Privacy Policy

When you write to us, we collect the details you choose to provide: your name, company, role, email address, country or region, how many locations or branches, what you would like help with, and how you prefer us to follow up. Optional fields, such as project type, IT contact or main decision-maker, are collected only if you complete them.

We use this information for one purpose: to assess your enquiry against our fit criteria and reply with a recommended next step. We do not use it for unrelated marketing, and we do not sell, rent or trade it.

Please do not include credentials, access keys, personal data about your customers or any other sensitive material in the form. We will never ask for them through a web enquiry.

Details you share about your systems, infrastructure, architecture, vendors, security posture or operating model are treated as confidential from the first conversation. We use them only to scope and deliver the work you have asked us to consider.

Access is limited to the people at Kyron Engineering who need it for your engagement. We do not publish, reference or reuse your architecture information, including in case studies or marketing, without your written permission. We are glad to sign a mutual non-disclosure agreement before any detailed technical discussion.

Where we use AI-assisted tooling in our work, the following rules apply to every engagement:

• Your code and data stay private. Client source code, documentation, datasets and system information are never published or shared with other clients.
• No model training on client assets. We do not use your code, data or documents to train or fine-tune any AI model, ours or a third party's, without your explicit written consent.
• Approved tooling only. Client material is processed only with tools and providers whose terms exclude training on submitted content and that meet the confidentiality commitments we have made to you.
• Scoped access. AI tools see only what is necessary for the task, and never production credentials or secrets.
• Your say. Clients may restrict or prohibit AI-assisted tooling on their assets, and we will honour that in the engagement terms.

Contact form enquiries that do not lead to an engagement are kept for up to twelve months so that we can respond and follow up, and are then deleted.

For active engagements, we keep project material only for the duration of the work and a short handover period agreed with you. At the end of the engagement, we return or securely delete client code, data and architecture information as the contract specifies, except where the law requires us to keep records, such as invoices and contracts.

You may ask us at any time to confirm what personal information we hold about you, correct it, or delete it. You may also withdraw any consent you have given, including consent relating to AI use of your assets.

To make a request, contact us through the contact page and mark your message "Privacy request". We will confirm receipt and respond within a reasonable period, and in any case within the time required by applicable law, including Indonesian data protection regulation.

We will update this page when our practices change and revise the date above. Material changes that affect an active engagement will be communicated to you directly.