Legal · Privacy
Privacy policy
Last revised · August 2026
1 · Introduction
This policy describes how Treyam Technologies (“we”, “us”, “our”) collects, uses and protects personal data when you contact us, use this site, or work with us on an engagement.
By using our platforms and services you accept the practices set out in this document. We would rather you could read this once and know exactly what happens to your information.
2 · Data we collect
We collect only what is needed to answer an enquiry and to run the services we are contracted for. It falls into two categories.
- Direct input — what you give us: name, contact details, organisation, and the content of messages you send through the contact form or by email.
- Automated telemetry — server logs, IP address, browser and device details, and usage records generated when you use this site or a system we operate for you.
3 · How we use it
We do not monetise your data. Information processed through our systems is used only to provide, maintain and improve the technical services you contract us for.
- Replying to your enquiry and scoping the work it describes.
- Running the cloud infrastructure deployments and automation we operate on your behalf.
- Authenticating access to systems we administer for you.
- Reading telemetry to find and correct errors and latency before they reach you.
- Applying security patches and service updates.
4 · Data security
We take reasonable technical measures to protect data against unauthorised access, alteration and loss. In practice that means the following.
- Encryption — traffic to this site and to the systems we operate is carried over TLS. Data at rest is encrypted using the facilities of the platform holding it.
- Access control — administrative access requires multi-factor authentication and is granted per system, never through one shared account.
- Review — dependencies are scanned for known vulnerabilities and access registers are reviewed on a schedule. Where an engagement calls for independent penetration testing, it is scoped and scheduled within that engagement.
No system is perfectly secure, and no measure listed above removes that risk entirely.
5 · Third parties
We build on infrastructure we do not own. Delivering a service can require your data to pass through third-party providers — cloud platforms such as AWS and Azure, and the operational tooling that runs alongside them. Those providers are bound by data processing agreements that hold them to standards equivalent to our own. We do not sell, rent or otherwise pass your data to marketing companies or data brokers.
6 · Contact and compliance
To ask where your data is held, to request a record of the data we hold on you, or to exercise your rights under applicable data protection law — including the GDPR and India’s Digital Personal Data Protection Act — write to us and a person will answer.