’t use advertising cookies or tracking pixels.
Google user data
The Services request access to Google user data only through Google’s OAuth consent screen, which lists each permission (scope) before you approve it. We request the minimum scopes needed for the feature you are using.
- What we access. Your basic profile (name, email address, profile picture) to sign you in, and any additional data covered by scopes you explicitly approve.
- How we use it. Solely to provide the features you asked for: authenticating you and, where you connect a Google account or Workspace tenant, performing the assessment or action you requested and showing you the results.
- How we store it. OAuth tokens and any retained data are encrypted in transit and at rest, and access is limited to personnel who need it to operate the Services.
- How we share it. We do not sell Google user data and do not share it with third parties, except with infrastructure providers that process it on our behalf to run the Services, when required by law, or with your explicit consent.
- What we never do. We do not use Google user data for advertising, do not transfer it to data brokers, do not use it to determine creditworthiness, and do not use it to train generalized artificial intelligence or machine learning models.
Nyra Security’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
How we use information
- To respond to inquiries and deliver consulting engagements.
- To operate, secure and troubleshoot the Services.
- To comply with legal obligations and enforce our Terms of Service.
We do not sell personal information, and we do not use it for targeted advertising.
Sharing
We share information only with service providers that host or operate the Services for us (such as Cloudflare and our email provider) under contracts that limit their use of it; when required by law or to protect rights and safety; in connection with a merger or acquisition, subject to this policy; or with your consent.
Retention and deletion
We keep information only as long as needed for the purpose it was collected, or as required by law or an engagement agreement. You can revoke the Services’ access to your Google account at any time at myaccount.google.com/permissions. To have us delete the data we hold about you, including data received from Google, email support@nyrasecurity.com; we complete deletion requests within 30 days.
Security
We protect information with encryption in transit and at rest, least-privilege access controls, phishing-resistant multi-factor authentication and audit logging. No system is perfectly secure; if a breach affects your information, we will notify you as required by law.
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal information, or to object to certain processing. Email support@nyrasecurity.com and we will respond within the time the applicable law requires.
Children
The Services are intended for businesses and are not directed to children under 16. We do not knowingly collect their information.
Changes
If we change this policy, we will update the effective date above. If a change materially affects how we use data you have already provided, including Google user data, we will ask for your consent first.