Privacy Policy &
Data Governance Framework
1. Who This Policy Covers
This Privacy Policy covers our website, client portal, and the software and AI systems we build and manage for clients. For our own website and marketing, we decide how your information is used. For the custom software and AI agents we build for clients, we handle data on that client's behalf, following their instructions.
2. Information We Collect
Your name, work email, company name, budget range, and project details when you fill out a form or send us a message.
Basic technical details like your IP address, browser type, how fast our pages loaded for you, which page sent you here, and any errors that occurred.
3. How We Handle Data in AI Systems We Build
When we build a chatbot, AI agent, or a system that searches your documents for you, here's how your data is treated:
- ■Your Data Is Never Used to Train Public AI Models: Your documents and information are never used to train OpenAI's, Anthropic's, or Google's public models. They're used only to answer questions within your own system.
- ■Your Data Stays Separate From Other Clients': Your documents and data are kept in their own separate, secured space, never mixed with another client's information.
- ■Nothing Is Kept Longer Than It Needs to Be: Questions and answers are processed and then cleared, unless you specifically ask us to keep logs for your own records.
4. The Trusted Tools and Services We Use
We rely on established, well-secured providers to run our systems and our clients' projects:
5. Cookies and How We Use Them
We use a small number of cookies to make our website work properly and to understand how it's being used — for example, remembering your preferences and seeing which pages are popular. We do not use cookies to sell your data or build advertising profiles about you. You can disable cookies in your browser settings at any time; the site will still work, though some features may not.
6. Data Retention
We only keep your information for as long as it's actually needed. Contact form submissions and project inquiries are kept for up to 24 months to follow up on potential projects, unless you ask us to delete them sooner. Active client project data is kept for the duration of the engagement plus a reasonable handover period. Basic website analytics are kept for up to 14 months. When data is no longer needed, it's securely deleted.
7. How We Keep Your Data Secure
We treat client and project data the same way we'd want ours treated:
- ■Encryption: Data is encrypted both while it's stored and while it's being transferred between systems.
- ■Limited Access: Only team members who need access to a project to do their work can see its data — not the whole company.
- ■Secure Credentials: We use strong authentication on every system that touches client data, and never share login credentials.
8. Data Breach Notification
If we ever discover a data breach that affects your personal information, we will notify you and any relevant authority without undue delay, and in any case within the timeframe required by applicable law (for example, 72 hours under GDPR). We'll tell you plainly what happened, what data was involved, and what we're doing about it — no vague statements, no burying it in fine print.
9. No Selling, No Hidden Sharing
We do not sell, rent, or trade your personal information to anyone, ever. We only share data with the trusted service providers listed above (Section 4), and only as needed to run our website or deliver your project. We will never share your project details, code, or data with another client or a third party without your written permission.
10. Data Transfers Across Countries
Because we work with clients globally and use cloud providers with servers in multiple countries, your information may be processed outside your home country. When this happens, we use standard legal safeguards (such as Standard Contractual Clauses under GDPR) to make sure your data stays protected to the same standard, wherever it's processed.
11. Our Services Are Not for Children
Our website and services are intended for businesses and professionals, not children. We do not knowingly collect personal information from anyone under 18. If we learn that we've accidentally collected information from a child, we will delete it promptly.
12. Updates to This Policy
If we make meaningful changes to how we handle your data, we'll update this page and change the effective date at the top. For significant changes, we'll also notify active clients directly by email rather than relying on you to check back.
13. Data Processing Agreements
If your company requires a formal Data Processing Agreement (DPA) or has specific compliance requirements (GDPR, HIPAA, SOC2, etc.) before we begin a project, contact us — we're happy to put one in place as part of onboarding.
14. Your Rights and How to Reach Us
You have the right to see what personal information we hold about you, correct it, get a copy of it, or ask us to delete it. If you'd like to do any of this, just reach out to us directly: