Legal

Privacy Policy

Last updated: March 2026

ANDYL INC. ("ANDYL," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and share information when you visit our website at andyl.com, use our products and services, or otherwise interact with us.

This policy applies to our marketing website, our client SDKs, control plane software, and related infrastructure products and services. Please read it carefully.

Information We Collect

Information You Provide Directly. When you contact us, request a demo, apply for a job, or sign up for our services, we may collect your name, email address, company name, job title, phone number, and any other information you choose to share with us.

Information Collected Automatically. When you visit our website, we automatically collect certain technical information, including your IP address, browser type, operating system, referring URLs, pages viewed, and the dates and times of your visits. We use cookies and similar tracking technologies to collect this data. You can manage your cookie preferences through your browser settings.

Product and Service Data. When you use our infrastructure products, including our client SDKs, control plane, and related networking tools, we may collect usage metrics, configuration data, performance logs, error reports, and account information necessary to provide and improve our services.

Network Telemetry and Routing Data. Our products process network telemetry data, routing information, and device metadata on behalf of our customers. This data may include packet headers, connection metadata, device identifiers, network topology information, and performance metrics. We process this data strictly as a data processor acting on our customers' instructions. We do not access, sell, or use customer network telemetry or routing data for our own purposes beyond providing and maintaining the contracted services.

How We Use Information

We use the information we collect to provide, operate, and maintain our products and services; to process transactions and send related information; to respond to your inquiries and support requests; to send you technical notices, updates, and security alerts; to monitor and analyze usage trends; to detect and prevent technical issues, fraud, or security concerns; and to comply with legal obligations.

For our marketing website, we use analytics data to understand how visitors find and use our site. We may also use your contact information to send you product updates or company news, but only where you have given consent or where we have a legitimate business interest. You can opt out of marketing communications at any time.

Data Sharing

We do not sell your personal information. We share data only in limited circumstances: with service providers who perform services on our behalf (hosting, analytics, email delivery); in connection with a merger, acquisition, or sale of assets; when required by law or to protect our rights and safety; or with your explicit consent.

For customers who use our infrastructure products, we process network telemetry and routing data solely according to our customer agreements. We do not share customer network data with third parties except as necessary to deliver the contracted services or as directed by the customer.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law. For product and service data, retention periods are governed by our customer agreements. When a customer relationship ends, we will delete or return customer data in accordance with the applicable agreement, typically within 90 days of contract termination, unless retention is required by law.

Security

We take reasonable technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit and at rest, access controls, regular security assessments, and employee training. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

If you believe your data has been compromised, please contact us immediately at privacy@andyl.com.

Your Rights

GDPR. If you are located in the European Economic Area or the United Kingdom, you have the right to access, correct, delete, or port your personal data. You also have the right to restrict or object to certain processing, and the right to withdraw consent where processing is based on consent. We will respond within 30 days.

CCPA. If you are a California resident, you have the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of your personal information. We do not sell personal information. We will verify your identity and respond within 45 days.

If you are a customer using our infrastructure products and wish to exercise rights regarding network telemetry or routing data processed through our services, please contact your organization's administrator. As a data processor, we will assist our customers in responding to such requests in accordance with our customer agreements.

Children's Privacy

Our website and services are not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will take steps to delete that information promptly.

International Transfers

ANDYL is based in the United States. If you access our website or use our services from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. Where we transfer personal data from the European Economic Area or the United Kingdom, we rely on appropriate safeguards, such as Standard Contractual Clauses, to ensure your data is protected in accordance with applicable law.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy on our website and updating the "Last Updated" date at the top of this page.

Contact

If you have questions about this Privacy Policy, please contact us at privacy@andyl.com.