# Privacy Policy — Soul In PsyAbstract LLC

**Effective date:** 2026-06-27  
**Last updated:** 2026-06-27  
**Entity:** Soul In PsyAbstract LLC, Delaware, USA  
**Contact:** sipa-core@sipa-os.org

---

## 1. Who We Are

Soul In PsyAbstract LLC ("SIPA", "we", "us") operates SIPA OS — an AI infrastructure platform — and the Soul In PsyAbstract art brand. Our products include SIPA Focus, SIPA NeuroPower, SIPA AI, SIPA Shell, and soulinpsyabstract.store.

---

## 2. Data We Collect

| Category | Examples | Purpose |
|----------|----------|---------|
| Account data | Email, name | Authentication (Auth0) |
| Usage data | Feature interactions, session data | Product improvement, analytics (PostHog) |
| Payment data | Transaction references | Payment processing (NowPayments, Wise, PayPal, Payoneer) |
| AI session data | Chat messages, coaching sessions | Delivering AI responses (Nebius, DeepSeek) |
| Art purchase data | Shipping address, order details | Order fulfillment |

We do **not** sell personal data to third parties.

---

## 3. How We Use Data

- Provide and improve our services
- Process payments and orders
- Send transactional emails (order confirmations, account updates)
- Safety monitoring (SIPA Crisis Rail — for mental health AI features)
- Legal compliance

---

## 4. AI & Mental Health Features

SIPA AI and SIPA NeuroCoach process conversation data to deliver coaching responses. For safety:
- Crisis detection keywords trigger immediate safety responses
- Session data is not used to train third-party models
- All AI inference runs through Nebius Serverless AI (GDPR-aware)

---

## 5. Data Retention

| Data type | Retention |
|-----------|-----------|
| Account data | Duration of account + 30 days after deletion |
| AI session logs | 90 days |
| Payment records | 7 years (legal requirement) |
| Analytics | 24 months |

---

## 6. Third-Party Services

| Service | Purpose | Privacy |
|---------|---------|---------|
| Auth0 | Authentication | auth0.com/privacy |
| Nebius AI | AI inference | nebius.com/privacy |
| NowPayments | Crypto payments | nowpayments.io/privacy-policy |
| Wise | Bank transfers | wise.com/gb/legal/privacy-policy |
| PayPal | Payments | paypal.com/privacy |
| Payoneer | Payments | payoneer.com/legal/privacy-policy |
| PostHog | Analytics | posthog.com/privacy |
| Cloudflare | CDN & security | cloudflare.com/privacypolicy |

---

## 7. Your Rights

Under GDPR and applicable law, you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion ("right to be forgotten")
- Data portability
- Withdraw consent at any time

To exercise these rights: **sipa-core@sipa-os.org**

---

## 8. Cookies

Our web applications use:
- **Essential cookies** — authentication sessions (Auth0)
- **Analytics cookies** — PostHog (anonymized, can be opted out)

No advertising or tracking cookies.

---

## 9. Security

- All data transmitted via TLS 1.3+
- Authentication via Auth0 (industry-standard)
- API keys stored encrypted, rotated regularly
- Forensic audit trails on all system changes (SIPA SHA-256 protocol)

---

## 10. Children

Our services are not directed to children under 13. We do not knowingly collect data from children.

---

## 11. Changes

We will notify users of material changes via email or in-app notice. Changes take effect 14 days after posting.

---

## 12. Contact

**Soul In PsyAbstract LLC**  
131 Continental Dr Suite 305, Newark, DE 19713  
sipa-core@sipa-os.org