Privacy Policy | Iryst

Data Privacy at Iryst

Effective Date: April 1, 2026 | Last Updated: April 1, 2026

At Iryst, we believe privacy is a fundamental right. This Privacy Policy explains how we collect, use, share, and protect your personal information. We're committed to transparency and giving you control over your data.

1. Information We Collect

Information You Provide

We collect information you directly provide to us, including:

  • Account Information: Name, email address, password, and profile details when you create an account
  • Payment Information: Billing address and payment card details (processed securely through our payment providers)
  • Communications: Information you provide when you contact customer support or communicate with us
  • User Content: Content you create, upload, or share through our services

Automatically Collected Information

When you use Iryst, we automatically collect certain information:

  • Device Information: Device type, operating system, browser type, and unique device identifiers
  • Usage Data: Pages visited, features used, time spent on our platform, and interaction patterns
  • Location Data: Approximate location based on IP address (precise location only with your permission)
  • Cookies and Similar Technologies: Information collected through cookies, web beacons, and similar tracking technologies

Information from Third Parties

We may receive information about you from:

  • Social media platforms if you connect your account
  • Business partners and service providers
  • Publicly available sources

2. How We Use Your Information

We use the information we collect for the following purposes:

Service Delivery and Improvement

  • Provide, maintain, and improve our services
  • Process transactions and send related information
  • Customize and personalize your experience
  • Develop new features and functionality

Communication

  • Send you service-related notices and updates
  • Respond to your inquiries and provide customer support
  • Send marketing communications (with your consent)
  • Conduct surveys and gather feedback

Security and Legal Compliance

  • Protect against fraud, abuse, and security threats
  • Comply with legal obligations and enforce our terms
  • Investigate and prevent violations of our policies
Legal Basis for Processing (EEA/UK Users): We process your data based on: (1) your consent, (2) performance of a contract with you, (3) compliance with legal obligations, and (4) our legitimate interests in providing and improving our services.

3. Advertising and Marketing

How We Advertise

We use various advertising platforms and technologies to reach potential users and improve our marketing effectiveness:

Meta Pixel and Conversion Tracking

We use Meta Pixel (Facebook Pixel) and conversion APIs on our website and app. This technology allows us to:

  • Measure the effectiveness of our advertising campaigns on Facebook and Instagram
  • Understand how users interact with our website after seeing our ads
  • Create custom audiences and lookalike audiences for targeted advertising
  • Optimize ad delivery to people most likely to be interested in our services
  • Track conversions and attribute them to specific ad campaigns

Data Collected by Meta Pixel:

  • Pages visited on our website
  • Actions taken (sign-ups, purchases, downloads)
  • Device information and IP address
  • Browser information and cookies
  • Timestamp of visits and interactions

Personalized Advertising

We display personalized ads across Meta platforms (Facebook, Instagram, Messenger) based on:

  • Your interactions with our website and services
  • Information we upload to Meta (such as customer lists for Custom Audiences)
  • Your demographic information and interests on Meta platforms
  • Your engagement with our previous ads

Retargeting

We may show you ads on Meta platforms if you've previously visited our website or interacted with our content. This helps us re-engage interested users and provide relevant offers.

Your Advertising Choices

You can control the ads you see:

Note: Opting out of personalized advertising does not mean you'll stop seeing ads entirely. You'll still see ads, but they may be less relevant to your interests.

4. Meta Platforms Integration

Information from Meta Platforms

When you interact with us through Meta platforms (Facebook, Instagram, WhatsApp, Messenger), we may receive information including:

  • Your public profile information (name, profile picture, gender, age range)
  • Email address (if you provide permission)
  • Information about how you interact with our ads and content
  • Messages you send to our business pages or accounts

Social Login

If you choose to create an account or log in using Facebook or Instagram, we receive:

  • Basic profile information (name, email, profile picture)
  • Any additional information you authorize Meta to share
  • A unique identifier for your social media account

You can manage these permissions through your Meta account settings at any time.

Data Sharing with Meta

We share certain information with Meta to:

  • Deliver and measure the effectiveness of our advertising campaigns
  • Create custom audiences for targeted advertising
  • Analyze user behavior and improve our marketing strategies
  • Comply with Meta's Terms of Service and advertising policies

Information shared with Meta includes:

  • Hashed email addresses and phone numbers (for Custom Audiences)
  • Purchase and conversion data
  • Website and app usage data collected via Meta Pixel
  • Device and browser information

Meta's Data Processing

Meta processes data as described in their own privacy policies:

We encourage you to review Meta's privacy policies to understand how they collect and use your information.

Data Controller Relationship: For advertising purposes, both Iryst and Meta act as independent data controllers. This means we are each responsible for our own use of your data under applicable privacy laws.

5. Sharing and Disclosure

We may share your information in the following circumstances:

Service Providers

We share information with third-party service providers who perform services on our behalf, such as:

  • Payment processing and fraud detection
  • Cloud hosting and data storage
  • Customer support and communication tools
  • Analytics and marketing services

Advertising Partners

We share information with advertising platforms to deliver targeted advertising:

  • Meta Platforms: Facebook, Instagram, Messenger for advertising campaigns, Custom Audiences, and conversion tracking
  • Google: Google Ads, Google Analytics for advertising and analytics
  • Other Ad Networks: Various advertising platforms to reach potential users across the web

These partners may combine the information we share with other data they have collected about you to provide measurement services and targeted ads.

Business Transfers

If Iryst is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

Legal Requirements

We may disclose information when required by law or to:

  • Comply with legal processes or government requests
  • Enforce our terms and conditions
  • Protect the rights, property, or safety of Iryst, our users, or others
  • Detect and prevent fraud or security issues

With Your Consent

We may share information for other purposes with your explicit consent.

We do not sell your personal information to third parties.

6. Data Security

We implement industry-standard security measures to protect your information:

  • Encryption: Data is encrypted in transit using TLS and at rest using AES-256
  • Access Controls: Strict access controls limit who can view your data
  • Regular Audits: We conduct security audits and vulnerability assessments
  • Incident Response: We maintain procedures to respond to security incidents

However, no system is 100% secure. We encourage you to use strong passwords and protect your account credentials.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

Access and Portability

  • Request access to your personal information
  • Receive a copy of your data in a portable format

Correction and Deletion

  • Correct inaccurate or incomplete information
  • Request deletion of your personal information (subject to legal exceptions)

Control and Objection

  • Opt out of marketing communications
  • Object to processing based on legitimate interests
  • Withdraw consent where processing is based on consent
  • Restrict or limit how we use your data

California Residents

If you're a California resident, you have additional rights under CCPA/CPRA:

  • Right to know what personal information we collect and how we use it
  • Right to delete your personal information
  • Right to opt out of the sale or sharing of personal information
  • Right to non-discrimination for exercising your rights
How to Exercise Your Rights: Contact us at dpo@iryst.com, We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Keep you signed in
  • Remember your preferences
  • Understand how you use our services
  • Provide personalized content and advertising

Types of Cookies We Use

  • Essential Cookies: Required for the website to function properly
  • Performance Cookies: Help us understand how visitors use our site
  • Functionality Cookies: Remember your preferences and settings
  • Advertising Cookies: Deliver relevant ads and measure campaign effectiveness

Third-Party Tracking Technologies

We use third-party tracking technologies including:

  • Meta Pixel: Facebook and Instagram tracking for advertising and analytics
  • Google Analytics: Website analytics and user behavior tracking
  • Google Ads: Advertising conversion tracking and remarketing
  • Other Analytics Tools: Various tools to understand user engagement

You can control cookies through your browser settings. Note that disabling certain cookies may limit functionality.

9. International Data Transfers

Iryst operates globally, and your information may be transferred to and processed in countries other than your own. We ensure adequate protection through:

  • Standard Contractual Clauses approved by regulatory authorities
  • Adequacy decisions where applicable
  • Other approved transfer mechanisms

We take steps to ensure your data receives the same level of protection regardless of where it's processed.

10. Children's Privacy

Iryst is not intended for children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children. If we discover we've collected information from a child, we will delete it promptly.

If you believe a child has provided us with personal information, please contact us at dpo@iryst.com .

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Posting the updated policy on our website
  • Updating the "Last Updated" date
  • Sending you an email notification (for significant changes)

Your continued use of Iryst after changes become effective constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Data Protection Officer: dpo@iryst.com

We aim to respond to all inquiries within 30 days.