Privacy policy
Last updated
This policy explains what information HeptaKyklos collects through heptakyklos.com, why, and what you can ask us to do with it. We collect as little as we can.
Who we are
HeptaKyklos Software Studios, based in Nairobi, Kenya, builds websites, apps and custom software. For anything about your information, email hello@heptakyklos.com.
What we collect, and why
When you place an order on Start a project, we receive your name, your email, your WhatsApp number if you give it, what you want built and your answers about it, the files you send, your budget and timing. We use them only to contact you, finalise your order and build what you ordered. Your order is kept in our database (with Cloudflare), and your files in our file storage. Your private order link works only for you: we keep a coded form of it, not the link itself.
The follow-up questions in the order form are written by an AI service, DeepSeek, which processes data in China. To write them, it receives what you want built, your choices and your description, but not your name or contact details. Please do not put personal or confidential information in your description.
When you email or message us, we receive what you send, and use it the same way.
When you visit the site, our hosting provider handles your request as any website must, which involves your IP address and the address of the page. It also tells our site which country the request comes from, which we use only to show prices in your currency. We do not store your IP address or your country.
AI in the software we build
When a client’s software includes an AI agent, it works from that client’s own data and serves only that client. We use major AI providers by default, and models on our own servers for sensitive data. The client decides which actions wait for their approval. How a client’s data is handled is set out in that client’s project agreement.
Cookies and tracking
The site uses no cookies, no analytics and no advertising trackers. It keeps one small note in your browser’s session storage to remember that you have seen the opening animation, so it does not play on every page; it is deleted when you close the tab. Fonts are served from our own site, so no third party learns that you visited.
Who else handles your information
We do not sell or share your information. We use a few providers to run the site:
- Cloudflare hosts the site and handles every visit.
- Resend emails your order to us, and its confirmation to you.
- DeepSeek writes the follow-up questions in the order form (see above).
These providers may process information outside your country, under their own data protection commitments.
How long we keep it
We keep messages for as long as we are talking with you, and afterwards for as long as we need them for your project, our records or the law.
Your rights
You can ask us to show you the information we hold about you, to correct it, or to delete it, and you can object to how we use it. Email us and we will answer within a reasonable time. You can also complain to the data protection authority in your country; in Kenya, that is the Office of the Data Protection Commissioner.
Children
The site is meant for businesses and adults, not for children.
Changes
If this policy changes, the new version will appear here with a new date at the top.