Privacy & Data Governance Policy
At Dandy Tech (dandyhi.dev), we engineer autonomous AI systems, high-throughput model routers, and digital products. We treat enterprise data privacy with zero-compromise cryptographic rigor.
01. Core Architectural Privacy Principles
Dandy Tech operates as an independent AI engineering lab. When you interact with our public website, utilize our local or hosted API proxy routing infrastructure (such as NexusRouter), or deploy our custom Model Context Protocol (MCP) servers (VelaBridge), your privacy is safeguarded by three fundamental architectural guarantees:
- No Model Training on Customer Payloads: Neither Dandy Tech nor our upstream foundation model API pipelines use customer prompts, source code snippets, or API queries to train or fine-tune public foundation models.
- Stateless Data Transit: Inference payloads routed through NexusRouter are streamed in-memory via chunked transfer encoding and discarded immediately upon response completion.
- Client-Owned Infrastructure: Wherever possible, our solutions run in local, private Virtual Private Cloud (VPC), or on-premise SQLite WAL configurations where encryption keys remain under direct client ownership.
02. Data We Collect & Process
Depending on how you collaborate with Dandy Tech, we may collect and process minimal categories of information:
Technical Telemetry
Anonymized request metrics: timestamp, token count, HTTP status codes, latency histograms, and transient model identifiers required strictly for load balancing, rate limit protection (429 mitigation), and denial-of-service defense.
Client Communications
Contact inquiries submitted via email (contact@dandyhi.dev) or WhatsApp, including your name, corporate email, project scope requirements, and technical architectural specifications.
03. Third-Party Foundation Models & AI Services
Our intelligent agent systems, MCP servers, and API routing architecture interface with vetted enterprise frontier model providers. When inference requests are processed, data is transmitted over TLS 1.3 encrypted tunnels directly to certified providers governed by their respective commercial data commitments:
04. Cookies, Analytics & Tracking
The primary showcase website at dandyhi.dev operates with zero third-party advertising cookies, zero social trackers (no Meta Pixel or LinkedIn Insight Tags), and zero intrusive behavioral tracking. We only utilize static hosting telemetry provided by Vercel Edge Network for operational health, DNS routing, and DDoS mitigation.
05. International Compliance & Data Rights (GDPR, CCPA, UU PDP)
Regardless of your jurisdiction, Dandy Tech upholds rigorous data subject rights:
- Right of Access & Portability: You may request an export of all technical communications or project specifications held by Dandy Tech.
- Right to Erasure ("Right to be Forgotten"): Upon contract conclusion or request, we delete stored client staging configurations, repository access keys, and communication logs.
- Indonesian PDP Law (UU No. 27/2022) Compliance: Processing of personal data complies strictly with national personal data protection regulations.
06. Security Safeguards
We employ cryptographic defense-in-depth: mandatory TLS 1.3 encryption in transit, strict environment variable isolation for all API credentials, non-root container sandboxes, and automated secret scanning. In alignment with our engineering standards, secret keys and production tokens are never checked into source control or stored in persistent client browser storage.
07. Contact the Data Protection Officer & Founder
For legal inquiries, Data Processing Agreements (DPA), security audit reports, or data erasure requests, please contact our principal office: