Privacy
Policy.

1. Who we are

Zryos is a software engineering consultancy operating from hubs in Austin, Lisbon, and Singapore. We build custom software, AI systems, cloud infrastructure, and security tooling for clients worldwide. Our registered entity is Zryos Ltd. For any privacy enquiry, contact privacy@zryos.com.

2. What we collect

We collect only what is necessary to deliver our services:

• Contact data — name, email, phone number, company, when you submit a contact form or subscribe to our newsletter.
• Project data — technical requirements, code snippets, architecture diagrams, and related materials you share during engagement.
• Usage data — IP address, browser type, pages visited, and timestamps collected via server logs and analytics.
• Cookies — essential session cookies and, where enabled, analytics cookies. No third-party advertising cookies.

3. How we use your data

• To respond to enquiries and deliver engineering services.
• To send project updates, invoices, and contractual communications.
• To send our Insights newsletter — only if you opt in. Unsubscribe at any time.
• To improve our website, services, and content through anonymised analytics.
• To comply with legal obligations and protect against fraud.

4. Legal basis (GDPR)

Under the EU General Data Protection Regulation, we process personal data on the following grounds:

• Consent — newsletter subscriptions, optional analytics cookies.
• Contract — processing necessary to deliver services under a signed agreement.
• Legitimate interest — responding to enquiries, improving our website, security monitoring.
• Legal obligation — tax records, regulatory compliance, audit trails.

5. Data sharing

We do not sell your data. We share data only with:

• Cloud infrastructure providers (e.g. hosting, DNS, email delivery) under their own GDPR-compliant terms.
• Legal or regulatory authorities when required by law.
• Subcontractors engaged on your project, bound by written confidentiality agreements.

6. Data retention

We retain project data for the duration of engagement plus 3 years for warranty and audit purposes. Contact form submissions are retained for 2 years. Newsletter subscriptions are retained until you unsubscribe. Server logs are rotated every 30 days.

7. Your rights

Under GDPR and UK GDPR, you have the right to:

• Access — request a copy of your personal data.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion of your data ("right to be forgotten").
• Restriction — limit how we process your data.
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on legitimate interest.
• Withdraw consent — at any time, without affecting prior processing.

To exercise any right, email privacy@zryos.com. We respond within 30 days.

8. International transfers

As a distributed team with hubs in the US, EU, and Asia, your data may be processed outside your home jurisdiction. We rely on Standard Contractual Clauses (SCCs) and adequacy decisions for all international transfers. No data is transferred to jurisdictions lacking adequate data protection.

9. Security

We apply industry-standard security measures: TLS encryption in transit, AES-256 at rest, role-based access control, regular security audits, and least-privilege infrastructure. Despite these measures, no system is 100% secure. We will notify affected users within 72 hours of any confirmed data breach, as required by Article 33 of GDPR.

10. Cookies

Our site uses:

• Essential cookies — session management, security. No consent required.
• Analytics cookies — anonymised traffic data. Opt-in only.

You can manage cookies in your browser settings. Disabling essential cookies may affect site functionality.

11. Children's data

Our services are directed at businesses and professionals. We do not knowingly collect data from anyone under 16. If you believe we have done so inadvertently, contact privacy@zryos.com and we will delete it.

12. Changes to this policy

We may update this policy as our services evolve. Material changes will be posted on this page with an updated "Last updated" date. Continued use of our site after changes constitutes acceptance.

13. Contact

Questions about this policy? Email privacy@zryos.com or write to: Zryos Ltd, Privacy Enquiries, Austin · Lisbon · Singapore. You also have the right to lodge a complaint with your local data protection authority.