MyCD Systems Privacy Notice
Last updated: 4 September 2026This Privacy Notice explains how MyCD Systems collects, uses, stores and protects personal data when you visit our websites, request a Demo, communicate with us or use an approved MyCD workspace.1. Who controls your dataMyCD Systems is currently operated by Bogdan Gheorghiu, who acts as the data controller for the activities described in this Notice.Contact: [email protected]2. Where this Notice appliesThis Notice applies to mycd.systems, privacy.mycd.systems, app.mycd.systems and related MyCD subdomains, Demo requests and related communications.Where an organisation provides access to MyCD for its team, that organisation may also be a data controller for the information its users submit. Its own privacy rules may apply in addition to this Notice and any agreed data-processing terms.3. Personal data we collectInformation you provide. This may include your name, organisation, role, email address, mobile number, WhatsApp availability, how you heard about MyCD, the outcome you want to achieve and any information included in messages or support requests.Account and workspace information. If you receive access, we may process account identifiers, access roles, login and security records, session history, prompts, messages, uploaded files, brand or project information, generated outputs and support correspondence.Website and usage information. Subject to your analytics choice, we may collect pages and sections visited, buttons selected, referral source and campaign parameters, approximate location, device and browser information, timestamps, performance data, pseudonymous visitor identifiers and masked session replays. Demo-form fields are excluded from analytics capture and masked in session recordings.Please do not submit special-category or highly sensitive personal data unless it is strictly necessary and you are authorised to do so.4. Why we use personal dataWe process personal data only where we have a lawful basis:- To assess and respond to a Demo request, communicate with you and take steps you request before a possible agreement.
- To create and administer an approved account, provide the MyCD service, generate requested outputs and support users under an agreement.
- To protect the websites and service, prevent misuse, diagnose faults and maintain security, based on our legitimate interests.
- To understand and improve website performance and user journeys, including masked session replay, only with your consent where required.
- To meet legal obligations and establish, exercise or defend legal claims.We do not use your data for third-party advertising, sell personal data or make decisions about you solely by automated means that produce legal or similarly significant effects.5. AI processingMyCD uses specialised artificial-intelligence and technical service providers to process submitted material and generate the outputs requested by users. Information submitted to a workspace may therefore be transmitted to providers acting on our instructions.You are responsible for ensuring that you have the right to submit any personal, confidential or third-party information. AI-generated outputs may be incomplete or inaccurate and should be reviewed by a qualified person before they are used for consequential decisions.6. Analytics, cookies and session replayWith your permission, we use PostHog EU Cloud to understand how visitors find and use MyCD. This includes page and section views, navigation choices, visit frequency, time spent, device data, approximate location, performance information and masked session replay.PostHog uses a pseudonymous identifier stored in your browser to recognise visits. Form inputs are masked and are not intentionally included in session replay. Analytics data is hosted in the European Union and is routed through n.mycd.systems.You may choose Essential Only without losing access to the website. You may later change your choice through Privacy Settings. Essential storage required for security and core website functions is not optional.7. Who receives personal dataWe use a limited number of service providers for website hosting and forms, cloud infrastructure, authentication, database and file storage, AI processing, workflow automation, analytics, security and business communications. They may process data only to provide their contracted services and subject to appropriate confidentiality and security obligations.We may also disclose information when required by law, to protect rights or safety, or as part of a business reorganisation subject to appropriate safeguards.8. International transfersSome service providers may process data outside the European Economic Area. Where this occurs, we use an applicable legal transfer mechanism, such as an adequacy decision or approved contractual safeguards, together with additional protections where appropriate.9. How long we keep data- Demo requests that do not lead to an account or commercial relationship are retained for up to 12 months after the last meaningful contact.
- Account, workspace and project information is retained for the duration of access and afterwards only for as long as needed for support, contractual, security and legal purposes.
- Website analytics events are retained for up to 12 months.
- Session recordings are retained for up to 30 days.
- Records required for legal, accounting, security or dispute purposes may be retained for the applicable statutory period.When data is no longer required, it is deleted, anonymised or securely isolated in backups until those backups expire.10. Your rightsDepending on the law that applies to you, you may have the right to request access, correction, deletion, restriction or portability of your personal data, and to object to certain processing.Where processing is based on consent, you may withdraw that consent at any time without affecting earlier lawful processing. You may also complain to the competent data-protection authority in the country where you live or work, or where you believe an infringement occurred.To exercise a right, contact [email protected]. We may need to verify your identity before completing a request.11. Security and childrenWe apply reasonable technical and organisational safeguards designed to protect personal data. No online system can be guaranteed completely secure.MyCD is intended for professional users and is not directed to children. We do not knowingly collect personal data from anyone under 16.12. Changes to this NoticeWe may update this Notice when our services, providers or legal obligations change. The latest version will always appear on this page with its effective date.Questions about privacy or this Notice can be sent to [email protected].