Privacy

Last updated: 2026-08-25

CYPHR Group Inc. ("CYPHR", "we") runs cyphrgroup.com, the CYPHR Intelligence query box, the MCP endpoint at mcp.cyphrgroup.com, and the playbook viewer at playbook.cyphrgroup.com. This page says what we collect, what we do with it, who else touches it, how long we keep it, and how to reach us. We sell to businesses, not consumers, and we keep this short because there is not much to say.

What we collect, and where

Browsing the site. We run no analytics and set no cookies. Our pages are served by Cloudflare, which sees the ordinary request data any web host sees (your IP address, browser type, the page requested). Our pages load a typeface from Google Fonts, so Google also receives your IP address and browser type when a page loads.

Using the query box on /intelligence. The question you type is sent to our server to find the matching passages. We do not log the text of your question. Your IP address is hashed and the hash is used only to limit how many requests one source can make; the raw address is not stored, and the hashed counter is discarded after one minute.

Using the MCP endpoint. Requests from an AI assistant to mcp.cyphrgroup.com are handled the same way: no request bodies are logged, no account is created, nothing is written on your behalf. Cloudflare keeps standard invocation logs (time, route, status) for the endpoint.

Requesting a Transaction Pack (/screen-intake). You give us the name, email and phone number of the counsel handling the matter, the parties, the states, and the shape and timing of the deal. We store that record so we can prepare the screen and contact you about it.

Signing in to the playbook viewer. You sign in with a one-time code sent to your email. We record the email address you used and the time you signed in. We use that address to send you up to three follow-up emails about the playbook over the following seven days, each with a one-click unsubscribe. If you unsubscribe, we stop, permanently.

Emailing us. /contact has no form. If you email info@ or sales@cyphrgroup.com, we have your message in our mailbox like any correspondence.

What we do not do

We do not sell personal information. We do not share it for advertising. We do not run advertising. We do not profile visitors. We do not train models on what you type. We do not ask for or store payment card numbers on our systems; payments are handled by our payment processor.

Who else handles it

• Cloudflare, Inc. — hosts the site, the query and MCP endpoints, the playbook viewer sign-in, and the storage where intake and sign-in records live.
• Google LLC — Google Fonts on every page; Google Workspace for our mailboxes.
• Resend, Inc. — sends the playbook follow-up emails.
• Railway Corp. — hosts an internal system that does not receive visitor data.

Each of these acts on our instructions under its own terms and security program.

How long we keep it

• Query-box and MCP request text: not kept.
• Intake records and playbook sign-in records: 24 months from the record date, then deleted, unless you ask us to delete them sooner.
• Follow-up email status (sent / unsubscribed): the unsubscribe itself is kept so we can honour it.
• Correspondence: as ordinary business records.

Your choices

Email info@cyphrgroup.com to see what we hold about you, correct it, or have it deleted. We answer within ten business days. Unsubscribe links in our emails work immediately and do not require a reply.

We do not knowingly collect information from anyone under 18; our services are for businesses.

Changes and contact

If this page changes, the date at the top changes with it. Questions: info@cyphrgroup.com, or by post at PO Box 307, Webster, NY 14580.