Legal

Privacy Policy

Last updated: March 22, 2026

MyPeachy ("Company", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our platform, or engage our AI engineering services.

1. Information We Collect

1.1 Information You Provide

• Contact Information: name, email address, phone number, company name, job title when you fill out forms or contact us;
• Account Information: credentials and profile details when you create an account;
• Payment Information: billing details processed securely by our third-party payment provider — we do not store full payment card numbers;
• Project Data: data, specifications, and materials you provide as part of a client engagement;
• Communications: messages exchanged with our team via email, chat, or support channels.

1.2 Information Collected Automatically

• Device Information: device type, operating system, browser type, screen resolution;
• Usage Data: pages visited, features used, time spent on the Service;
• Log Data: IP address, access times, referring URLs, error logs;
• Cookies: see our Cookie Policy for details.

2. How We Use Your Information

Purpose	Legal Basis
Provide, operate, and maintain our services	Contract performance
Process payments and manage billing	Contract performance
Respond to inquiries and provide support	Legitimate interest
Send service-related communications	Legitimate interest
Improve and optimize the Service	Legitimate interest
Prevent fraud, abuse, and security threats	Legitimate interest
Comply with legal obligations	Legal obligation
Marketing communications (with consent)	Consent

3. How We Share Your Information

We do not sell your personal information. We may share data with:

• Service Providers: cloud hosting, payment processors, analytics tools, and email services that help us operate;
• AI Infrastructure Partners: third-party AI model providers when processing is required — subject to data processing agreements;
• Legal Requirements: when required by law, regulation, subpoena, or legal process;
• Business Transfers: in connection with a merger, acquisition, or sale of assets;
• With Your Consent: in other cases where you have given explicit permission.

4. Client Data

When we process data on behalf of clients as part of AI engineering engagements, we act as a data processor. Client data is:

• Used solely for the purposes defined in the engagement agreement;
• Not shared with third parties except as necessary to deliver the service;
• Deleted or returned upon termination of the engagement, unless retention is required by law;
• Protected by appropriate technical and organizational measures.

Where applicable, we enter into Data Processing Agreements (DPAs) with our clients.

5. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce agreements. Contact and inquiry data is retained for up to 3 years after the last interaction unless you request earlier deletion.

6. Data Security

We implement appropriate technical and organizational security measures, including:

• Encryption in transit (TLS 1.2+) and at rest;
• Access controls and role-based permissions;
• Regular security assessments and monitoring;
• Incident response procedures.

No method of transmission over the Internet is 100% secure, but we are committed to protecting your data to the highest practical standard.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal data;
• Rectify inaccurate or incomplete data;
• Erase your data ("right to be forgotten");
• Port your data in a structured, machine-readable format;
• Object to processing based on legitimate interests;
• Restrict processing in certain circumstances;
• Withdraw consent where processing is consent-based.

To exercise any of these rights, contact us at the address below. We will respond within 30 days.

8. International Transfers

Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place for international transfers in accordance with applicable data protection laws.

9. Children's Privacy

Our Service is not directed to individuals under 16. We do not knowingly collect personal data from children. If we learn that we have collected data from a child under 16, we will delete it promptly.

10. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices of these external services.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via our website or email. The "Last updated" date at the top reflects the latest revision.

12. Contact Us