Privacy Policy

De-Cypher is an artificial-intelligence-assisted conversation-analysis platform. Depending upon the features being used, the Service may:

• receive live or recorded audio;
• transcribe speech;
• distinguish speakers;
• analyze language and conversational patterns;
• generate linguistic, emotional, tempo, consistency, integrity, aggression, risk, or similar indicators;
• generate suggested responses;
• create summaries and reports;
• maintain session histories;
• identify changes or patterns over time; and
• provide Teams administrators with authorized organizational dashboards, alerts, metrics, or session information.

Because De-Cypher analyzes human communication, information submitted to the Service can contain personal, confidential, sensitive, or highly contextual information.

This Policy applies to personal information processed through De-Cypher. It applies both to:

• 1.Account Users — people who create or use a De-Cypher account; and
• 2.Conversation Participants — people whose voice, speech, communications, or information may be processed through De-Cypher even if they do not maintain a De-Cypher account.

Where De-Cypher processes information on behalf of a business, employer, or other organization under a commercial agreement, that organization may independently determine why and how certain information is processed. In those circumstances, the organization may be the relevant data controller or business, and De-Cypher may act as its service provider or processor.

The categories of information we may collect depend on how De-Cypher is used.

A. Account and identification information

• name;
• email address;
• username;
• account credentials;
• organization or company name;
• job title or role;
• account type;
• subscription level;
• administrative permissions; and
• other information provided when creating or managing an account.

B. Conversation Data

De-Cypher may process information contained within conversations submitted to the Service, including:

• live audio;
• recorded audio;
• spoken words;
• transcripts;
• speaker labels;
• timestamps;
• conversation duration;
• pauses and speech timing;
• linguistic characteristics;
• conversational context; and
• other information contained within the communication.

We refer to this information collectively as “Conversation Data.” Conversation Data may include information concerning individuals who do not themselves have a De-Cypher account.

C. AI-generated analysis and inferences

The Service may generate information or inferences based upon Conversation Data, including:

• linguistic analysis;
• communication patterns;
• sentiment-related indicators;
• emotional indicators;
• tempo measurements;
• consistency measurements;
• integrity-related indicators;
• conversational risk indicators;
• aggression indicators;
• behavioral or communication trends;
• summaries;
• suggested responses; and
• other analytical outputs.

These outputs are probabilistic analytical signals. They should not be interpreted as objective determinations concerning a person’s truthfulness, credibility, intentions, psychological condition, mental state, guilt, dangerousness, or future conduct.

D. User-provided content

We may collect information that you voluntarily provide, including text, prompts, documents, files, notes, contextual information, feedback, support requests, and communications with De-Cypher.

E. Subscription and transaction information

If you purchase a paid service, we may process subscription type, billing status, transaction history, payment confirmation, billing contact information, and related transaction information. Payment-card information may be collected and processed directly by our payment-processing providers rather than stored by De-Cypher.

F. Device, network, and technical information

When you use the Service, we may automatically receive information such as IP address, browser type, device type, operating system, device identifiers, application version, access times, referring pages, general geographic information inferred from an IP address, error logs, performance information, and security-related information.

G. Usage information

We may collect information concerning how the Service is used, including features accessed, session frequency, feature interactions, account activity, subscription usage, AI-processing activity, system performance, and diagnostic information.

H. Teams and organizational information

Where De-Cypher is provided through an organization, we may receive information from the organization, including employee or user name, organizational email, team membership, role, account permissions, manager or administrator relationships, organizational context, and other information necessary to provision and administer the account.

A De-Cypher user may submit a conversation involving another person. As a result, we may process information concerning someone who has never created a De-Cypher account.

The user who submits the conversation is responsible for having lawful authority to provide it to De-Cypher. Users must provide legally required notices and obtain legally required consent before recording, transmitting, transcribing, monitoring, or analyzing another person’s communications.

De-Cypher does not represent that a user’s submission of another person’s information establishes that valid consent has been obtained.

Conversation Data can contain information that may be considered sensitive under applicable privacy laws. Depending upon what people discuss, this could include information concerning:

• health;
• medical conditions;
• race or ethnicity;
• religious or philosophical beliefs;
• political views;
• sexual orientation or sex life;
• financial information;
• government identifiers;
• union membership;
• precise location;
• employment;
• disabilities;
• legal matters;
• confidential business information; or
• other sensitive subjects.

De-Cypher does not require users to disclose these categories merely to maintain an ordinary account. However, such information may appear incidentally within conversations submitted by users.

Users should not submit sensitive information unless doing so is necessary, lawful, and consistent with the rights and expectations of the people involved.

De-Cypher processes speech for purposes such as transcription, speaker differentiation, and conversational analysis.

De-Cypher is not designed to use a person’s voice to identify or authenticate that person through a biometric voiceprint. We do not intentionally create biometric voiceprints for the purpose of uniquely identifying individuals unless a separate De-Cypher feature expressly provides such functionality and the required notices and consents are first implemented.

Speech characteristics used for transcription, diarization, or conversational analysis should not be interpreted as biometric identity verification.

If De-Cypher later introduces functionality involving biometric identifiers or biometric identification, we will provide any additional notice, consent mechanism, retention policy, or other documentation required by applicable law before using that functionality.

Provide the Service

Including to authenticate users; establish and maintain accounts; receive and process audio; transcribe conversations; perform AI analysis; distinguish speakers; generate analytical outputs; provide suggestions; maintain authorized session history; create reports and exports; and operate Teams functionality.

Personalize the Service

Where permitted, to maintain user preferences; provide longitudinal analysis; maintain contextual memory requested by the user; customize dashboards; and improve the relevance of analysis.

Operate and improve De-Cypher

To diagnose errors; improve application performance; evaluate feature effectiveness; develop new features; conduct quality assurance; understand aggregate usage; maintain system reliability; and improve the Service.

Protect the Service

To prevent fraud; detect unauthorized activity; protect accounts; investigate security incidents; enforce our Terms; prevent misuse; and protect De-Cypher, our users, and third parties.

Communicate with users

To respond to support requests; send account notices; provide security notifications; communicate subscription information; provide Service updates; and send marketing communications where legally permitted. You may opt out of nonessential marketing communications.

Billing and administration

To administer subscriptions; process payments; maintain financial records; enforce account limits; and manage organizational accounts.

Legal and compliance purposes

When reasonably necessary to comply with applicable law; respond to lawful legal process; establish or defend legal claims; enforce agreements; investigate unlawful activity; and satisfy regulatory obligations.

De-Cypher uses artificial intelligence and automated technologies to analyze Conversation Data. This may involve transmitting portions of User Content or Conversation Data to AI, speech-recognition, transcription, cloud-computing, or related service providers acting on our behalf.

These systems may generate inferences or predictions based upon language and conversation patterns. AI-generated outputs can be inaccurate.

De-Cypher does not treat such outputs as factual determinations of truth or deception; honesty; credibility; intent; psychological condition; guilt; criminal behavior; medical diagnosis; or dangerousness.

Users must exercise independent judgment when interpreting AI-generated information.

We recognize that conversations processed through De-Cypher may be highly private or commercially sensitive.

Negative Mass LLC does not use identifiable Conversation Data to train generalized De-Cypher artificial-intelligence models without affirmative authorization from the applicable user or organization.

We may use aggregated data, deidentified information, technical telemetry, performance measurements, error information, and other information that does not reasonably identify an individual to evaluate and improve the Service.

If we offer an optional program allowing users to contribute Conversation Data for research, model evaluation, or model improvement, participation will be disclosed separately and will require affirmative enrollment where required.

Third-party AI or speech-processing providers may process information necessary to provide their services to De-Cypher subject to their contractual obligations, technical configurations, and applicable law. De-Cypher seeks to configure providers consistently with the privacy commitments described in this Policy.

Some De-Cypher functionality involves automated analysis or profiling of communications. For example, the Service may produce an integrity indicator, emotional indicator, consistency analysis, risk indicator, or other communication metric.

These outputs are intended to assist human understanding and decision-making. De-Cypher is not intended to make final decisions producing legal or similarly significant effects upon individuals without meaningful human review.

Organizations using Teams or related features should not use De-Cypher analysis as the sole basis for decisions concerning hiring; termination; disciplinary action; promotion; compensation; lending; credit; insurance; housing; healthcare; educational admission; criminal investigation; or other similarly significant decisions.

Where applicable privacy law provides a right to opt out of certain legally defined forms of profiling or automated decision-making, eligible individuals may exercise that right as described below.

Service providers

We may provide information to companies that perform services on our behalf, including cloud infrastructure, artificial intelligence, transcription, speech processing, authentication, database hosting, cybersecurity, analytics, payment processing, email delivery, customer support, and other technical services. These providers receive information as reasonably necessary to perform their functions.

Teams administrators and organizations

If you use De-Cypher through an employer or other organization, authorized administrators may have access to information associated with your organizational account. Depending upon the organization’s configuration, this may include account activity, session information, transcripts, analytical outputs, reports, metrics, alerts, and other information generated through organizational use of De-Cypher. Users of organizational accounts should consult their organization’s own privacy notices and policies.

At your direction

We may disclose information when you export information, share a report, connect another service, authorize an integration, or otherwise direct De-Cypher to disclose information.

Legal requirements and protection of rights

We may disclose information when we reasonably believe disclosure is necessary to comply with law; comply with valid legal process; respond to lawful government requests; investigate fraud or unlawful conduct; protect the security of the Service; enforce our agreements; or protect the rights, property, or safety of De-Cypher, our users, or others.

Corporate transactions

Information may be disclosed or transferred in connection with a merger, financing, acquisition, reorganization, sale of assets, bankruptcy, or sale or transfer of some or all of the De-Cypher business. Any successor’s use of personal information remains subject to applicable law and the privacy commitments applicable to the information at the time of transfer.

Professional advisors

We may provide information where reasonably necessary to attorneys, accountants, auditors, insurers, consultants, and other professional advisors subject to appropriate confidentiality obligations.

De-Cypher does not sell Conversation Data. De-Cypher does not provide Conversation Data to third parties for cross-context behavioral advertising or targeted advertising.

We do not sell personal information for monetary payment.

Our website may use analytics or marketing technologies to understand website traffic, measure campaigns, prevent fraud, or improve our marketing. Certain privacy laws may define some disclosures involving advertising or analytics technologies as a “sale,” “sharing,” or “targeted advertising” even when no money changes hands. Where our activities fall within those definitions, we will provide legally required opt-out controls.

We will not use the contents of private De-Cypher conversations for targeted advertising.

Our websites and applications may use cookies, local storage, pixels, software development kits, or similar technologies. These technologies may be used for authentication; account security; remembering preferences; fraud prevention; application functionality; analytics; performance measurement; and marketing measurement.

Where required by law, nonessential technologies will be subject to appropriate consent or opt-out mechanisms. Browser settings may also allow you to limit certain cookies.

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, subject to applicable law.

Retention periods may vary depending upon the type of information; the feature being used; account settings; contractual requirements; the user’s deletion choices; security requirements; fraud-prevention requirements; backup cycles; dispute-resolution needs; and legal obligations.

Conversation Data may be retained in accordance with the user’s account settings, subscription features, or organizational agreement.

Where the Service permits users to delete sessions or other content, De-Cypher will initiate deletion from active systems subject to reasonable technical limitations, backup cycles, legal obligations, security requirements, and other lawful retention exceptions.

Account information may be retained for a reasonable period following account closure where necessary for legitimate business or legal purposes. We seek to avoid retaining identifiable personal information indefinitely when it is no longer reasonably necessary.

De-Cypher uses administrative, technical, and organizational safeguards designed to protect personal information appropriate to the nature of the information being processed. These measures may include access controls; authentication controls; encryption; network security; logging; vendor-management procedures; restricted employee access; system monitoring; and incident-response procedures.

However, no internet-connected service, cloud platform, transmission system, or database can be guaranteed to be completely secure. Users are responsible for maintaining the confidentiality of their account credentials.

If we become aware of a security incident requiring notification under applicable law, we will provide legally required notices.

Where your De-Cypher account is provided or managed by an organization:

• the organization may administer your account;
• the organization may establish retention settings;
• authorized administrators may access organizational data;
• the organization may terminate your access;
• the organization may establish internal policies concerning use of De-Cypher; and
• De-Cypher may process certain data on behalf of the organization.

In these circumstances, requests involving information controlled by the organization may need to be submitted directly to that organization. De-Cypher will assist organizational customers with legally required privacy requests where required by applicable law and contractual obligations.

The fact that De-Cypher offers a setting, feature, interface, or workflow intended for a particular professional context does not by itself establish compliance with a particular regulatory framework. For example:

HIPAA. De-Cypher should not be used to process protected health information in circumstances requiring a Business Associate Agreement unless Negative Mass LLC and the applicable customer have entered into an appropriate written agreement and the relevant De-Cypher environment has been configured for that use.

FERPA. Use of De-Cypher in an educational environment does not itself establish compliance with FERPA. Schools and educational institutions remain responsible for determining applicable requirements and entering into any necessary agreements.

Similar principles apply to other regulated information.

De-Cypher’s ordinary consumer Service is intended for adults 18 years of age or older. We do not knowingly solicit personal information directly from children under 13 through ordinary consumer accounts.

If we learn that we have collected personal information directly from a child in circumstances requiring parental consent without satisfying applicable requirements, we will take appropriate steps to delete or otherwise address that information.

Organizations should not provide De-Cypher to minors unless the use has been specifically authorized by De-Cypher and all legally required parental, institutional, or other permissions have been obtained.

Depending upon where you reside and applicable law, you may have rights concerning your personal information. These may include the right to:

• confirm whether we process your personal information;
• access or obtain a copy of your personal information;
• know the categories of personal information we collect;
• know the purposes for which information is processed;
• know categories of sources of personal information;
• know categories of recipients;
• correct inaccurate personal information;
• request deletion;
• obtain portable copies of certain information;
• opt out of certain sales of personal information;
• opt out of certain sharing for targeted advertising;
• limit certain uses of sensitive personal information;
• opt out of certain forms of profiling or automated decision-making;
• withdraw consent where processing depends upon consent; and
• appeal certain decisions concerning privacy requests where applicable.

Not every right applies in every jurisdiction or circumstance. Certain information may also be exempt from privacy requests where permitted by law.

You may submit an applicable privacy request by email to support@de-cypher.ai, or through any privacy-request functionality made available within De-Cypher.

Please identify the nature of your request and provide information reasonably necessary for us to locate the relevant account or information.

We may verify your identity before fulfilling a request. Verification procedures may vary depending upon the sensitivity of the request. We will not require you to provide information that is disproportionate to the request.

Where permitted by law, an authorized agent may submit a request on your behalf. We may require evidence that the agent has authority to act for you.

If we deny a request and applicable law provides a right of appeal, our response will explain how to submit an appeal.

We will not unlawfully discriminate against you because you exercised a privacy right.

Exercise of a privacy right may, however, affect our ability to provide functionality that necessarily requires the information subject to the request. For example, deleting a transcript may prevent De-Cypher from providing longitudinal analysis based upon that transcript.

If the California Consumer Privacy Act, as amended, applies to De-Cypher’s processing of your information, California residents may have additional rights.

During the preceding 12 months, depending upon how you use De-Cypher, we may have collected categories of personal information including:

Identifiers. Name, email, IP address, account identifiers.

Customer records. Account and subscription information.

Commercial information. Subscription and transaction history.

Internet or electronic activity. Device information, logs, application usage.

Audio information. Conversation audio and speech.

Professional information. Organization, job role, team membership.

Inferences. AI-generated communication and conversational analysis.

Sensitive personal information. Information contained in conversations that falls within legally protected categories.

We collect these categories from users directly; organizations providing accounts; people communicating with users; devices and browsers; service providers; and interactions with the Service.

We use these categories for the purposes described throughout this Policy. We may disclose them to service providers, organizational administrators, professional advisors, or other recipients described in this Policy.

We do not sell Conversation Data. We do not share Conversation Data for cross-context behavioral advertising. To the extent other online advertising or analytics activity constitutes “sale” or “sharing” under California law, eligible users may exercise applicable opt-out rights through the controls we make available.

Residents of states with applicable comprehensive privacy laws may have additional rights concerning access, correction, deletion, portability, sale, targeted advertising, sensitive data, profiling, and appeals. We will process valid requests in accordance with applicable law.

Where legally required, we will recognize applicable universal opt-out mechanisms for processing subject to such mechanisms.

De-Cypher is operated by a United States company. If you access the Service from outside the United States, your information may be transferred to, stored in, or processed in the United States or other countries in which De-Cypher or its service providers operate. Those countries may have data-protection laws that differ from those of your jurisdiction.

Where required, we will use appropriate safeguards for international transfers of personal information.

If European Economic Area, United Kingdom, or similar privacy law applies, our legal bases for processing may include performance of a contract; legitimate interests; compliance with legal obligations; protection of vital interests; and consent where consent is required.

Eligible individuals may also have rights to object to certain processing, restrict processing, withdraw consent, and lodge a complaint with an applicable data-protection authority.

We may create aggregated, statistical, or deidentified information that is not reasonably capable of being associated with an identifiable individual, and use it for analytics, research, benchmarking, security, product development, system improvement, and business operations.

Where applicable law requires it, we will maintain deidentified information in deidentified form and will not attempt to reidentify it except as permitted by law.

The Service may integrate with or link to services operated by third parties. Those third parties may process information under their own privacy policies and terms. This Privacy Policy does not govern independent third-party services that De-Cypher does not control.

Users should review relevant third-party policies before providing information directly to those services.

De-Cypher may receive requests for information from courts, law-enforcement agencies, regulators, or other governmental authorities. We evaluate such requests and disclose information where we reasonably determine disclosure is legally required or otherwise permitted under applicable law.

We may preserve information when legally required to do so.

If Negative Mass LLC or the De-Cypher business undergoes a merger, acquisition, financing transaction, restructuring, bankruptcy, sale of assets, or other corporate transaction, personal information may be transferred as part of that transaction.

Where required by law, users will receive notice before personal information becomes subject to materially different privacy practices.

We may update this Privacy Policy to reflect changes to De-Cypher; new functionality; new data practices; new legal requirements; security developments; or changes in service providers. The current version will identify its effective date.

If a change materially alters how we use previously collected personal information, we will provide additional notice or seek consent where required by law.

We will not secretly convert previously collected private Conversation Data to materially different uses inconsistent with the commitments under which the information was collected.

Questions, privacy requests, complaints, or other communications regarding this Privacy Policy may be directed to:

Negative Mass LLC. d/b/a De-Cypher, Florida, United States. Email: support@de-cypher.ai

If you use De-Cypher through an organization, you may also contact that organization’s administrator or privacy representative regarding organizational processing of your information.

In operating De-Cypher, Negative Mass LLC intends to follow five core principles:

Conversations are not advertising inventory. We do not sell Conversation Data or use private conversations for targeted advertising.

AI analysis is not a factual judgment about a human being. Analytical indicators remain probabilistic signals and require human interpretation.

Private conversations should not silently become AI training data. Identifiable Conversation Data will not be used by Negative Mass LLC to train generalized De-Cypher models without affirmative authorization.

Users must have lawful authority to analyze conversations. Recording, transcription, and analysis must comply with applicable consent and privacy laws.

We collect and retain information because the Service needs it. Not simply because technology makes collection possible.