Legal & Privacy.

Company identity.

This website is operated by KALYDU.AI LTD, a private limited company registered in the Republic of Cyprus.

Terms of use.

By accessing this website or engaging KALYDU.AI for services, you agree to the terms below. These terms govern use of the public site only; engagement work is governed by a separate signed agreement.

Site content

The text, design, photography, and code on this site are the property of KALYDU.AI LTD or used under licence. You may quote short excerpts with attribution. You may not republish substantial portions, scrape the site at scale, or use any content to train a generative model without our written permission.

No advice without engagement

Material on this site — including blog posts, case descriptions, and the contents of any free intro call, coffee chat, or written diagnosis — is provided for informational purposes only. It does not constitute professional, legal, financial, or fiduciary advice. Acting on it is at your own risk until a signed engagement is in place.

Submissions

When you fill out a form on this site (booking a chat, sending a problem diagnosis, or requesting a workshop), you confirm that the information you provide is accurate and that you are authorised to share it. We treat the contents as confidential by default and as Confidential Information under any subsequent NDA.

Liability

To the extent permitted by Cypriot and EU law, KALYDU.AI LTD is not liable for indirect or consequential loss arising from use of this website. Nothing in these terms excludes liability for fraud, wilful misconduct, or any liability that cannot lawfully be excluded.

Governing law

These terms are governed by the law of the Republic of Cyprus. Disputes will be resolved in the courts of Larnaca, without prejudice to mandatory consumer-protection rules.

Privacy policy.

This section explains how KALYDU.AI LTD processes personal data, as data controller, under the EU General Data Protection Regulation (GDPR) and the Cypriot Personal Data Protection Law of 2018.

If you only browse the public site, the data we hold about you is minimal (see Cookies, §9). If you submit a form or email us, we hold what you sent us until you ask us to delete it or until our retention periods expire.

Data we collect.

From you, directly

• Contact details — name, work email, company, role, when you submit a form or email us.
• Problem statements & attachments — the text and files you upload when requesting a diagnosis or workshop. Anything you choose to send.
• Scheduling data — the date and time of a chat or intro call you book.

Automatically, when you visit the site

• Technical logs — IP address, browser type, pages visited, timestamp. Held briefly for security and to debug.
• Aggregated analytics — anonymised usage statistics, only if you accept analytics cookies (see §9).

We do not use trackers or third-party advertising pixels, and we do not sell or rent personal data to anyone.

Legal basis & purposes.

We rely on the following lawful bases under Article 6 GDPR:

• Consent — for analytics cookies and any future marketing emails. You can withdraw at any time.
• Steps prior to a contract — to respond to enquiries, schedule calls, and produce written diagnoses you have asked us for.
• Contract — to deliver paid engagements you have signed for.
• Legitimate interests — to keep the site secure, prevent abuse, and improve how we communicate. We balance these interests against your rights and freedoms.
• Legal obligation — to retain accounting and tax records for the period required by Cypriot law.

Sharing & processors.

We use a small number of trusted processors to run the business. Each is bound by a written data-processing agreement.

• Email & calendar — a major EU-hosted productivity provider, for hosting our inbox and scheduling.
• Site hosting — an EU-based hosting provider for this website and its forms.
• Accounting — a Cyprus-based accounting firm for invoicing and statutory records.
• Identity providers — only when you explicitly use a sign-in option (none at present).

If any processor is located outside the European Economic Area, we ensure transfers are covered by Standard Contractual Clauses or an equivalent safeguard.

Retention.

• Form submissions and email correspondence — up to 24 months from last contact, unless an engagement is in flight or you ask us to delete sooner.
• Workshop & diagnosis artifacts — held for 36 months after delivery, then archived encrypted or deleted on request.
• Financial records — 7 years, as required by Cypriot tax and corporate law.
• Server logs — 30 days for security purposes.

Your rights.

Under GDPR you have the right to:

• Access the personal data we hold about you.
• Rectify data that is inaccurate or incomplete.
• Erase data we no longer need to keep ("right to be forgotten").
• Restrict or object to processing based on legitimate interests.
• Port your data to another provider in a machine-readable format.
• Withdraw consent at any time, without affecting the lawfulness of past processing.
• Lodge a complaint with the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus.

To exercise any of these, write to privacy@kalydu.ai. We respond within 30 days.

Cookies.

This site uses two kinds of cookies:

• Strictly necessary — required for the site to function (e.g. remembering you have dismissed the cookie banner). No consent required.
• Analytics (optional) — anonymised, aggregated usage statistics. Off by default. We ask before setting them.

No advertising cookies, social-media trackers, or fingerprinting are used on this site.

You can clear cookies at any time through your browser settings. If you decline analytics, we will not set them and will remember your choice.

Security.

We apply industry-standard technical and organisational measures, including TLS for all transport, encryption at rest for sensitive data, principle-of-least-privilege access controls, mandatory MFA for all employees and contractors with access to client data, and regular review of who can see what.

If we become aware of a personal-data breach that is likely to result in risk to your rights and freedoms, we will notify the supervisory authority within 72 hours and you, where required, without undue delay.

Changes to this notice.

We may update this notice from time to time. The "Last updated" date at the top reflects the most recent change. Material changes will be flagged in advance — at the top of this page and, where appropriate, by email to clients with active engagements.

Contact & data protection.

For privacy questions, data-subject requests, or anything else covered by this notice, write to privacy@kalydu.ai. For general business enquiries, info@kalydu.ai is the right address.

The data-protection supervisory authority for KALYDU.AI LTD is the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus. You have the right to lodge a complaint there at any time.