Privacy Policy & Zero-Knowledge Architecture

Cyril Musila Creatives ("We", "Us", or "Data Controller") operates the digital domains cyrilcreatives.com, ai.cyrilcreatives.com, and associated client portals from Nairobi, Kenya. We treat personal data, enterprise codebases, and client communications with the utmost discretion and statutory integrity.

A central pillar of our engineering philosophy is Local Client-Side Computation. Our directory of 305+ Free WebTools operates under a strict Zero-Knowledge Model:

• No Server Uploads: Your files, tokens, strings, passwords, and tax figures are NEVER uploaded, stored, or processed on our backend servers.
• No Server Logs of Payloads: Our web servers do not retain access logs or inspection dumps of tool form inputs.
• Offline Usability: Once cached by your browser, tool calculators function completely offline.

The only personal information we collect is data you voluntarily provide when initiating project consultations, scheduling architectural discovery calls, or commissioning software builds:

• Direct Contact Data: Full name, corporate email address, telephone/WhatsApp number, and organization name.
• Project Specifications: Technical architecture requirements, budget brackets, feature lists, and timeline parameters.
• Server Access Telemetry: Standard non-identifying technical metadata (browser user agent, viewport size, IP address for DDoS mitigation and geolocation routing).

When you contact us via email (info@cyrilcreatives.com), phone (+254 723 378 788), or our secure contact forms, your messages are processed exclusively for replying to your inquiry, preparing commercial proposals, and fulfilling contractual services. We never sell, lease, or share your contact info with marketing syndicates.

We pride ourselves on our clean, privacy-respecting website:

• Zero Third-Party Advertising Pixels: We do NOT inject Meta (Facebook) Tracking Pixels, TikTok Pixels, Google Remarketing Pixels, or invasive ad-tech beacons.
• Zero Fingerprinting: We do not deploy canvas fingerprinting or cross-site tracking technologies.
• No Behavioral Profile Sales: We do not monetize user data in any form. Our business revenue derives 100% from high-craft software engineering and software licenses.

Any project artifacts, correspondence, or digital contracts stored in our infrastructure are protected by multi-layered enterprise defense-in-depth:

• Encryption in Transit: TLS 1.3 encryption across all network transfers with strict HTTP Strict Transport Security (HSTS) headers.
• Encryption at Rest: AES-256 encrypted storage volumes and encrypted offline backups.
• Access Controls: Role-based access control (RBAC), multi-factor hardware security keys (FIDO2/WebAuthn), and strict least-privilege principles.

Regardless of your geographic location, you possess comprehensive statutory rights over your personal data under the Kenya Data Protection Act, 2019 and international standards (GDPR):

• Right to Access: You may request an itemized copy of all personal information held regarding your account or inquiries.
• Right to Rectification: You may correct inaccurate or incomplete contact records.
• Right to Erasure: You may instruct us to permanently purge all project inquiry correspondence and non-statutory records from our systems.

For any inquiries, data deletion requests, or compliance clarifications, please contact our Data Controller lead directly:

Cyril Musila Creatives
Attention: Data Protection & Legal Compliance
Email: info@cyrilcreatives.com
Telephone: +254 723 378 788
Nairobi, Kenya