Privacy Policy

At a glance

The short version

• We collect what you type into the contact form, plus basic request data (IP address and browser) used for security.
• Analytics run only if you opt in. You can decline with one click and change your mind at any time.
• We do not sell personal information, use advertising trackers, or share data for cross-context behavioral advertising.
• Data is processed in the United States by a small number of service providers described below.
• Questions or requests: privacy@psyde.solutions.

What we collect

Information you give us

Contact form. When you write to us we collect your name, email address, and the intent you select. Depending on intent we also ask for: company name and website (Agent orchestration, Consultation); AI tools in use, primary use case, and scale (Agent orchestration); consultation type(s) (Consultation); your location and interests (Community); a portfolio link and proposal (Research collaboration); or free-text. Please do not include sensitive personal information—such as health, religious, or government-ID details—in your message; we do not need it.

Correspondence. If we reply and you continue the conversation by email, we keep that thread.

Information collected automatically

Request data. When you submit the form, and when an analytics event is sent, our server records your IP address and browser user-agent string alongside it. We use these to rate-limit the form, detect spam and abuse, and investigate security incidents. We may also derive approximate locations from IP addresses, which is not shared with third parties. We do not use any of this data to profile you.

Usage data (only with your consent). If you enable analytics we record: pages viewed, sections of a page you scroll to, links and controls you click, FAQ items you open, theme changes, that a form was submitted and which intent you chose, the page path and referrer, an approximate location derived from your IP address, and a random per-tab session identifier that is discarded when the tab closes. We never record what you type. These events are stored in our own database. The same consent also enables Google Analytics 4 as described under Cookies & storage.

Preferences (only with your consent). Your light/dark/system theme choice is stored on your device.

What we don't collect

The Site has no user accounts, payments, or public posting. We do not collect precise location, biometric, or other sensitive data, we do not buy data about you, and we do not use advertising networks or social-media pixels.

How we use information

Purposes and legal bases

We do not make decisions about you by automated means that produce legal or similarly significant effects.

Cookies & storage

What we store on your device

We group cookies and browser storage into three categories. Strictly necessary storage is always on; the Site cannot work without it. Everything else is off until you say otherwise.

Strictly necessary

Functional preferences

Analytics

Change your choices at any time via Cookie Settings, also linked in the footer. Withdrawing analytics consent stops both measurement systems, deletes the session identifier, and removes the Google Analytics cookies we can reach. The Google Analytics script is not loaded at all until you opt in. You can also clear storage through your browser settings.

Shared consent

Psysig Research Corp also operates a sister site, psysig.org, and your consent choices carry between the two. Browsers cannot share cookies between different domains, so the first time you visit without a saved choice the Site checks psysig.org for you— a single redirect that carries only a random consent ID, never your choices themselves. The choice stored for that ID is then returned over an encrypted connection. If nothing is saved there either, the banner lets you decide here.

Each time you change a choice on either site, our server records a receipt— your consent ID, which site, the decision itself, the timestamp, and your IP address and browser— so we can demonstrate when and how consent was given or withdrawn. A stored decision propagates to the other site the next time you visit it.

Global Privacy Control and Do Not Track

If your browser sends a Global Privacy Control (GPC) signal, we treat it as a decision to decline non-essential storage: analytics and preferences stay off, we do not show the cookie banner, and you can still opt in through Cookie Settings. We do not respond to the older "Do Not Track" header, which has no agreed meaning.

Third parties

Service providers that process data for us

• Hosting — a cloud hosting provider that runs the Site and its server code (United States).
• Database — a managed database provider that stores inquiries, analytics events, and admin audit logs (United States).
• Email delivery — a transactional email provider that delivers each inquiry to our inbox; the message includes the details you submitted and sets your address as the reply-to (United States).
• Google LLC — Google Analytics 4, only after you grant analytics consent. Google processes this data under its own terms and privacy policy.

These providers act on our instructions and may not use your information for their own purposes; we will identify them on request. We may also disclose information to professional advisers; to comply with law, a court order, or a lawful request; to protect the rights, safety, or security of Psyde, our users, or others; or as part of a merger, financing, or sale of assets, in which case this policy continues to apply. We may share with others at your direction.

We do not sell personal information, do not share it for cross-context behavioral advertising, do not use it for targeted advertising, and do not disclose it to third parties for their own direct-marketing purposes.

International transfers

Where data lives

We are based in the United States and the providers above store data there. If you visit from the European Economic Area, the United Kingdom, Switzerland, or elsewhere, your information is transferred to the United States, whose data-protection laws may differ from yours. Our providers rely on recognized transfer mechanisms such as the EU–US Data Privacy Framework and Standard Contractual Clauses; details are available on request.

Retention

How long we keep it

We keep personal information only as long as necessary for the purposes described here, then delete or anonymize it. In practice:

• Inquiries and correspondence — while we evaluate and respond, for as long as a conversation or working relationship continues, and for a reasonable period afterwards for business records and legal needs.
• Request data (IP address, user-agent, and approximate location) — as long as needed for rate limiting and security review, and deleted with the record it belongs to.
• Analytics events — as long as they are useful for aggregate trend analysis; we periodically prune older events.
• Admin audit logs — as long as needed for security and accountability.
• Consent record — 12 months, after which we ask again.
• Consent receipts — the log of each consent decision (consent ID, site, decision, timestamp, IP address, browser) is kept for 24 months for compliance and audit purposes.

You may ask us to delete your information sooner (see Your rights).

Security

How we protect it

The Site is served over HTTPS only. Inquiries are stored in an access-controlled database; the admin area is protected by a password, sealed short-lived sessions, and failed-login throttling; and every admin action is written to an audit log. Forms use rate limiting and spam traps. No system is perfectly secure, so we cannot guarantee absolute security; if we learn of a breach affecting you we will notify you as required by law.

Your rights

What you can ask for

Wherever you live, you can ask us to: access or receive a copy of your personal information; correct it; delete it; restrict or object to how we use it; and withdraw consent at any time (this does not affect processing that already happened). To make a request, email privacy@psyde.solutions from the address you used with us, or describe the information so we can locate it. We may ask you to verify your identity, will not discriminate against you for exercising your rights, and will respond within the time required by applicable law (usually within 30 days; up to 45 days where permitted). If we decline a request we will explain why; you can appeal by replying to our response. You may also authorize an agent to act for you if they can show your written permission.

If you are in the EEA, UK, or Switzerland — the legal bases we rely on are listed above. You may lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner's Office).

If you are a resident of California or another US state with a privacy law — you may have rights to know, delete, correct, and obtain a portable copy of your information, and to opt out of its sale, sharing for cross-context behavioral advertising, targeted advertising, and certain profiling. We do none of those things, and we honor Global Privacy Control signals as an opt-out. We do not collect sensitive personal information. For California disclosure purposes, in the past 12 months we have collected these categories: identifiers (name, email, IP address, and the approximate locations); professional information (company and role context you provide); internet activity (analytics, with consent); and the content of your messages. Sources: you and your device. Purposes and recipients: as described above. Not sold or shared.

Children

Not for kids

The Site is not directed to children under 16 and we do not knowingly collect their personal information. If you believe a child has sent us information, contact privacy@psyde.solutions and we will delete it.

Changes

Updates to this policy

We may update this policy as the Site or the law changes. The current version is always posted here with its effective date. For material changes we will give more prominent notice on the Site before they take effect. Earlier versions are available on request.