Data Processing and Confidentiality Policy

01Our commitment to confidentiality

Any information you share with us in the course of an engagement is treated as confidential. We use it only to deliver the services you have requested, and we do not disclose it to unrelated third parties or use it for any purpose beyond the agreed work, except where you have given permission or where disclosure is required by law.

02What we mean by confidential information

Confidential information includes business data, file contents, workflow details, account configurations, credentials shared for the purpose of a project, and any other non-public information you provide. It also includes the specifics of the recommendations and systems we design for you.

03How we process data during a project

When we access your systems to organize files, review workflows, or configure tools, we process only the data necessary to perform the agreed task. We work within your own accounts and environments wherever possible, so that your data remains under your control throughout the engagement.

• We access only the areas relevant to the agreed scope of work.
• We avoid copying or exporting your data unless it is necessary for the task and you have agreed.
• We handle credentials shared for a project with care and encourage their review after completion.

04Data minimization

We follow the principle of collecting and handling as little information as possible to get the job done well. If a task can be completed without accessing certain data, we prefer that path. This reduces risk for both of us and keeps our engagement focused.

05Storage and security measures

We apply reasonable technical and organizational measures to protect confidential information from unauthorized access, alteration, or loss. Access on our side is limited to what is necessary to deliver the service. While no system can be guaranteed to be perfectly secure, we take practical steps to safeguard the information we handle.

06Use of third-party tools

To deliver our services, we may use reputable third-party tools for communication, scheduling, or project organization. Where such tools process your information, they do so only to support our work, and we choose providers that maintain sensible security and privacy practices.

07Retention and deletion

We retain confidential information only as long as necessary to deliver the agreed services and to keep reasonable business records. When information is no longer needed, we take steps to delete or securely dispose of it. If you ask us to remove specific project information after completion, we will do so where our record-keeping obligations allow.

08Your ownership of your data

Your data remains yours at all times. Nothing in this policy transfers ownership of your business data to Xylentor Systems. We act as a service provider handling your information on your behalf and in line with your instructions.

09Confidentiality beyond the engagement

Our commitment to confidentiality continues after a project ends. We do not disclose the details of your systems or the information we accessed once our working relationship concludes, subject only to any legal obligations that may apply.

10Changes to this policy

We may revise this Data Processing and Confidentiality Policy as our practices or requirements evolve. The date at the top of this page indicates the most recent revision. We recommend reviewing it periodically to stay informed of how we handle your information.