00
Privacy and subprocessors
Last updated 9 August 2026. If anything here is unclear, ask — contact@byrdhq.com.
- Who we are
- Desiria LLC (合同会社Desiria), a company registered in Japan, is the controller of the personal data described here. Registered details are provided on request and in contract documents. Contact: contact@byrdhq.com.
- What we collect
- Only what you send us: your name, your email address, and whatever you choose to put in your message or in files you attach. This site sets no cookies and loads no third-party scripts. Our host keeps standard server logs, as any host does.
- Why we hold it
- To answer your enquiry; to scope, quote and carry out work you ask us for; and to keep the records Japanese tax and company law require of us. Nothing else. We do not sell personal data and we do not use it for advertising or profiling.
- Legal basis (EU/UK)
- Answering an enquiry and discussing possible work: our legitimate interest in responding to people who contact us, and steps taken at your request before entering a contract. Carrying out agreed work: performance of a contract. Accounting and tax records: compliance with a legal obligation.
- Do you have to give it to us
- No. There is no statutory or contractual requirement to write to us. If you don't, the only consequence is that we can't answer.
- How long we keep it
- Enquiry threads: while the conversation is live, and one year after it ends. Contract and accounting records: for as long as Japanese law requires us to retain them.
01
Subprocessors
These are the third parties that process material you send us. We update this list when it changes, and we tell existing clients in writing before it takes effect.
- Cloudflare, Inc. — United States
- DNS, site delivery, and the email routing that carries your message to our mailbox.
- Vercel Inc. — United States
- Hosting for this website.
- Google LLC — United States
- The mailbox that routed mail is delivered into.
- Anthropic PBC — United States
- AI models used for development work and for the first reading and drafting of replies to enquiries.
- OpenAI, L.L.C. — United States
- AI models used for development work and for independent review of our own output.
- GitHub, Inc. — United States
- Hosting for the public code we publish. Client material is not published there.
Because of that list, please keep credentials, access tokens and production personal data out of a first email. Describe the shape of the problem instead. Once we're working together we agree a channel that suits your security requirements before anything sensitive moves — and during delivery we don't put credentials, keys or production personal data through AI tooling at all.
02
International transfers
- Sending data to us in Japan
- Japan is recognised as providing an adequate level of protection by the European Commission (Implementing Decision (EU) 2019/419) and, separately, under the United Kingdom's adequacy regulations. Those decisions cover transfers to personal information handling business operators under Japan's Act on the Protection of Personal Information, which is what we are.
- What that does not cover
- Those decisions do not, by themselves, cover onward transfers from us to the subprocessors listed above, all of which operate in the United States. Those transfers run on each provider's own data processing and transfer terms. If your procurement process needs those terms named or a DPA signed, ask and we'll deal with it before any work starts.
- Automated decisions
- An AI agent reads incoming mail and drafts replies, and does the development work. It does not make decisions that produce legal effects for you or similarly significantly affect you — commercial decisions are made by the company's owner, who is behind every engagement.
03
Your rights
Write to contact@byrdhq.com and we'll act on any of these. We don't charge for it and we don't ask why.
- Access, correction, deletion
- Ask what we hold about you, have it corrected if it's wrong, or have it deleted.
- Restriction, objection, portability
- Ask us to stop using it while a question is resolved, object to our processing it on legitimate-interest grounds, or ask for a copy in a portable form.
- Complaints
- If we get it wrong, tell us first and we'll try to fix it. You can also complain to a supervisory authority: in the EU, the authority for your country; in the UK, the Information Commissioner's Office; in Japan, the Personal Information Protection Commission.
- Changes to this page
- If we change how any of this works, we update this page and date it. Where a change affects live work, we say so in writing to the client rather than relying on you re-reading a page.