Revised 2026-11-07
Privacy policy
This policy explains what personal data this website collects, why, who processes it, how long we keep it, and the choices you have. It covers wytor.ai only. Each WYTOR product has its own policy on its own site or in its app.
1. Who we are
WYTOR is the brand of a company being incorporated in Goa, India (proposed name, application filed 6 November 2026: Wytor Technologies (OPC) Private Limited). Until incorporation completes, this website is operated by Carson Rodrigues, an individual based in Goa, India, who decides how and why your personal data is used. Under India's Digital Personal Data Protection Act, 2023 that makes him the Data Fiduciary; under the GDPR and UK GDPR, the controller. When the company is incorporated, it takes over this role and this page will say so.
Contact: privacy@wytor.ai.
2. What we collect
Enquiries
What you type into the contact form: your name, email address, the reason for the enquiry, your message, and, for enterprise enquiries, your organisation, role, the problem, scope, budget range and timeline. We also record the country of your connection and your browser type, to tell people from bots.
What you send to any wytor.ai address, and our replies.
Server logs
Our hosting provider, Cloudflare, logs requests (IP address, page, time, browser) to run and protect the site. We use these logs for security and debugging only.
Usage analytics
We use Cloudflare Web Analytics, which sets no cookies. It gives us aggregate counts (pages viewed, countries, browsers), not profiles of people.
We also count, on our own server, which pages are viewed and which buttons and links are clicked on this site, with the site you came from, campaign tags in the link, your country and your device type. To count visitors without cookies, we derive a code from your IP address and browser that changes every day. The IP address itself is not stored, and the code cannot be linked across days or back to you. Nothing is stored on your device, so there is no cookie banner.
Spam protection
The contact form may use Cloudflare Turnstile to check that a request comes from a person. It does not require you to solve a puzzle and does not track you across sites.
What we do not collect
No account, no payment details, no precise location, no tracking cookies.
3. Why, and on what basis
- To reply to you and consider working together: your consent when you send the form, and our legitimate interest in answering.
- To keep the site running and safe: legitimate interest (GDPR) and legitimate use (DPDP).
- To keep records of business conversations: legitimate interest, and the law where an engagement follows.
- To consider a job or collaboration: your consent when you write to us (see section 9).
We do not sell personal data and do not use it for third-party advertising.
4. Who processes data for us
| Provider | What for | Where |
|---|---|---|
| Cloudflare | Hosting, DNS, request logs, the enquiry store (D1), Turnstile, cookieless analytics, inbound email routing, and the notification an enquiry sends to our inbox | Global network, outside India |
| Our mailbox provider | Where we read and answer mail sent to wytor.ai addresses | Outside India |
We share data when a law, court order or authority requires it, or to protect someone's safety. If WYTOR changes hands, your data would move with it under this policy and we would tell you.
5. Data outside India
The providers above process data outside India, mostly in the United States and Europe. Indian law allows this except to countries the government restricts. Where the GDPR or UK GDPR applies, we rely on the safeguards these providers offer, such as standard contractual clauses.
6. How long we keep it
- Enquiries and email: 24 months after the last message, or as long as a business relationship lasts, plus what tax and accounting law requires.
- Server logs: as long as Cloudflare keeps them for our plan, typically days, not months.
- Analytics: Cloudflare's counts are aggregate. Our own page and click counts are kept for 13 months, then deleted.
- Candidate material: see section 9.
7. Your rights
Wherever you live, you can ask us to tell you what we hold about you, correct it, delete it, or stop using it, and to withdraw consent you gave. Under the DPDP Act you can also nominate someone to exercise these rights for you. Under the GDPR or UK GDPR you can object to processing based on legitimate interests, ask us to restrict it, and ask for a portable copy.
Email privacy@wytor.ai from the address you used. We reply within 30 days, usually much sooner. If you are not satisfied, you can complain to the Data Protection Board of India or to your local data protection authority (in the UK, the Information Commissioner's Office).
8. Grievance officer
Carson Rodrigues, Grievance Officer, WYTOR, Goa, India. Email: privacy@wytor.ai. We acknowledge complaints within 24 hours and resolve them within 15 days, as India's Information Technology Rules, 2021 require.
9. Candidates
If you write to us about a role or collaboration, we keep what you send (your note, links, any CV) while we consider it and for at most six months after, unless you ask us to delete it sooner. We make no automated decisions about candidates. We never ask for government identifiers at this stage.
10. Children
This site is not directed at children under 18, and we do not knowingly collect their data. If we learn we have, we delete it.
11. Security
Everything is served over HTTPS. The enquiry store is reachable only by the people who run WYTOR. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires. Security researchers: see the disclosure policy.
12. Changes
When this policy changes, the revision date at the top of the page changes with it. A significant change is also announced on the insights page.