Privacy

Who this covers

This notice explains how Cyster Inc. (“Cyster”, “we”, “us”) collects, uses, and protects personal information on cyster.org. Today the site is a set of educational pages about PMOS plus a beta waitlist: you can read, and, if you choose, submit your email to join the beta.

We follow Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), applicable Ontario law, and Quebec’s Law 25 for visitors in Quebec.

Assessment features are not yet live

Cyster plans on-device assessment features, including a Pattern reflection and a Body Atlas, that will run in your browser. They are not yet live, and we will expand this notice to cover them before they launch.

What we collect, and why

The only personal information we collect is your email address, and only when you type it into a form and submit it. We send it to our email provider, Resend, which stores it as a contact, and we use it to reach you about the beta. See section 06.

We also use cookieless analytics that count visits and page views without identifying you or tracking you across other sites, and our hosting provider keeps standard server logs (such as IP address, time, and browser type) to keep the site secure and running.

What we do not collect

• Health information, diagnoses, or medical records. Cyster is educational, not a records system.
• Passwords or accounts. There is no login during the beta.
• Payment information. Nothing is for sale yet.

We never sell your information, and we never share it with advertisers.

Your consent

We collect your email only when you choose to give it, and we tell you what it is for at the point you give it. That is your consent. You can withdraw it at any time by unsubscribing or by emailing privacy@cyster.org. We will only send essential messages (such as confirming a deletion) when genuinely necessary.

How we use your email

We use the email you give us only for the purpose tied to where you gave it: to email you about the beta and to send the occasional update you signed up for.

We do not use your email for advertising, and we do not sell or rent it. Every non-essential email includes an unsubscribe link.

Who helps us run Cyster

We use a small number of trusted providers to operate the site. They are bound by contract to protect your information and to use it only on our instructions:

• Email delivery: Resend, which stores your email as a contact and sends our beta and transactional emails.
• Hosting and analytics: our website host and a privacy-respecting, cookieless analytics tool.

We choose providers that meet recognised security standards, and we share the minimum information needed.

Where your information is stored

Cyster’s email and site data are handled by reputable cloud providers that may store or process information in Canada or the United States. Where information is processed outside your province or outside Canada, we use providers bound by contract to protect it, and for visitors in Quebec we assess the transfer in line with Law 25 before it happens. If you would like specifics on where a particular provider stores data, email privacy@cyster.org.

Cookies and analytics

We keep this minimal. We use only the cookies needed to make the site work and keep it secure. We do not use advertising or cross-site tracking cookies, and our analytics are cookieless and count visits without identifying you. You can block or clear cookies in your browser settings without breaking the parts of the site that matter.

How we protect your information

We use reasonable administrative and technical safeguards appropriate to the small amount of information we hold: encryption in transit, access limited to people who need it, and providers selected for their security practices. No system is perfectly secure, but because we hold so little, the exposure is deliberately limited.

How long we keep it

We keep your email for as long as you are on our list or until you ask us to delete it, plus any short period the law requires. When you unsubscribe or ask to be deleted, we remove your email from our active systems. Analytics and server logs are kept only briefly and in a form that does not identify you.

Children

Cyster’s content is educational and may be read by anyone, but cyster.org is not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe someone under 16 has given us their email, contact privacy@cyster.org and we will delete it.

Your rights

Under Canadian privacy law you can:

• Access the personal information we hold about you (in practice, your email).
• Ask us to correct it.
• Withdraw your consent and ask us to delete it.

To do any of these, email privacy@cyster.org. We will respond within the timeframe the law requires.

If you are not satisfied with how we have handled your information, you can contact the Office of the Privacy Commissioner of Canada, the Information and Privacy Commissioner of Ontario, or your own provincial or territorial privacy commissioner.

Changes to this notice

We update this notice when our practices change (for example, when the on-device assessment features launch). When we do, we update the Last updated date at the top, and we email anyone on our list before a material change takes effect.

Contact us

• Privacy questions: privacy@cyster.org
• General: hello@cyster.org
• Privacy Officer, Cyster Inc., Toronto, Ontario, Canada. Full mailing address available on request.