Privacy Policy

Our privacy principles

We treat privacy as a foundational requirement of trustworthy AI and software work. Our practices are guided by the following principles:

• Lawfulness, fairness, and transparency. We process personal information only where we have a lawful basis, and we explain clearly how it will be used.
• Purpose limitation. Information is collected for specified, explicit purposes and is not used in ways that are incompatible with those purposes.
• Data minimization. We collect and retain only what is reasonably necessary to deliver our services and operate our business.
• Accuracy. We take reasonable steps to keep personal information accurate and current, and to correct it when needed.
• Storage limitation. Personal data is kept only as long as required for the purpose it was collected for, or as required by law or contractual obligation.
• Integrity and confidentiality. We apply administrative, technical, and physical safeguards proportionate to the sensitivity of the data.
• Accountability. We document our practices and stand behind them in our client agreements, vendor relationships, and internal policies.

Scope

This policy applies to personal information we process about:

• Visitors to our website and individuals who contact us through it;
• Client personnel and end users whose data is handled in the course of a consulting or product engagement;
• Prospective, current, and former employees, contractors, and job candidates;
• Vendors, partners, and other third parties we interact with in the course of business.

Information we collect

• Contact and identity data — name, email address, company, role, and the contents of messages you send us by email or other direct means of contact. We do not require an account and we do not collect payment information on this website.
• Scheduling data — when you book a meeting through our embedded Calendly widget, Calendly collects your name, email address, timezone, and any information you provide during the booking flow. This data is processed by Calendly, Inc. on our behalf and is subject to Calendly's Privacy Policy.
• Engagement data — project requirements, communications, documents, and deliverables shared with us during a consulting or product engagement.
• Technical data — IP address, user agent, device information, request timestamps, and similar metadata automatically logged by our hosting and edge providers for security, reliability, and abuse prevention.
• Client and end-user data — only to the extent necessary to perform contracted services, and always under the terms of the relevant client agreement.
• Recruitment data — résumés, qualifications, interview notes, and related materials for candidates we are evaluating.

How we use information

We use personal information to:

• Respond to inquiries and provide, manage, and improve our products and consulting services;
• Communicate with clients, prospects, candidates, partners, and vendors;
• Operate, secure, and improve our website, internal tools, and business infrastructure;
• Comply with legal, regulatory, tax, and contractual obligations;
• Design, build, evaluate, and validate AI features and systems on behalf of clients, in line with their instructions and applicable law.

We do not sell or rent personal information.

Responsible AI practices

Because much of our work involves AI product development and AI-driven modernization, we apply additional safeguards when personal data may be processed by AI systems:

• We do not use client-confidential data or end-user personal information to train third-party foundation models, and we configure model providers to disable training on submitted content wherever that option is available.
• We follow the principle of least privilege when granting AI systems and people access to data, and we prefer working with de-identified, synthetic, or sampled data when it is sufficient for the task.
• We help clients implement appropriate transparency, human oversight, logging, and evaluation around AI features, consistent with emerging standards such as the NIST AI Risk Management Framework.
• We document data flows for AI components so that clients understand which model providers process which data, and under what terms.

Sharing of information

We share information only with:

• Service providers who support our operations — for example, hosting, transactional email delivery, and analytics — bound by written agreements that require appropriate confidentiality and security.
• Clients, where we are processing information on their behalf as part of an engagement.
• Authorities or other parties when required by law, legal process, or to protect the rights, property, or safety of ABSRTS, our clients, or others.

Third-party services embedded on this site

Our website embeds a booking widget provided by Calendly, Inc. ("Calendly"). When you open the booking drawer and schedule a meeting, your name, email address, timezone, and meeting preferences are submitted directly to Calendly and processed under their privacy practices. Calendly may also set cookies and similar tracking technologies on your device when the widget is loaded. We do not control Calendly's data practices; we encourage you to review their Privacy Policy before booking. For information about the specific cookies Calendly sets, see our Cookie Policy.

The booking widget is loaded lazily — it is only activated when you explicitly choose to open the scheduling drawer — which limits the processing of your data to interactions you initiate.

International transfers

ABSRTS is incorporated in Delaware and operates primarily under U.S. law. Where we process information about individuals located outside the United States, we rely on appropriate legal mechanisms and contractual safeguards with our clients and sub-processors, including Standard Contractual Clauses where applicable.

Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These include access controls, encryption in transit, vendor due diligence, and ongoing review of our security posture. No system can be guaranteed to be perfectly secure, and we encourage clients to combine our practices with their own information-security programs.

Data retention

We retain personal information only as long as necessary for the purposes described in this policy, to satisfy our legal and contractual obligations, and to resolve disputes. Contact submissions are kept only as long as needed to respond and to maintain reasonable business records, after which they are deleted or anonymized. Engagement-specific data is handled in accordance with the retention and return/deletion terms set out in the applicable client agreement.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or port the personal information we hold about you, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. California residents have specific rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). Residents of the European Economic Area, the United Kingdom, and Switzerland have rights under the GDPR, the UK GDPR, and the Swiss Federal Act on Data Protection where those frameworks apply. To exercise any of these rights, contact us using the details below. We will not discriminate against you for exercising your rights.

Children

Our services and website are intended for business audiences and are not directed to children under 16. We do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The "Last updated" date above indicates when it was last revised. When we make material changes, we will provide additional notice where appropriate.

Contact us

For questions about this policy, to exercise a privacy right, or to raise a concern about our handling of personal information, please email us at contact@absrts.com. We will acknowledge your request within a reasonable time and respond consistent with applicable law.