Privacy policy.

Information you give us. When you submit the contact form or email us, we collect your name, email address, company name (optional), industry, the description of what you want help with, and your preferred contact method. When you book a call, Cal.com collects your name, email, and any answers you provide on its booking form.

Information collected automatically. When you visit the site, we collect standard request metadata: pages viewed, the referring URL, approximate location derived from your IP address, browser type, operating system, and screen size. This is gathered through PostHog for product analytics. We do not use third-party advertising trackers.

Cookies and local storage. PostHog sets a first-party cookie to identify your session across pages. Cal.com sets cookies inside its booking embed. We do not set cookies for advertising.

Do-Not-Track. If your browser sends a Do-Not-Track header, our analytics provider is configured to respect it and skip loading.

We use the information you provide and the information collected automatically to:

• Respond to your inquiry and schedule a call.
• Send transactional email related to your request.
• Deliver and improve the services described in your engagement letter.
• Understand which pages and content are useful, so we can improve them.
• Protect the site against spam, fraud, and abuse.
• Comply with our legal obligations.

We do not sell personal information. We do not share it with advertising networks. We do not use it to train any third-party AI model.

We share information only with the service providers we use to run the site and our business:

• Supabase — stores contact-form submissions in our leads database.
• Resend — delivers the notification email we receive when you submit the contact form.
• PostHog — collects product analytics (page views and custom events).
• Cal.com — hosts the booking embed on /book and handles scheduling.
• Vercel — hosts and serves the site, and keeps standard server logs.

Each provider is bound by its own privacy terms. We choose providers that are reputable and that offer data-processing addenda where applicable.

We may also disclose information if required by law, to protect our rights, or in connection with a merger or acquisition (in which case we will require any acquirer to honor this policy).

Contact-form submissions stay in our leads database until you ask us to delete them or until the lead is no longer relevant to our business. Analytics events are retained for the default PostHog retention period (currently seven years). Server logs are retained for up to 30 days.

Data in transit is protected by HTTPS. Data at rest with our providers is encrypted by those providers. We use service-role credentials to access our leads database, kept in environment variables and not exposed to the browser. No system is perfectly secure, and we cannot guarantee absolute security.

You can ask us to access, correct, or delete personal information we hold about you. You can opt out of analytics by enabling Do-Not-Track in your browser, or by emailing us. You can opt out of marketing email by replying "unsubscribe"to any email we send (though we rarely send marketing email).

If you are a California resident, the California Consumer Privacy Act (CCPA) gives you the right to know what personal information we collect, request deletion, and not be discriminated against for exercising these rights. We do not sell personal information, so there is nothing to opt out of in that respect. To exercise any right, email us at the address below.

If you are in the European Economic Area, the United Kingdom, or another jurisdiction with comparable data protection rules, you also have the rights of access, rectification, erasure, restriction, portability, and objection under the GDPR or equivalent. To exercise any of these, email us.

The site is not directed to children under 16 and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, email us and we will delete it.

We are based in the United States and our providers operate primarily in the United States. If you access the site from outside the US, your information may be transferred to and processed in the US. By using the site you consent to that transfer.

We may update this policy from time to time. The "Last updated" date at the top reflects the current version. Material changes will be posted to this page. Continued use of the site after changes means you accept the new policy.

Privacy questions or requests? Email sergio@alphaprism.net.