Privacy Policy

1. Who We Are

CyberStream Technology, LLC ("CyberStream," "we," or "us") provides technology services with a current service focus in Tennessee. This Policy explains how we handle personal information through cyberstream.tech, accounts, service requests, chat, and billing. It covers individual customers, prospective customers, and organization representatives using these features.

Information we handle within a customer's systems under that customer's instructions may also be governed by the applicable service agreement. This Policy does not replace those agreements or the customer's own privacy responsibilities.

2. Information We Handle

• Accounts and contact details: names, email addresses, phone numbers, addresses, profile details, organization associations, permissions, and account-security records. Password accounts use password hashes rather than readable passwords.
• Provider sign-in: identity identifiers, names, and email or account-principal information received when you choose Google or Microsoft sign-in. We do not receive your provider password through that process. Connecting an existing account may require ownership verification.
• Support: service selections, descriptions, messages, chat transcripts, email replies, attachments, and related participants, timestamps, status, and read/unread information.
• Billing and business records: contracts, customer and organization details, invoices, payment references and status, and accounting or reconciliation records. Stripe handles full card details entered on its hosted payment pages; we receive relevant billing and transaction information.
• Technical and preference information: browser or device information, IP addresses and request information processed by our systems or infrastructure providers, security events, cookies, saved preferences, and browser-stored form or chat state. Consented analytics may collect page activity and related usage information.

Information comes from you, authorized representatives, our service activity, relevant providers, and operation of the website. Please do not send passwords, verification codes, full card details, or unnecessary sensitive information in ordinary chat, forms, or email.

3. How We Use Information

We use relevant information to create and secure accounts, verify ownership, manage permissions, respond to inquiries, maintain support continuity, provide agreed services, administer contracts, issue invoices, reconcile payments, send operational messages, investigate misuse, maintain records, and meet legal obligations. Optional newsletters and analytics are handled according to the choices and legal requirements that apply.

Creating a member record or accepting website terms is not an automatic paid subscription or blanket permission for optional marketing or analytics.

4. Chat, AI, and Human Support

Guest chat requests contact details and email verification. Completing intake for a new email may create a basic member record. Protected browser credentials or authenticated account access associate conversations with you; knowing an email address alone does not authorize access to its history.

When the AI assistant is enabled, relevant conversation text, your reason for contacting us, and approved service context are sent to OpenAI through its API for limited intake assistance. The public assistant is not given general access to customer systems or administrative records. Separate staff AI tools may process staff prompts and selected task-related context. AI responses can be incorrect; ask for a person when needed.

Authorized support staff may receive transcripts and handoff notifications through Microsoft Teams and reply through Teams or the website. Supported service-request email replies and attachments may be recorded in the related request. Email, Teams, and AI providers can process or retain relevant information under their applicable terms and settings.

5. Providers and Other Recipients

Relevant information is processed by providers used for the activity. Which integrations are active depends on the deployed configuration. These can include:

• Hosting, database, storage, backup, and security providers supporting the website and its records.
• Microsoft 365, Microsoft Graph, and Teams for business email, attachments, and support; Resend if configured as the email transport.
• Google and Microsoft for chosen sign-in; OpenAI for enabled AI features.
• Stripe for online payments and invoice services; Mercury when enabled for business-transaction reconciliation.
• Google Analytics and Vercel Analytics when configured and permitted by your saved performance-cookie choice.

Authorized organization representatives may access customer-visible requests, attachments, contracts, or billing records according to their permissions. We may disclose relevant information to professional advisers, to comply with legal requirements, to protect rights and safety, or in connection with a business transaction subject to applicable safeguards and law. Third-party services have their own privacy practices.

6. Cookies and Marketing Choices

Necessary storage supports security, sign-in, verification, privacy preferences, form continuity, and protected chat access. It remains active when optional cookies are rejected. Clearing storage can remove remembered verification or guest-chat access on that device.

Optional analytics is enabled only after saved performance-cookie consent. Review or change your choices using Cookie Preferences in the footer. See our Cookie Notice for details. Changing a choice affects future optional processing, not automatic deletion of information already received by providers.

Marketing choices are separate. Use an available unsubscribe link or contact us to stop optional marketing. This does not stop necessary verification, security, service, or billing messages. Check spam or junk folders if an expected email is missing.

7. Retention and Security

We retain records according to their purpose, the customer relationship, applicable agreements, accounting requirements, security needs, disputes, and legal obligations. Closing an account or conversation does not automatically delete invoices, support records, attachments, backups, or external email and Teams copies. Cookie or code expiration is not a record-deletion schedule.

The application uses access controls, password hashing, protected sessions, and verification where relevant. No website, email system, or provider can be guaranteed completely secure. Protect your email account and devices, and contact us about suspected misuse. When a deletion request applies, legal retention needs, other people's rights, backups, and provider processing may limit what can be removed and when.

8. Privacy Requests and Questions

Contact privacy@cyberstream.tech with the subject "Privacy request," or write to the address below. Administration handles privacy inquiries through this regularly monitored inbox. You do not need a website account or a service ticket to contact us.

You can ask about information we hold, request access or a copy, correct inaccuracies, request deletion, or ask about privacy choices. Depending on the law and processing involved, additional rights or exceptions may apply. We may need reasonable identity or authority verification; do not email passwords or unnecessary sensitive documents. We review requests and respond as required by applicable law. If a request is declined, you may ask Administration to review the decision through the same contact.

If we process information on an organization's behalf, we may coordinate with or refer you to that organization. This notice does not limit mandatory rights, promise every right under every privacy law, or assume that a particular statute applies solely because our services focus on Tennessee.

9. Service Area and Processing Locations

A Tennessee service area does not mean all information stays in Tennessee. Providers may process information elsewhere in the United States or other locations relevant to their services and agreements. We do not promise Tennessee-only storage or a transfer certification that has not been verified. We will review notices and applicable requirements as our services, providers, or service area change.

10. Children and Policy Updates

The website is intended for adults and business representatives, not children under 13. We do not knowingly seek information from children under 13. Contact us if you believe a child has provided information so we can investigate.

We will identify updates to this Policy and provide notice or obtain additional consent when required. This update does not expand our permissions to use or disclose information collected under earlier privacy commitments. A policy update does not by itself authorize an otherwise unlawful new use of information already collected.

11. Contact CyberStream

Administration regularly monitors and reviews privacy and legal correspondence. You may also contact us by post or through the alternate contact above.