Privacy Policy

This policy covers how I handle information collected through wyvernai.co.nz and through email. I am Andrew Hunt, and the business is Wyvern Services Limited, trading as Wyvern AI, based in Raumati Beach, New Zealand. Everything below is written in the first person because it is a one-person business. I operate under the New Zealand Privacy Act 2020.

The short version: this website has no forms, no sign-up, no cookies and no advertising. It cannot collect anything about you until you choose to email me.

What I collect

• What you send me by email. Contact on this site is email only, by choice. There is no contact form and no booking widget. If you email me I hold whatever you chose to put in that email: your name, your email address, your business, and what you told me about it.
• Anonymous visit statistics. I use Vercel Web Analytics to see which pages get read. It does not use cookies, does not follow you across other websites, and does not build a profile of you. I see counts and page names, not people.
• Standard server logs. The company that hosts the site records requests for security and troubleshooting: IP address, browser type and timestamps. This is ordinary web hosting, and it happens for every site on the internet.
• Messages on a client page. If I have sent you a private link to one of my client pages, that page has a box for writing back to me. What you write is stored so I can keep the thread, and it is emailed to me. Your IP address is stored only as a one-way scrambled value used for rate limiting, never in a form I can read. These pages are only reachable by the link I sent you and are hidden from search engines.

What I use it for

• Replying to you and having the first conversation.
• Doing the work, if you become a client.
• Keeping the site up and secure, and seeing which pages are worth keeping.

I do not sell or rent your information. I do not use it for advertising. I do not send marketing email, and there is no mailing list to be added to. Nothing you send me through this site is fed to an AI system.

Companies I rely on

Running this website and answering your email means a handful of other companies touch data on my behalf. These are all of them:

• Vercel for hosting the website and for the anonymous visit statistics.
• Google Fonts for the typefaces on the page. Your browser fetches those from Google, which means Google sees your IP address when a page loads. No account is involved and nothing is stored on your device.
• Google Workspace for my email, so anything you email me sits in a Google mailbox.
• Supabase for the database behind the private client pages.
• Resend for sending me the notification when someone writes on a client page.

Some of these store data outside New Zealand. By using the site or emailing me, you accept that.

AI tools, and what they see

Building AI systems is the work, so it is fair to ask which AI companies are involved and what they get to look at.

Nothing on this website. What you email me, and what you write on a private client page, is not put into an AI system.

In client work, the two I use most are Anthropic, who make Claude, and OpenAI. Others get used where they suit the job better. I am not tied to one vendor, and I would rather reach for the tool that does your job well than the one I happen to be holding.

Where a job needs a commercial AI service, I use business terms that keep your data out of training the models, and I confirm that in writing before anything goes live.

How I handle a client's data

Every business is set up differently, so the specifics get worked out job by job. The approach behind them does not change:

• The least access that does the job. Where I connect to a system you already use, I ask for read-only access to the parts the work actually needs, rather than the run of everything.
• The keys stay yours. Access is set up inside your own accounts, so you can switch me off in one action at your end, without needing anything from me. Logins and keys are held in a password manager, kept separate per client, never in a file or an email thread.
• Your customers' details do not go into a chat window. Where I need to understand a set of records, that work happens privately and tells me counts and patterns rather than the records themselves. Anything I show you, or work from in the open, uses made-up names.
• A person stays in the loop. Where a system writes to your customers, it drafts and waits. Someone at your end reads it and presses send.
• If something goes wrong, you hear first. Straight away, in writing, with what happened and what it touched.

None of that is meant to be taken on trust. Ask me to walk you through exactly how it would work for your setup before you commit to anything.

Cookies

This site sets no cookies at all. Not for advertising, not for tracking, not for anything. It does not need them to work, so there is no cookie banner to click through.

Your rights

Under the New Zealand Privacy Act you can ask me what personal information I hold about you, ask me to correct it, or ask me to delete it. Email andrew@wyvernai.co.nz and I will get back to you. It comes to me directly, not to a support queue.

If you are not happy with how I have handled a request, you can raise it with the Office of the Privacy Commissioner.

How long I keep it

I keep enquiries and client records for as long as they are useful for the reason they were collected, or for as long as the law requires. If you ask me to delete your information I will, unless I am legally required to keep it.

Changes to this policy

If how I handle data changes in a way that matters, I will update this page and change the date at the top.

Contact

Questions about this policy, or about data I hold? Email andrew@wyvernai.co.nz.