Privacy Policy

Effective date: September 28, 2026
Last updated: October 18, 2026

This Privacy Policy explains how Wyoming Cloud Solutions LLC and, where applicable, CHAKMAKOVI INTERNATIONAL GROUP LIMITED handle personal information when you visit a WYOCS website, contact us, use a customer account or API, make a payment, or receive our professional services. It describes current website features identified in our implementation. A signed service agreement or data processing agreement may add terms for a particular engagement.

1. Which company is responsible

The company responsible for a particular business relationship is the company named in the proposal, order, invoice or other contract for that relationship:

• United States, Canada and the United Kingdom: Wyoming Cloud Solutions LLC, 30 N Gould St Ste N, Sheridan, Wyoming 82801, United States. Wyoming company number 2026-001951042. Contact: support@wyocs.org.
• Europe other than the United Kingdom: CHAKMAKOVI INTERNATIONAL GROUP LIMITED, Argira Zhechkova Street, 8802 Sliven, Bulgaria. Company number 207557356, VAT number BG207557356. Contact: support@wyocs.org.

Wyoming Cloud Solutions LLC handles general inquiries submitted through wyocs.org unless we tell you that another company is handling a specific inquiry or engagement. If an inquiry is referred to the European company, we will identify the responsible company when we respond or before it uses the information for that engagement. The companies act as separate controllers for the activities each independently determines. Where one company handles personal information only on the other company's instructions, the companies document that processor relationship separately.

2. Scope and customer data

This Policy covers the public website, contact and payment flows, customer portal and API interactions operated by WYOCS. When a business customer provides personal information about its staff, customers or other users for a project or hosted service, the customer may be the controller and WYOCS may process that information on the customer's behalf. In that case, the customer's privacy notice and the applicable data processing agreement also apply. This Policy does not replace those documents.

3. Information we collect

• Contact and inquiry information: name, company, business email address, the service or product you select, engagement type, budget range, timeline, and the project notes you submit. If you choose to include a phone number or other personal information in a message, we receive that too.
• Technical and security information: IP address, browser or device information, request details and information used to limit abuse. The current homepage activity counter uses an IP address to estimate daily unique visitors and count page views. When you submit an inquiry, the submission record includes the IP address and browser user-agent string.
• Account and API information: account identifiers and contact details, API key identifiers and status, service usage, request metadata, timestamps, model or service selection where applicable, and usage or billing records. The brand asset API also processes the presented key, requested asset identifier and a short-lived per-key rate-limit counter. We do not ask you to send passwords, secret keys or payment-card numbers in a contact inquiry.
• Payment and invoice information: invoice details, amount, currency, payment status, dates, payment-provider references and limited payment-method descriptors returned by the provider. Card or PayPal payment details are collected by the payment provider through its payment flow, not by the public contact form.
• Messages and support records: the content and attachments you choose to send, and records of our replies and service-related communications.
• Locally saved document drafts: the NDA Builder stores the fields you enter in that tool in your browser's local storage so that a draft can be restored. This is browser storage, not a cookie, and the draft is not sent to WYOCS by that feature.
• Third-party verification information: when Google reCAPTCHA is enabled and loaded on an inquiry form, Google receives information needed to assess whether the form interaction is abusive or automated.

Please do not send special-category or highly sensitive information, government identifiers, passwords, API secrets or full payment-card information through a general inquiry form. If a project genuinely requires sensitive information, agree on a secure transfer method with us first.

4. How and why we use information

We do not use the public website to make decisions about you that produce legal or similarly significant effects solely through automated processing. AI-generated output may be used in a requested service or API response; it is not, by itself, a verified professional or legal decision.

5. AI services and model providers

If you use a WYOCS AI API, AI-enabled product or project workflow, the prompt, files or other input you submit may be sent to the model or inference provider selected or configured for that request so that it can generate a response. WYOCS may also process request metadata, usage and billing information to operate the service. The exact provider depends on the product, selected model and service configuration.

Model providers have their own privacy, security and retention terms. We do not make a general promise here that every provider deletes inputs immediately or never uses them for service improvement. The terms applying to a particular account, model or project, including any agreed data-processing terms, determine the available protections. Do not submit confidential, regulated or sensitive personal information to an AI feature unless your service agreement expressly permits that use.

6. Who receives information

We disclose information only as needed for the purposes above, including to these categories of recipients:

• hosting, infrastructure, network-security and storage providers that operate the website, customer portal or services;
• email and communications providers used to deliver inquiry notifications and service messages;
• Google, when reCAPTCHA is active on a form;
• Stripe and PayPal when you choose a payment method they provide, and banks or payment networks involved in settling that payment;
• AI model or inference providers when an AI feature or API request requires them;
• our professional advisers, auditors, insurers and service providers who need the information for their work;
• the other WYOCS operating company where needed to route or deliver an inquiry or engagement, with its role determined by the activity; and
• public authorities, courts or other recipients where disclosure is required by law, needed to protect rights or safety, or part of a corporate transaction subject to appropriate safeguards.

We do not sell personal information for money and do not use the public website for cross-context behavioural advertising. We do not disclose personal information to advertising networks for that purpose.

7. International processing

Our operating companies and service providers may process information in the United States, Bulgaria, the European Economic Area, the United Kingdom or other countries where they operate. A country may have privacy protections different from those where you live. Where applicable law requires a transfer mechanism, the responsible company will use a legally recognised mechanism for the transfer and provide information about applicable safeguards on request. A specific customer contract or data processing agreement may contain the transfer terms for a service.

8. How long information is kept

We keep information for the period reasonably needed for the purpose for which it was collected, taking account of the relationship, applicable limitation periods, accounting and tax rules, legal duties, security and dispute needs. Different records therefore have different periods. Inquiry records may be retained while we handle the inquiry and any resulting proposal or relationship. Contract, payment and tax records may need to be kept for the period required by applicable law. Security and activity records are kept for operational, security and reporting needs. We do not claim one universal deletion period for every record.

The homepage activity counter is organised by day and rolls over as new daily activity is recorded; the most recent daily summary may remain until it is replaced. The NDA Builder draft remains in the browser's local storage until the tool removes it or the user clears the browser's site data. Payment providers may retain records under their own legal and operational policies.

9. Cookies and similar technologies

A cookie is a small file stored by a website or provider in your browser. Similar technologies include local storage. Based on the current public-site implementation:

• Customer portal session cookie: the customer portal uses a first-party session cookie named wyocs_portal to keep a signed-in session and protect account actions. It is marked HttpOnly and SameSite Strict, and Secure when the connection uses HTTPS. The browser cookie is a session cookie and is normally removed when the browser session ends.
• Google reCAPTCHA: reCAPTCHA is currently enabled for inquiry forms and is loaded when the form is in use or near the visible area. Google states that reCAPTCHA sets the _GRECAPTCHA cookie for risk analysis. Google may also process technical information under its own terms. See Google's Privacy Policy and reCAPTCHA's cookie information.
• Hosted payments: if you continue to a Stripe or PayPal payment flow, that provider may use its own cookies or similar technologies under its policy. Those provider-controlled technologies are not set by the general WYOCS page itself.
• Browser local storage: the NDA Builder saves an in-progress draft in local storage. The website also stores your selected color theme under wyocs-color-theme so that Dark, Light or System remains selected across pages and visits. The theme preference stays in your browser until you change it or clear this site's browser data; the theme control does not send that preference to WYOCS. These local storage features are not cookies and are not used for advertising.

We have not identified advertising or third-party analytics cookies in the current public-site code. Basic homepage activity measurement is performed server-side using IP-address-based daily visitor keys, not an analytics cookie. Your browser settings can block or clear cookies and local storage. Blocking the customer portal session cookie prevents the portal from keeping you signed in; blocking reCAPTCHA may prevent an inquiry form from being submitted while verification is required. Third-party providers control their own storage and preferences.

10. Protected brand asset API

WYOCS operates a read-only API for selected logos, flags and other SVG assets. An asset request requires a scoped API key. For browser embeds, the key is limited to selected images and may be restricted to specified website origins. The service processes the key, asset identifier and rate-limit counter to authenticate and limit requests. The key and origin restrictions are access controls, not a promise that a displayed image cannot be copied by someone who can view the page. The browser receives the image bytes so it can display them.

11. Your privacy rights

Your rights depend on where you live and which law applies. Subject to legal conditions and exceptions, you may have the right to request access to personal information, correction, deletion, a copy or transfer, restriction or objection to certain processing, or withdrawal of consent where processing relies on consent. You may also have rights to complain to a data-protection authority. A request does not affect processing that must continue for legal obligations, security or legal claims.

• European Economic Area: rights under the GDPR may include access, rectification, erasure, restriction, objection, portability and withdrawal of consent. You may complain to your local supervisory authority. For Bulgaria, the supervisory authority is the Commission for Personal Data Protection (CPDP).
• United Kingdom: rights under UK data-protection law may include access, correction, erasure, restriction, objection and portability. You may complain to the Information Commissioner's Office.
• Canada: rights under PIPEDA and applicable provincial privacy laws may include access to and correction of information and the ability to challenge handling. You may contact the federal Office of the Privacy Commissioner of Canada or the applicable provincial regulator.
• United States: state privacy rights apply where the relevant statute covers the company and the processing. Depending on the state, these may include access, correction, deletion, portability and opt-out rights. California residents may have rights under the CCPA, as amended, including rights to know, delete, correct and opt out of sale or sharing, where applicable.

To make a request, email support@wyocs.org with the subject “Privacy request” or use the contact form. Tell us which company or service your request concerns. We may ask for proportionate information to verify your identity or authority. We will respond within the period required by the applicable law. We will not discriminate against you for exercising a privacy right.

12. Marketing messages

We may send service-related messages needed to answer an inquiry, perform a contract, provide security notices or administer an account. We send promotional messages only where we have a valid permission or other legal basis. You can opt out using the unsubscribe instructions in a marketing message or by contacting us. An opt-out does not stop essential service, security, billing or legal notices.

13. Security

We use administrative, technical and organisational measures intended to protect information against unauthorised access, loss, alteration and disclosure. No internet transmission or storage system can be guaranteed to be completely secure. If a personal-data incident requires notice under applicable law, the responsible company will provide notice as required.

14. Children

Our public website and business services are intended for business users and are not directed to children under 13. We do not knowingly collect personal information directly from children under 13 through the public website. If you believe a child has provided personal information, contact us so we can review and address it.

15. Third-party sites

Our website may link to a product, provider or other website operated by someone else. Their privacy practices and terms apply to information they collect directly. Review the relevant notice before submitting information or making a payment there.

16. Changes to this Policy

We may update this Policy when our services, processing or legal requirements change. The effective date at the top shows when this version took effect. If a change is material, we will provide additional notice where required by law.

17. Contact

For privacy questions or requests, contact the responsible company through support@wyocs.org or wyocs.org/contact. For a European engagement, you may also write to CHAKMAKOVI INTERNATIONAL GROUP LIMITED at Argira Zhechkova Street, 8802 Sliven, Bulgaria, company number 207557356, VAT number BG207557356.