Privacy policy

Effective October 30, 2026

Who we are

Dryware Systems (“Dryware”, “we”, “us”) is a software consultancy headquartered at 2261 Market Street, STE 22873, San Francisco, CA 94114, United States. For the purposes of data-protection law, Dryware is the controller of the personal information described in this policy, except where we process client data on a client's instructions (see Client engagements).

Contact: contact@dryware.com · (415) 699-2324.

What this policy covers

This policy covers personal information we handle when you visit dryware.com, book a call or contact us, work with us as a client or prospective client, or apply to work with us. It does not cover third-party websites we link to.

Visiting the website

The site is static HTML served through Cloudflare. It sets no cookies of its own, loads no advertising or marketing technology, and makes no third-party requests on page load — fonts are served from our own domain rather than from a font provider.

• Hosting and security logs. Cloudflare, our hosting and content-delivery provider, processes your IP address, request headers, and similar technical data to deliver the site and protect it from abuse. Cloudflare retains these logs for a short period under its own policies.
• Analytics. We use Cloudflare Web Analytics for aggregate traffic measurement — page views, referrers, and approximate country. It is cookieless, does not use local storage for tracking, does not fingerprint devices, and does not track you across sites.
• Theme preference. If you change the light/dark setting, that choice is stored in your browser's local storage so the site remembers it. It never leaves your device and is not read by us.

Because we set no tracking cookies, there is no cookie banner: there is nothing to consent to.

Booking a call

Our scheduling page links to a booking page on Proton Calendar, a service operated by Proton AG (Geneva, Switzerland). Nothing from Proton loads on this site; the booking page opens in a new tab only when you choose to follow the link. There, Proton collects the name, email address, time slot, and any notes you provide, and handles them under its own privacy policy. We receive the booking details and use them to hold the call and follow up on it.

Contacting us

If you email or call us, we receive the contact details and content you choose to send. We use them to respond to you and, if a conversation continues, to prepare for and follow up on it. We do not add you to a marketing list and we do not send automated outreach sequences.

Client engagements

When we work with a client, we handle two kinds of information.

• Business-contact and contract information about our client's personnel — names, roles, work contact details, and the records needed to scope, deliver, invoice, and account for the work. Dryware is the controller of this information.
• Client data we access in the course of the work, which may include personal information held in the client's systems. We process this only on the client's documented instructions and under a written agreement (a master services agreement or statement of work, typically with a non-disclosure agreement). For this data Dryware acts as a processor or service provider. We do not use client data for our own purposes, to train or fine-tune models for anyone other than that client, or for marketing.

Where an engagement involves deploying AI models, our default recommendation is to run them inside the client's own infrastructure so that client data does not leave the client's environment.

Applying to work with us

Materials you send to apply for a role go to the Dryware hiring team and are used only to evaluate you for current or future opportunities. See the careers page for the applicant notice, including retention and how to request access or deletion.

How we use information

• To operate, secure, and measure the website.
• To respond to inquiries and hold the calls you book.
• To scope, deliver, support, invoice, and account for consulting services.
• To meet legal, tax, and accounting obligations and to establish or defend legal claims.

We do not sell personal information, do not share it for cross-context behavioral advertising, and do not make automated decisions about you that have legal or similarly significant effects.

Legal bases (EEA, UK, and Switzerland)

Where the GDPR or UK GDPR applies, we rely on: our legitimate interests in operating and securing the site and in responding to business inquiries; performance of a contract or steps taken at your request before entering one; consent, which you give by choosing to open the Proton Calendar booking page and may withdraw by not using it; and legal obligation for records we must keep.

Who we share information with

We share personal information only with service providers that help us run the business, under terms that restrict their use of it: Cloudflare (hosting, security, analytics), Proton (scheduling, only if you book a call), and our email, document, accounting, and payment providers. We may also disclose information when required by law, to protect rights and safety, or as part of a business transfer, in which case this policy would continue to apply to it.

International transfers

Dryware is located in the United States and processes information there. Where we receive personal information from the EEA, UK, or Switzerland, we rely on our providers' standard contractual clauses or equivalent safeguards, and on a written agreement with the client for engagement data.

How long we keep information

• Inquiries and call bookings: up to 24 months after our last exchange, unless the conversation becomes an engagement.
• Engagement records: for the term of the agreement and as long afterwards as tax, accounting, and legal requirements demand — generally seven years for financial records. Client data is returned or deleted at the end of an engagement as the agreement specifies.
• Website analytics: aggregate only; Cloudflare retains underlying request logs for a short period under its own policies.
• Applicant materials: see the careers page.

Security

The site is served over TLS and has no database or server-side code of its own. Within our practice we use least-privilege access, hardware-backed authentication, encrypted devices and storage, and client-controlled environments wherever an engagement allows. No system is perfectly secure; if we learn of a breach affecting your information, we will notify you and any relevant authority as the law requires.

Your rights

Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, restrict or object to its processing, receive a copy in a portable format, and withdraw consent. To exercise any of these, email contact@dryware.com. We will verify your request and respond within the time the applicable law requires. You may also complain to your local data-protection authority.

California residents. Dryware does not sell personal information or share it for cross-context behavioral advertising, and has not done so in the preceding twelve months. Whether or not the California Consumer Privacy Act applies to a business of our size, we honor requests to know, delete, and correct, and we will not discriminate against you for making one. Because we do not track you, browser signals such as Global Privacy Control are honored by default.

Children

The site and our services are directed at businesses and are not intended for anyone under 16. We do not knowingly collect information from children.

Changes to this policy

We will post any changes on this page and update the effective date. If a change is material, we will say so prominently here. This version is effective October 30, 2026.

Questions

Email contact@dryware.com or write to Dryware Systems, 2261 Market Street, STE 22873, San Francisco, CA 94114, United States.