Legal
Privacy Policy
Last updated: 2026-08-29
A full policy is currently being finalized with our legal team.
The summary below describes our current practices. For engagement specific data handling (BAAs, data processing agreements, subprocessor lists), a dedicated agreement is signed with each client.
What we collect
Contact information you submit through our forms (name, work email, company, message) and standard server logs (IP, user agent, request timing). We use privacy respecting analytics without third party ad networks.
How we use it
To respond to inquiries, deliver engagements, and improve the site. We do not sell personal data, and we do not share it with third parties for their marketing.
Client data during engagements
For active client engagements, data handling is governed by the engagement agreement (including any BAA, DPA, or subprocessor addendum). We deploy inside the client’s VPC or on prem where required so protected data stays within their infrastructure.
Retention & deletion
Website inquiry data is retained only as long as needed to respond and to keep an audit trail of communications. To request deletion of your data, contact us at the address below.
Contact
Questions about this policy or a data request? Get in touch.