Privacy policy

1. What this website collects

This site has no analytics, no advertising pixels, no third-party fonts, no embedded videos and no cookies other than those strictly necessary. Nothing is loaded from a third-party domain, which you can verify in your browser's network tab.

Standard web server logs record IP address, timestamp, requested URL, referrer and user agent. They are retained for 30 days and used only to diagnose faults and detect abuse.

2. What the contact form collects

Whatever you type into it: your name, email address, optionally your company, hosting details and licence key, and your message. It is delivered by email to our team and retained for as long as needed to handle the enquiry and any resulting subscription, then deleted. It is never used for marketing you did not ask for and never shared with anyone.

3. What your installation sends us

Once a day, over HTTPS, your installation sends exactly six values: the domain it is installed on, the licence key, an installation fingerprint, the product version, the PHP version, and the number of active companies. That is the complete list.

It does not send, and cannot send: customer records, invoices, ledger entries, employee or payroll data, file names, attachments, email addresses from your database, or any usage analytics. Your business data never leaves your server, because there is no code path that would transmit it.

4. Payment data

We do not process or store card details. Payments are handled by our merchant of record, who is the seller of record for your subscription and issues your tax invoice. They hold your billing name, address and payment method under their own privacy policy, and we receive only the fact of payment, your billing email and the country for tax purposes.

5. Who we share with

Our merchant of record for billing, our email provider for transactional messages, and our hosting provider for this website and the licence server. Nobody else. We do not sell data, we do not run advertising, and we have no data-sharing arrangements of any kind.

6. Your data inside Gyro Suite

For the data your business holds in its own installation, you are the data controller and we are not a processor, because we never receive it. Subject access requests, erasure requests and retention policy are yours to satisfy, and the product ships tools for all three. If your regulator asks who processes your data, the answer is that you do, on infrastructure you selected.

7. Your rights

For data we do hold, which is essentially your enquiry and your billing record, you may request a copy, a correction or deletion at any time through the contact form. We respond within 30 days and usually within one business day.

8. Changes

If this policy changes materially we will note it in the changelog and update the date above. We will not quietly broaden it.