Privacy policy

This policy explains how Udaya Vijay Anand, a sole founder based in New York, USA, doing business as erys (called erys, we, or us), collects, uses, and protects personal information when you use the erys.app website, the voice demo on the site, the waitlist, and early access to the erys application for macOS (together, the service).

The short version: erys is built to keep as little of your data as possible. The voice demo stores no audio and builds no voiceprint. The waitlist uses your details only to reach you about erys. The app runs on your Mac. When you connect an account such as Google, erys works with that data on your Mac to do what you ask, follows Google's Limited Use requirements, and does not route it through our servers for our own purposes. We do not sell your personal information, and we never have.

This policy is part of, and should be read with, our terms and conditions. It is not legal advice.

Waitlist information. When you request a seat, we collect the name and email address you enter, and, if you choose to add them, a short note about why you want erys and a link to your LinkedIn or X profile. These fields are the only personal information the waitlist collects, and the note and link are optional.

Voice demo information. When you talk to the demo, your microphone audio is processed in real time to answer you, and the text of the conversation is held briefly in memory. We do not record or store your audio, and we do not build a voiceprint. The voice demo is covered in detail in its own section below.

Automatically collected information. Like most websites, our hosting and security layer receives standard technical information when you visit, such as your IP address, browser and device type, and the pages you view. We use your IP address in memory to enforce rate limits and screen abuse on the voice demo and the waitlist. We also collect aggregate, privacy-friendly analytics, described in the analytics section below.

The erys application. The early access app for macOS is local-first: your meetings, mail, calendar, notes, and the memory erys builds from them live on your Mac. We do not collect that content, and nothing leaves your machine unless you approve it. We may receive basic account and billing information, and limited diagnostic information you choose to send, if and when you accept a seat.

Connected accounts. If you connect a third-party account such as Google, erys accesses only the data you authorize, for example your Gmail messages and your contacts, to do the work you ask. That content is processed on your Mac and is not collected or stored on our servers. We do store the access credentials, called tokens, that keep the connection working; they are held securely and deleted when you disconnect. The connected accounts and Google user data section below explains this in full, including our commitments under the Google API Services User Data Policy.

We do not knowingly collect special categories of sensitive personal information, and we ask that you not share them with the voice demo.

We use the limited information we collect to: answer you in the voice demo; do the work you ask of erys across the tools you connect, such as reading, organizing, drafting, and, only with your approval, sending; contact you about your waitlist seat, early access, and material changes to erys; operate, secure, and improve the service, including enforcing rate limits and screening abuse; process billing if you accept a seat; and comply with law.

We do not use your information to serve advertising, we do not build advertising or marketing profiles about you, and we do not use your voice-demo conversations, your waitlist details, or any content from your connected accounts to train AI models. Content from your connected accounts, including Google user data, is used only to provide the features you ask for, as described in the connected accounts section below.

Your microphone activates only after you grant explicit permission in your browser, and only during an active conversation. You can end the conversation at any time, and the microphone is not used outside an active conversation.

Your audio is streamed in real time to third party processors for speech to text, language model inference, and text to speech, solely to generate a response to you. erys does not record or store your audio. There is no audio at rest, and no voiceprint, voice model, or other biometric identifier or biometric information is created, collected, or stored. We cannot recognize you by your voice, by design.

The text of your conversation is held in server memory for at most 15 minutes so the conversation stays coherent, and is then discarded. It is never written to disk and never used to train AI models, ours or anyone else's.

Because nothing is retained, do not treat the demo as a place to store anything, and do not share sensitive personal information with it.

erys is designed to be an extension of you that stays on your machine. The content it works with, your meetings, messages, calendar, notes, and the memory it forms, is stored on your Mac and answers to you alone.

erys prepares and proposes; it does not send, post, or share anything on your behalf until you approve that specific action. Where erys connects to a tool you use, it acts within the access you grant and only to do the work you ask of it.

We do not collect, store, or have access to the content on your Mac. If a future feature would change what leaves your machine, we will tell you clearly and put you in control of it.

erys does its work by connecting to the tools you already use. Today that means your Google account, and over time it may include your calendar, files, tasks, and other tools you choose to connect. You decide what to connect, you see the exact permissions before you grant them, and you can disconnect at any time.

What erys accesses, and why. When you connect Google, erys requests only the access it needs to do the work you want, and Google shows you those permissions before you approve. That can include reading your Gmail so erys understands what needs your attention, drafting replies, and, only after you explicitly approve a specific action such as sending or filing a message, carrying it out; and reading your contacts so erys knows who the people in your world are. erys uses this access only to provide its features to you.

Where your Google data lives. Content from your Google account is processed on your Mac to do what you ask. We do not collect it, store it on our servers, or keep our own copy. We do store the access tokens that keep the connection working, held securely and deleted when you disconnect.

How erys knows something changed. So it can act on new mail promptly, erys uses Google’s standard push notifications, delivered through Google Cloud Pub/Sub. A notification tells erys only that something in your mailbox has changed, by way of a change identifier, and carries none of the content of your messages; erys then reads the details on your Mac. This is the one part of the connection where a server receives a signal from Google, and that signal contains no message content.

AI processing. To carry out a task, erys may process the relevant content through AI models. Where that happens off your device, it is only to produce the result you asked for; the providers act as our processors, do not retain your content, and do not use it to train their models.

Our Limited Use commitment. erys’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In plain terms: we use your Google data only to provide the features you use, we do not sell it, we do not use it for advertising, we do not use it to train AI models, and we do not let humans read it except with your explicit consent, where needed to keep the service secure or to fix a problem you report, to comply with law, or as the Limited Use policy otherwise permits.

Disconnecting. You can disconnect Google at any time from within erys or at your Google Account permissions page, myaccount.google.com/permissions. Disconnecting stops erys’s access going forward and deletes the tokens we stored for the connection.

We use privacy-friendly analytics to understand how the site is used and how fast it loads. These measure aggregate, anonymous events such as page views and performance metrics. They do not use advertising cookies, do not follow you across other sites, and are not used to build a profile of you.

The site does not set tracking or advertising cookies. Our hosting provider may set strictly necessary cookies required to serve and secure the site. Because we do not track you across sites, we do not respond differently to browser Do Not Track or Global Privacy Control signals, but we honor the privacy choices described in the rights section below.

We keep our operation small and rely on a short list of established providers who process data on our behalf under their own security and privacy commitments. They act as our processors, only to run the service, and are not permitted to use your data for their own purposes.

These include: our hosting and analytics provider, which serves the site and receives standard technical and aggregate usage information; the speech to text, language model, and text to speech providers behind the voice demo, which process your audio and conversation text in real time to answer you and do not retain it for their own use; and our waitlist storage provider, which holds the name, email, and optional details you submit so we can reach you. When a task you ask for requires it, content from a connected account may be processed by our AI model providers, acting only on your instruction and only to produce the result you asked for; they do not retain that content or use it to train their models. We may add or change providers as the service evolves and will keep this list accurate.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only with the providers described above, who process it to run the service, and only as needed to do so. Information we receive from Google APIs is used, stored, and shared only as described in the connected accounts section, consistent with the Google API Services User Data Policy, including the Limited Use requirements.

We may also disclose information if required by law or valid legal process, to enforce our terms, to protect the rights, safety, or property of erys, our users, or the public, or in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor this policy or give you notice and a choice where the law requires it.

Voice demo audio is never stored. Voice demo conversation text is held in memory for at most 15 minutes and then discarded. Rate-limit and abuse-screening information based on your IP address is held in memory only briefly and is not kept as a durable record.

Waitlist details are kept until you ask us to delete them or until we no longer need them to contact you about erys, whichever comes first. Billing records, if you accept a seat, are kept as long as the law requires. Aggregate analytics are retained by our provider on a rolling basis and are not tied to your identity.

Content from connected accounts is not stored on our servers; the access tokens for a connection are kept only while the connection is active and are deleted when you disconnect.

We take reasonable measures to protect the limited information we hold, including transport encryption, server-side handling of secrets, rate limiting, and abuse screening. Keeping little data is itself our main protection: there is no audio to leak and no voiceprint to steal.

No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. You are responsible for keeping your own devices and accounts secure.

You can ask us to access, correct, or delete the personal information we hold about you, and you can leave the waitlist and have your email and any details deleted at any time. To make a request, email udaya@erys.app. We will respond within the time the law requires, and we will not discriminate against you for exercising a right.

Depending on where you live, you may have additional rights. If you are a California resident, you have the right to know what personal information we collect and how we use it, the right to delete it, the right to correct it, and the right to opt out of sale or sharing. We do not sell or share your personal information, so there is nothing to opt out of, and the categories we collect and our purposes are described above. If you are in the European Economic Area or the United Kingdom, you may have rights to access, rectify, erase, restrict, port, or object to the processing of your personal information, and to lodge a complaint with your local supervisory authority; our legal bases are performing our agreement with you, your consent for the microphone, and our legitimate interest in operating and securing the service.

You can decline or revoke microphone permission at any time in your browser, which turns off the voice demo. You do not have to give the optional note or social link on the waitlist. You can disconnect any account you have connected, such as Google, at any time from within erys or from your Google Account permissions page at myaccount.google.com/permissions, which revokes erys’s access going forward and deletes the stored tokens.

The service is intended for adults and is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, email udaya@erys.app and we will delete it.

erys is based in the United States and the service is operated from the United States. If you use the service from outside the United States, you understand that your information will be processed in the United States and other countries where our providers operate, which may have different data protection laws than your own. Where required, we rely on appropriate safeguards for such transfers.

We may update this policy as erys evolves. If a change is material, we will give you advance notice by email if you are on the waitlist or have a seat, or by a prominent notice on erys.app, before it takes effect, and we will update the effective date at the top. If you keep using the service after a change takes effect, you accept it.

For any privacy question or request, including access, correction, deletion, or waitlist removal, write to udaya@erys.app. We read every message.