Legal

Privacy Policy

Effective: August 24, 2026

Cephos provides software for managing and supporting technology deployments. This Privacy Policy explains how Cephos ("Cephos," "we," "us") handles information when you use our websites, applications, integrations, and related services (the "Service").

1. Information We Process

We may process:

• Account and contact information you provide to us.
• Files, documents, text, metadata, and other content that you or your organization provide or connect to Cephos ("Customer Data").
• Information from third party services that you choose to connect to Cephos.
• Technical and usage information generated through use of the Service.

Customer Data may include information relating to your organization, your customers, or other third parties.

2. How We Use Information

We use information to:

• Provide, operate, maintain, and improve the Service.
• Process and organize Customer Data as deployment context.
• Provide search, retrieval, analysis, automation, and other product functionality.
• Maintain the security and integrity of the Service.
• Communicate with users about the Service.
• Comply with applicable law and enforce our agreements.

We do not sell Customer Data.

3. Google Drive and Google API Data

If you connect Google Drive, Cephos may access files, file contents, metadata, and related information made available through the permissions you grant.

Cephos uses this information to make authorized Google Drive content available as deployment context within the Service and to provide related user facing functionality.

To provide these features, Cephos may retrieve, process, index, cache, store, and create derived representations of authorized Google Drive content.

Cephos may process Google user data using infrastructure, hosting, database, artificial intelligence, and other service providers acting on our behalf where necessary to provide the Service.

Cephos does not sell Google user data, use it for advertising, or use Google Workspace API data to develop, improve, or train generalized or non personalized artificial intelligence or machine learning models.

Cephos's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You may disconnect Google Drive by revoking Cephos's access through Cephos or your Google account. Disconnecting access prevents Cephos from using that authorization to retrieve new information. Information previously imported, processed, or derived may remain subject to Cephos's normal retention practices unless deleted through the Service or pursuant to a valid deletion request.

4. Sharing

We may disclose information:

• To service providers that process information on our behalf to operate the Service.
• At the direction of the customer or user.
• When required by law or reasonably necessary to protect Cephos, our users, or others.
• In connection with a financing, acquisition, reorganization, sale, or transfer of all or part of the business.

We do not permit service providers to use Google user data for purposes inconsistent with the Google API Services User Data Policy.

5. Customer Control and Responsibility

Customers retain ownership of their Customer Data.

Customers determine what information they provide or connect to Cephos and are responsible for ensuring they have the necessary rights and authority to provide and process that information through the Service.

6. Retention

We may retain information for as long as necessary to provide the Service, meet contractual obligations, comply with law, resolve disputes, maintain security, and enforce our agreements.

Information may also remain temporarily in backups, logs, or other systems used to operate the Service.

7. Data Requests

Depending on applicable law and your relationship with Cephos, you may have rights relating to your personal information.

Requests concerning access, correction, deletion, or other privacy matters may be submitted using the contact information provided on the Cephos website.

If your information is controlled by a Cephos customer, we may direct your request to that customer.

8. Changes

We may update this Privacy Policy from time to time. The current version will be posted on our website with its effective date.

Where required by applicable law or Google API policy, we will provide additional notice or obtain consent before materially changing how Google user data is used.

9. Contact

Questions about this Privacy Policy or Cephos's data practices may be submitted through the contact information provided at cephos.ai.