Privacy Policy

1. Introduction

Wyriz Technology ("Wyriz," "we," "us," or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website wyriz.dev, use our services, or otherwise interact with us.

This policy applies to individuals and businesses located in the United States, Canada, United Kingdom, Australia, Singapore, New Zealand, and all other jurisdictions from which our services are accessed. We comply with applicable data protection laws including but not limited to the GDPR (UK), CCPA/CPRA (California, USA), PIPEDA (Canada), the Privacy Act 1988 (Australia), the Personal Data Protection Act 2012 (Singapore), and the Privacy Act 2020 (New Zealand).

2. Information We Collect

2.1 Information You Provide Directly

• Contact Information: Name, email address, phone number, company name, and job title when you fill out forms, book discovery calls, or contact us.
• Business Information: Revenue data, operational details, and other business metrics shared during consultations and audits.
• Communications: Content of emails, messages, feedback, complaints, and queries submitted through our contact forms.
• Voice Data: If you interact with our AI voice agent ("Riz"), audio recordings and transcriptions of your conversation may be processed in real time. Conversations are not stored beyond the active session unless you provide explicit consent.

2.2 Information Collected Automatically

• Device & Browser Data: IP address, browser type, operating system, device identifiers, and screen resolution.
• Usage Data: Pages visited, time spent on pages, referring URLs, click patterns, and navigation paths.
• Cookies & Similar Technologies: We use essential cookies to ensure site functionality. See our Cookie Policy (Section 10) for details.

2.3 Information from Third Parties

• Scheduling data from Cal.com when you book appointments.
• Publicly available business information for pre-consultation research.

3. How We Use Your Information

We process your personal data for the following purposes:

• To provide, maintain, and improve our consulting and technology services.
• To respond to inquiries, complaints, and support requests.
• To schedule and conduct discovery calls and consultations.
• To prepare business audits, strategy proposals, and deliverables.
• To send service-related communications (not marketing, unless you opt in).
• To comply with legal obligations and enforce our terms.
• To detect, prevent, and address fraud, security issues, or technical problems.
• To analyze website usage and improve user experience.

4. Legal Basis for Processing (UK/EU/International)

Where applicable, we process personal data under one or more of the following legal bases:

• Consent: Where you have given clear consent for us to process your data for a specific purpose.
• Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these are not overridden by your rights.
• Legal Obligation: Where processing is necessary for compliance with a legal obligation.

5. Data Sharing & Disclosure

We do not sell, rent, or trade your personal data. We may share your data with:

• Service Providers: Trusted third-party vendors who assist in delivering our services (e.g., hosting providers, email services, scheduling tools, analytics platforms). All providers are bound by data processing agreements.
• Professional Advisors: Lawyers, accountants, and auditors where necessary.
• Legal Authorities: When required by law, subpoena, court order, or to protect our rights, safety, or property.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

6. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by relevant authorities.
• Adequacy decisions where applicable.
• Binding corporate rules or certified frameworks.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by law. Specific retention periods:

• Client project data: Duration of engagement plus 7 years for legal and tax compliance.
• Contact form submissions: Up to 2 years unless a business relationship is established.
• Website analytics data: Up to 26 months in anonymized/aggregated form.
• AI voice agent data: Not retained beyond the active session unless consent is given.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

8.1 All Jurisdictions

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Withdrawal of Consent: Withdraw consent at any time where processing is based on consent.

8.2 United States (CCPA/CPRA — California Residents)

• Right to know what personal information is collected, used, shared, or sold.
• Right to delete personal information held by us.
• Right to opt out of the sale or sharing of personal information. We do not sell your data.
• Right to non-discrimination for exercising your privacy rights.
• Right to correct inaccurate personal information.
• Right to limit use and disclosure of sensitive personal information.

8.3 Canada (PIPEDA)

• Right to access your personal information held by us.
• Right to challenge the accuracy and completeness of your data.
• Right to withdraw consent (subject to legal or contractual restrictions).

8.4 United Kingdom (UK GDPR)

• Right to access, rectification, erasure, restriction of processing, data portability, and to object to processing.
• Right to lodge a complaint with the Information Commissioner's Office (ICO).

8.5 Australia (Privacy Act 1988)

• Right to access and correct personal information.
• Right to complain about a breach of the Australian Privacy Principles (APPs).
• Right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

8.6 Singapore (PDPA)

• Right to access and correct your personal data.
• Right to withdraw consent for the collection, use, or disclosure of your data.
• Right to request data portability.

8.7 New Zealand (Privacy Act 2020)

• Right to access and request correction of personal information.
• Right to lodge a complaint with the Office of the Privacy Commissioner.

To exercise any of these rights, please contact us at hello@wyriz.dev or use our Contact & Complaints Form.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (TLS/SSL) and at rest where applicable.
• Access controls and authentication for internal systems.
• Regular security assessments and vulnerability testing.
• Confidentiality agreements with all team members and contractors.

While we take all reasonable precautions, no method of transmission over the Internet or electronic storage is 100% secure.

10. Cookie Policy

Our website uses the following types of cookies:

• Essential Cookies: Necessary for the website to function properly (e.g., session management, security).
• Analytics Cookies: Help us understand how visitors interact with our website. Data is anonymized where possible.
• Functional Cookies: Enable enhanced functionality such as scheduling integrations (Cal.com).

We do not use advertising or tracking cookies. You can manage your cookie preferences through your browser settings. Disabling essential cookies may affect website functionality.

11. Third-Party Services

Our website integrates with the following third-party services:

• Cal.com: For scheduling discovery calls and appointments.
• ElevenLabs: For powering the Riz AI voice agent conversational experience.
• Google Fonts: For typography rendering.

Each third-party service operates under its own privacy policy. We encourage you to review their policies.

12. Children's Privacy

Our services are designed for businesses and professionals. We do not knowingly collect personal data from individuals under the age of 18 (or the applicable age of majority in your jurisdiction). If we learn that we have collected data from a minor, we will promptly delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. For material changes, we will make reasonable efforts to notify you via email or a prominent notice on our website.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at:

You may also submit a request through our Contact & Complaints Form.