Privacy Policy

1. Scope

This policy describes how we handle information collected through the rewired.io website, including the contact form. Customer prompts, documents, and API traffic sent to provisioned endpoints are covered by section 5 and, in more detail, by the Data Processing Addendum (DPA) attached to your service agreement.

2. What we collect on this website

• Contact form submissions. Name, email address, company (optional), inquiry type, and the message you write. You choose what to include.
• Standard server and CDN logs. Our hosting provider records request metadata such as IP address, user agent, referrer, and timestamp for security and abuse prevention.

3. What we do not do

• We run no third-party analytics, advertising, or behavioural tracking scripts on this website.
• We set no advertising cookies.
• Web fonts are served from our own origin; visiting this site sends no request to a font provider.
• We do not sell, rent, or share your information with data brokers.

4. How we use website information

We use inquiry information only to respond to you, assess which access tier fits your constraints, and carry out onboarding if you become a customer. We do not add you to marketing sequences you did not ask for. If you select “Product updates,” you can opt out at any time by replying to any message.

5. Customer prompts and documents

These are our contractual and architectural commitments for provisioned inference services:

• No training. Your prompts, documents, and outputs are never used to train or fine-tune any model, ours or a third party's.
• No third-party model providers. Inference runs on hardware we operate. Your prompts are not forwarded to a public model API.
• Retention is configurable and documented. The default posture is not to retain prompt or completion content. Operational metadata needed for billing, rate limiting, and abuse prevention is retained. Your DPA states the exact retention period and any logging you opt into.
• Your content is yours. We claim no ownership of your inputs or outputs.

6. Subprocessors

We keep the subprocessor list deliberately short. For the website and sales process we currently use Vercel for hosting and delivery, Web3Forms for contact submissions, and an email provider for correspondence. We maintain a current, named list and provide it on request; customers under a DPA receive advance notice of material changes.

7. Retention and deletion

Inquiry records are kept while they remain relevant to an active or prospective business relationship, then deleted. You can request deletion of your inquiry at any time and we will action it within 30 days. Customer service data retention is governed by your service agreement, including deletion on termination.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, or obtain a copy of your personal information, and to object to certain processing. California residents have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them; we do not sell personal information as defined by those statutes. Where the GDPR applies, we act as controller for website and inquiry data and as processor for customer service data. To exercise any right, use the contact form on the homepage.

9. Security

Access to production systems is limited to personnel who need it, over authenticated channels. We assess hosting options against your data-residency and compliance requirements and confirm the location and infrastructure in writing before onboarding, subject to availability. We document the agreed operator and data flow for your review.

10. Compliance status, stated plainly

We would rather you hear this from us than discover it in diligence. rewired.io is an owner-operated infrastructure business. We are not currently SOC 2 certified, and we do not claim to be. What we do provide is a documented control set, a named operator, a defined data flow, and a hardware location you can point your auditor at. We will sign a DPA. If your procurement process requires a completed certification today, tell us early and we will say so directly rather than waste your review cycle.

We don’t currently support workloads involving protected health information. Please don’t send patient data. Healthcare requirements can be discussed for future engagements.

11. Changes

If we change this policy we will update the date above. For material changes affecting customers, we provide notice under the terms of the service agreement.

12. Contact

Rewired Consulting LLC, USA. Reach us through the contact form on the homepage for privacy requests, DPA requests, or the current subprocessor list.