Privacy Policy

01 ｜ Studio Commitment

Klytos (“Klytos Studio”, “we”, “us”, or “our”), headquartered in Hyderabad, Telangana, India, operates as an AI-native systems and product engineering studio. We build sovereign software systems, multi-agent workflows, and high-performance digital interfaces for commercial clients worldwide.

We treat client confidentiality and information security as foundational engineering requirements rather than bureaucratic afterthoughts. This Privacy Policy details how we collect, handle, and protect data across our public web surfaces (klytos.studio) and during technical client engagements.

02 ｜ Information We Collect

We adhere strictly to data minimization principles. We only collect information necessary to evaluate project feasibility, initiate technical partnerships, and ensure the operational integrity of our website:

• Project Inquiry Data: When submitting an initiation inquiry via our contact form, we collect your name, business email address, optional contact number, company name, organizational size, intended service scope, and technical context notes.
• Privacy-Preserving Telemetry: We collect aggregate, pseudonymized telemetry (such as viewport resolution, referring domain, browser engine, and on-page interaction flow) through our self-hosted or EU-hosted PostHog proxy to measure technical performance and Core Web Vitals. We do not use third-party behavioral advertising trackers, cross-site trackers, or saleable ad cookies.
• Technical Logs: Server and API gateway logs record IP addresses, HTTP status codes, and user-agent strings for anti-abuse rate limiting and infrastructure security diagnostics.

03 ｜ Confidentiality & AI Data Governance

A cornerstone of our engineering philosophy is that enterprise intelligence must remain sovereign:

• Zero Training on Client Data: We never submit client proprietary codebases, schema structures, business data, or institutional knowledge to public frontier models for unauthorized model training or weight adjustments.
• Mutual NDA Protection: All technical roadmaps, API specifications, and architectural documentation shared during discovery or active sprints are governed by mutual Non-Disclosure Agreements (NDAs).
• Isolated Sandboxes & Private VPCs: When engineering retrieval pipelines (RAG), vector stores, or agent execution graphs, workloads are deployed into client-controlled VPCs, isolated containers, or dedicated SOC2-compliant infrastructure.

04 ｜ Data Retention & Disclosure

We retain contact submission details only for as long as needed to conduct technical consultations, maintain client business records, or fulfill contractual requirements. We do not sell, rent, or lease contact or client information to any third party.

We only share data with vetted infrastructure service providers (such as transactional email conduits, Supabase for contact storage, and EU-isolated PostHog analytics) strictly under data processing agreements compliant with global data privacy frameworks.

05 ｜ Your Rights & Inquiries

Regardless of your geographic location, you retain the right to request access to, correction of, or deletion of any personal data submitted to Klytos. To exercise these rights or request mutual NDA execution, initiate an inquiry through our project initiation form or contact our leadership cell directly.