Legal · Privacy notice

Privacy notice

How Wythin, as operator of WythinForge, processes personal data received through the public site and private Workspace.

Effective date
25 August 2026
Status
Operational notice; contract-specific terms may add detail

Controller and contact

Wythin is the controller for public inquiries, account administration and its own relationship and delivery records. Contact hello@wythinforge.com for privacy requests. Where Wythin processes data solely on a customer's documented instructions, the applicable agreement determines the controller and processor roles.

Data and purposes

We process contact and organization details, inquiry content, account and membership data, project messages and attachments, estimates and decisions, release records, security events and the optional telemetry choices described in the cookie policy.

  • To respond to inquiries and take requested pre-contractual steps.
  • To provide the Workspace and perform the applicable customer agreement.
  • To secure, troubleshoot and defend the service and maintain an accountable delivery record.
  • To comply with legal obligations and establish or defend legal claims.
  • To run optional browser analytics, diagnostics and external services only on the basis of the corresponding consent where required.

Recipients, transfers and retention

Access is limited to authorized Wythin personnel, authorized members of the relevant customer organization and configured service providers listed in the subprocessor page. International transfers, when applicable, must use a lawful transfer mechanism and appropriate safeguards.

Data is kept only for the purpose, contractual term, security need and legal retention period that applies to the record. Contract-specific schedules and deletion commitments are documented in the customer agreement or DPA; backups and immutable audit records may follow a controlled expiry cycle.

Your rights

Depending on the applicable law, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent without affecting earlier lawful processing. You may also lodge a complaint with the Italian data protection authority or the authority in your country of residence or work.