Who we are
The website cydolabs.com is run by CYDO LABS (PVT) LTD (Company No. PV 00378280), a private limited company incorporated in Sri Lanka under the Companies Act No. 7 of 2007, with its registered office at 179/12 B, Alwis Watta, Palatota, Kalutara 12000, Sri Lanka ("CYDO Labs", "we"). We are the data controller: we decide how the data described here is used.
Contact us about privacy at info@cydolabs.com.
What we collect
- Details you type into the contact form, the Project Scoper or the concierge: your name, email address, company, country, message, and optionally timeline, budget range and phone number.
- Concierge conversations, only if you choose to share the transcript with us.
- Job applications sent through the careers page.
- Anonymous, aggregated page statistics from Vercel Web Analytics, which does not use cookies.
What we do not collect
- We do not store IP addresses with your enquiry. Short-lived rate limits use a one-way hash that cannot be reversed.
- We do not use advertising or tracking cookies.
- We do not record calls or conversations by default. The microphone and camera are never used until you click and your browser asks for permission.
Why we use it
- To reply to your enquiry and discuss a possible project. This is based on your consent and our legitimate interest in answering you.
- To protect the site from spam and abuse.
- To understand which pages are useful, using anonymous statistics.
Who processes it for us
We use these providers. Each processes data only to provide its service to us.
- Vercel: website hosting and cookieless analytics.
- Supabase: storage of enquiries.
- Resend: sending our reply and confirmation emails.
- Cloudflare Turnstile: checking that forms are sent by people, not bots.
- Cal.com: booking calls, only when you open the booking calendar.
- Anthropic: generating answers in the typed concierge from your question and site content.
- Napster and its AI model provider: running the voice and video concierge, only when you choose to talk. Napster keeps a transcript during the session; we delete it when the session ends unless you chose to save it.
International transfers
Some providers store or process data outside Sri Lanka, including in the United States and the European Union. We choose providers that offer contractual protections for personal data.
How long we keep it
We keep enquiries for up to 24 months after our last contact with you, then delete them, unless they become part of a contract we must keep for longer.
Voice conversations: nothing is kept by default. When a session ends we ask Napster to delete it, with its transcript. If you ticked "Save this conversation", we keep the transcript and a short summary for up to 24 months so a person can follow up. Email info@cydolabs.com to have a saved conversation deleted sooner.
Your rights
Under Sri Lanka’s Personal Data Protection Act, No. 9 of 2022, and, where it applies, the EU and UK GDPR, you can ask to see, correct or delete your data, withdraw consent, or object to how we use it.
Email info@cydolabs.com. We will reply within one month. You may also complain to the Data Protection Authority of Sri Lanka or your local supervisory authority.
Changes
We will update this page if our practices change, and show the new date at the top.