Privacy Policy

Information We Collect

We collect information in two ways: directly from you when you choose to interact with us, and automatically through standard web technologies as you browse our site. In both cases, we collect only what is necessary to provide our services and communicate effectively with you.

When you fill out a contact form, book a discovery call, or reach out via email, you may provide personal details such as your full name, job title, business email address, phone number, company name, and the nature of your enquiry. This information is used solely to respond to you and, where relevant, to initiate a service engagement.

Our website also automatically collects non-personal usage data including your IP address, browser type, device information, pages visited, time spent on each page, and the source through which you arrived at our site. This data is aggregated and used only for improving site performance and content relevance.

• Full name, job title, and contact details
• Business email address and phone number
• Company name and industry
• Enquiry details submitted through forms
• IP address, browser type, and device information
• Pages visited, session duration, and referral sources

How We Use Your Information

The information we collect is used exclusively to operate our business, deliver our services, and maintain a meaningful relationship with our clients and prospects. We do not use your data for third-party advertising, social media targeting, or any purpose unrelated to what you would reasonably expect when engaging with TechYard Systems.

When you submit an enquiry, we use your contact information to respond promptly and route your request to the right member of our team. During an active service engagement, we may use your business information to tailor our AI solutions, configure access controls, and communicate project updates.

We use anonymised, aggregated analytics data to understand how visitors navigate our site, identify content that resonates, and improve the overall experience.

• Responding to enquiries and scheduling discovery calls
• Delivering and configuring agentic AI and engineering services
• Sending service updates, proposals, and relevant communications
• Analysing site usage to improve content and performance
• Complying with legal and contractual obligations

Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to any third party under any circumstances. Your data is not a product. The only instances in which we share any information with external parties are those strictly necessary to operate our services, and in every such case, the receiving party is bound by confidentiality obligations.

When we build and operate AI agents on your behalf, we use the Anthropic Claude API under an enterprise agreement that legally prohibits Anthropic from using your data to train or improve their global models. Your inputs, outputs, and business data remain within your isolated environment and are never accessible to other users or companies.

We may share limited information with trusted operational providers such as CRM platforms, scheduling tools, and analytics services.

• With operational service providers under strict confidentiality agreements
• With Anthropic via enterprise API terms that prohibit training on your data
• When required by law, court order, or a valid regulatory request
• To protect the safety, rights, or property of TechYard Systems or its clients

Data Security and Protection

We implement the same enterprise-grade security standards in our own systems that we deliver for our clients. Every piece of data transmitted to or from our services is encrypted in transit, and all stored data is encrypted at rest using modern, industry-recognised algorithms trusted by major financial institutions worldwide.

Access to sensitive data within TechYard Systems is governed by the principle of least privilege. Only the personnel who need a specific piece of information to perform their role are granted access to it.

For AI agent deployments, we use the Model Context Protocol (MCP) to sandbox each agent, granting it access only to the specific data sources and tools required for its defined task.

• AES 256 encryption for all data at rest
• TLS 1.2 or higher for all data in transit
• Role based access controls with the principle of least privilege
• MCP sandboxing to limit AI agent data access to defined scopes
• Human-in-the-loop approval for all external-facing AI actions
• Regular internal security reviews and vulnerability assessments

Cookies and Tracking Technologies

Our website uses cookies to support basic functionality and to understand how visitors engage with our content. Cookies are small text files stored on your device by your browser.

We use essential cookies that are required for the site to function correctly. We also use analytics cookies from providers such as Google Analytics to understand traffic patterns in aggregate. These analytics cookies do not collect personally identifiable information.

You can control cookie behaviour through your browser settings. Disabling cookies may affect the functionality of certain parts of our website. We do not use cookies to serve personalised advertisements or track you across third-party websites.

Your Rights

Depending on your location and the applicable data protection legislation, you hold specific rights in relation to the personal data we process. We are committed to respecting and facilitating these rights. To exercise any of the rights listed below, please contact us directly and we will respond within a reasonable timeframe, and no later than 30 days.

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete information
• Right to erasure — request deletion of your personal data where applicable
• Right to restrict processing — ask us to limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to our processing where it is based on legitimate interests
• Right to withdraw consent — at any time, where processing relies on consent