Privacy policy

1. What this website collects

This site has no analytics, no advertising pixels, no third-party fonts, no embedded videos and no cookies other than those strictly necessary. The only thing loaded from a third-party domain is Cloudflare Turnstile, the spam check on the contact page described in section 2, which you can verify in your browser's network tab.

Standard web server logs record IP address, timestamp, requested URL, referrer and user agent. They are retained for 30 days and used only to diagnose faults and detect abuse.

2. What the contact form collects

Whatever you type into it: your name, email address, optionally your company, hosting details and licence key, and your message. It is delivered by email to our team and retained for as long as needed to handle the enquiry, then deleted. If you ask to be told when Gyro Suite launches, we keep your name and email address until launch, send you one message about it, and delete them afterwards unless you become a customer. It is never used for marketing you did not ask for and never shared with anyone.

To keep spam out, the contact page uses Cloudflare Turnstile. It sends Cloudflare technical signals such as your IP address and browser details so it can tell people from bots. Cloudflare uses them to detect bots and improve that detection, not to profile you or show you advertising.

3. What your installation will send us

Once a day, over HTTPS, your installation will send exactly six values: the domain it is installed on, the licence key, an installation fingerprint, the product version, the PHP version, and the number of active companies. That is the complete list.

It does not send, and cannot send: customer records, invoices, ledger entries, employee or payroll data, file names, attachments, email addresses from your database, or any usage analytics. Your business data never leaves your server, because there is no code path that would transmit it.

4. Payment data

Nothing is on sale yet, so we take no payments and hold no payment data. When sales begin, payments will be handled by a payment provider under its own privacy policy, we will not store card details, and this section will name that provider before the first sale.

5. Who we share with

Our hosting provider for this website, and Cloudflare for the spam check on the contact page. Nobody else. When sales begin, a payment provider will be added to this list before it is used. We do not sell data, we do not run advertising, and we have no data-sharing arrangements of any kind.

6. Your data inside Gyro Suite

For the data your business holds in its own installation, you are the data controller and we are not a processor, because we never receive it. Subject access requests, erasure requests and retention policy are yours to satisfy, and the product ships tools for all three. If your regulator asks who processes your data, the answer is that you do, on infrastructure you selected.

7. Your rights

For data we do hold, which today is only your enquiry, you may request a copy, a correction or deletion at any time through the contact form. We respond within 30 days.

8. Changes

If this policy changes materially we will note it on the build log and update the date above. We will not quietly broaden it.