Privacy Policy

1. Who we are

Clyforge ("Clyforge", "we", "us") is an early-stage AI operations business based in Germany. We are the data controller for personal data processed through this website. You can reach us at privacy@clyforge.com. Our provider identification is in the Imprint, which will be updated with company registration details once incorporation is complete.

2. Data we collect

We collect the following categories of personal data:

• Contact data you submit through our forms: name, work email, company name, primary CRM and the content of your message.
• Usage data collected automatically: pages visited, approximate location derived from IP address, browser and device type, and referral source. We use privacy-friendly analytics that do not use cross-site tracking cookies.
• Communications data: emails and messages exchanged with us, including during an assessment or engagement.

3. How we use data

• To respond to enquiries and deliver assessments and services you request.
• To operate, secure and improve the website.
• To comply with legal obligations, including accounting and tax rules.
• To send occasional information about our services where you have asked us to, with an unsubscribe option in every message.

4. Legal bases

Under the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), we rely on: performance of a contract or pre-contractual steps (Art. 6(1)(b)); our legitimate interests in running and securing our business (Art. 6(1)(f)); compliance with legal obligations (Art. 6(1)(c)); and your consent where required (Art. 6(1)(a)).

5. Client data during engagements

When we build systems inside a client's CRM, automation or data warehouse accounts, we act as a data processor on the client's instructions under a written data processing agreement. We access only the data necessary for the engagement, do not use client data to train models, and delete or return it on completion.

6. Sharing and international transfers

We share data only with service providers who help us run the website and business (hosting, analytics, email), under contracts that restrict their use of the data. Where providers are located outside the European Economic Area, transfers are protected by Standard Contractual Clauses or an adequacy decision.

7. Retention

Enquiry data is kept for up to 24 months after our last contact unless an engagement follows. Contractual and accounting records are kept for the periods required by German commercial and tax law (generally six to ten years under the HGB and AO). Analytics data is aggregated and retained for up to 24 months.

8. Your rights

You have the right to access, rectify, erase, restrict and object to the processing of your personal data, to data portability, and to withdraw consent at any time. To exercise these rights, email privacy@clyforge.com. You may also lodge a complaint with a data protection supervisory authority, in particular the authority of the German federal state in which we are established. A list of all German authorities is published by the Federal Commissioner for Data Protection and Freedom of Information (BfDI) at www.bfdi.bund.de.

9. Security

We apply technical and organisational measures appropriate to the risk, including encryption in transit, least-privilege access and logging. No system is perfectly secure; if we become aware of a breach affecting your data we will notify you and the relevant authority as required by law.

10. Cookies

See our Cookie Policy for details of the cookies and similar technologies used on this site.

11. Changes

We may update this policy from time to time. The date at the top indicates the latest revision. Material changes will be highlighted on this page.