1. Scope
This notice explains how Anyue Systems, Inc. ("Anyue", "we") collects, uses and discloses personal information through our website, product trials, professional services and support. It does not cover customer data processed inside a customer-controlled VPC or on-premises deployment — in that case the customer is the controller and Anyue acts as a processor under our Data Processing Addendum (DPA).
2. What we collect
| Context | Categories | Required | Retention |
|---|---|---|---|
| Website & demo requests | Name, company, work email, stated use case | Yes | 24 months if opportunity is open; 12 months otherwise |
| Product trials | Account identifiers, corporate domain, authentication and usage logs | Yes | 90 days after trial ends |
| Contracts & billing | Signatory name and title, billing contacts, tax identifiers | Yes | 7 years (tax and audit) |
| Support | Ticket content, session recordings where authorized | No | 36 months |
We do not buy third-party audience data, and this site sets no advertising or cross-site tracking cookies.
3. Legal bases
- Performance of a contract or steps at your request (GDPR Art. 6(1)(b));
- Legitimate interests in operating and securing our services (Art. 6(1)(f));
- Consent for commercial email where required — withdrawable at any time (Art. 6(1)(a));
- Compliance with legal obligations, including tax and security incident reporting (Art. 6(1)(c)).
4. Sharing, subprocessors and transfers
We share information with vetted subprocessors providing cloud hosting, email, ticketing and payment processing. A current list is available at Security or on request; customers receive 30 days' notice before a new subprocessor is added to a production service. Transfers outside the EEA/UK rely on the European Commission Standard Contractual Clauses plus a transfer impact assessment. For California residents, we do not sell or share personal information as defined by the CPRA, and we do not use sensitive personal information for inferring characteristics.
5. Your rights
Depending on your jurisdiction you may request access, correction, deletion, portability, restriction, or object to processing, and may appeal a decision. Email privacy@anyue.org; we respond within 30 days (45 days for CCPA requests where an extension is required). Authorized agents may submit requests with written permission. We do not discriminate against individuals who exercise privacy rights.
6. Security and retention
TLS 1.3 in transit, AES-256 at rest, least-privilege access with hardware-key MFA, and 180-day tamper-evident audit logs. See the Security overview. Retention periods above are ceilings; we delete or de-identify earlier where the purpose is satisfied.
7. Changes and contact
Material changes are posted here 7 days before they take effect with an incremented version number. Controller: Anyue Systems, Inc., 660 Market Street, Suite 400, San Francisco, CA 94104. Privacy inquiries: privacy@anyue.org. EU/UK representative details are available on request.