Privacy Policy

Who we are and what this policy covers

PYD ENTERPRISES PRIVATE LIMITED ("PYD ENTERPRISES", "we", "us") is a private limited company incorporated in India (CIN U47890MH2026PTC466054) with its registered office at 14 Floor-1 Plot-199, Maria Bhuvan P Dmello Rd, Mumbai G.P.O., Mumbai, Maharashtra 400001, India. We make software that analyzes legacy source code and extracts specifications from it.

This policy explains how we handle personal data when you visit pydenterprises.com, request a trial or Discovery Scan, hold a license, contact support, or apply for a job. It does not cover data inside a PYD ENTERPRISES deployment that you operate: that data is under your control and your own policies apply.

What we never receive: your source code

PYD ENTERPRISES runs inside your data center or private VPC, including fully air-gapped environments. The software does not send source code, copybooks, ASTs, extracted rules, specifications, test fixtures or file names to PYD ENTERPRISES PRIVATE LIMITED or to anyone else. There is no telemetry channel and no online license check.

If you share a log excerpt or diagnostic bundle with our support team, you choose what goes in it. Our diagnostic tool produces bundles with source text, identifiers and file paths redacted by default, and you can review the bundle before sending it. We never use customer code, or anything derived from it, to train machine learning models.

Personal data we process

• Account and licensing data: name, work email, company, role, license entitlements, license key identifiers, invoices and billing contacts.
• Support data: the contents of tickets and emails you send us, including any attachments you choose to share, and the names of the people who raise them.
• Sales and inquiry data: what you submit through forms on pydenterprises.com (name, work email, company, role, approximate codebase size, deployment preference, message), plus our notes from calls.
• Website data: IP address, browser type, pages viewed and referrer, collected by our hosting provider in server logs and, only if you consent, by privacy-preserving analytics. See the Cookie Policy.
• Recruiting data: CVs, application answers and interview notes for people who apply to work with us.

We do not ask for and do not want special categories of personal data. Forms on pydenterprises.com tell you not to paste code or identifiers from your systems.

Why we use it and on what basis

• To provide and license the software and to deliver support: performance of a contract.
• To answer inquiries, run trials and Discovery Scans, and send information you asked for: steps taken at your request before a contract, or our legitimate interest in responding to business inquiries.
• To secure our website and license service and prevent abuse: legitimate interest.
• To send product and research updates to people who opted in: consent, which you can withdraw at any time from the unsubscribe page or any email footer.
• To meet tax, accounting and legal obligations: legal obligation.
• Website analytics: consent.

India: Digital Personal Data Protection Act, 2023

For data principals in India, PYD ENTERPRISES PRIVATE LIMITED acts as a data fiduciary for the personal data described above and processes it in line with the Digital Personal Data Protection Act, 2023 and the rules made under it. We process personal data for the specific purposes stated in this policy, on your consent or for the legitimate uses the Act permits, and we retain it only as long as those purposes require.

You may request a summary of the personal data we hold about you, its correction, completion, updating or erasure, and you may nominate another person to exercise these rights on your behalf. You can withdraw consent as easily as you gave it. Our grievance contact for India is listed under "Contact" below, and we respond to grievances within the period the rules prescribe. If you are not satisfied with our response you may approach the Data Protection Board of India.

Other jurisdictions

If you are in the European Economic Area, the United Kingdom or Switzerland, you have the rights given by the GDPR and UK GDPR: access, rectification, erasure, restriction, portability and objection, and the right to complain to your supervisory authority. Transfers out of those regions rely on the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.

If you are a California resident, we do not sell or share personal information as those terms are defined in the CCPA as amended by the CPRA, and we do not use sensitive personal information. You may request to know, correct or delete personal information we hold about you.

Sharing and subprocessors

We share personal data only with service providers that help us run the business (cloud hosting for our website and license service, email delivery, support ticketing, CRM, and accounting), under written agreements that limit their use of the data. The current list is on the subprocessors page. We may disclose data when required by law, or in connection with a merger or acquisition subject to this policy. We do not sell personal data.

Retention and security

We keep account and licensing records for the life of the license plus the period tax and accounting law requires (generally up to eight years). Support tickets are kept for three years after closure. Inquiry data with no resulting relationship is deleted after 24 months of inactivity. Recruiting data is kept for 12 months after a hiring decision unless you ask us to keep it longer.

We protect personal data with access controls tied to single sign-on, encryption in transit and at rest, logging and least-privilege administration, and our controls are covered by our SOC 2 Type II report and ISO 27001 certification.

Contact

Privacy questions and requests: privacy@pydenterprises.com. Grievance contact for India: Grievance Officer, PYD ENTERPRISES PRIVATE LIMITED, 14 Floor-1 Plot-199, Maria Bhuvan P Dmello Rd, Mumbai G.P.O., Mumbai, Maharashtra 400001, India, privacy@pydenterprises.com. We confirm receipt within 3 business days and respond within 30 days, or sooner where the law requires.