Privacy Policy
Cookieless Telemetry
Zero third-party advertising cookies, zero fingerprinting pixels, and no cross-site surveillance.
Zero AI Model Training
Client data, consultation briefs, and custom code are never used to train public foundation models.
Encrypted Storage
TLS 1.3 in transit and PostgreSQL Row-Level Security (RLS) with AES-256 at rest.
1. Identity and Scope
This Privacy Policy applies to the digital platforms, websites, and services operated by FACTAILE HQ (“FACTAILE”, “we”, “us”, or “our”), including the public website hosted at https://factaile.com and the client consultation portal at https://portal.factaile.com.
FACTAILE provides specialized engineering services, including autonomous artificial intelligence (AI) agent pipelines, full-stack Next.js platforms, cloud database architecture, and technical consulting. This policy details how we handle information collected when you visit our website, schedule discovery consultations, or engage our engineering studio.
2. Absolute Zero-Sale Data Guarantee
We do not sell, rent, license, trade, or monetize your personal information to third-party data brokers, marketers, or advertisers under any circumstances.
Our revenue is earned strictly through high-tier software engineering, system architecture, and technical consulting. We treat visitor and client privacy as an immutable institutional standard.
3. Information We Collect
We adhere to strict data minimization principles, collecting only what is strictly necessary to provide our services:
- Consultation & Discovery Data: When scheduling an architectural review or consultation via our booking system, you voluntarily submit your name, professional email address, company name, telephone number (optional), time zone, project scope, and budget tier.
- Privacy-First Telemetry: We collect aggregate, privacy-preserving performance metrics (e.g. page load duration, Core Web Vitals). This telemetry uses daily-salted cryptographic HMAC hashes that irrevocably discard your IP address and device identifier.
- Communications: Records of inquiries, consultation notes, and technical scopes exchanged via email or discovery meetings.
4. Treatment of Artificial Intelligence & Third-Party LLM APIs
As an AI systems engineering studio, we frequently architect solutions utilizing foundation models (including OpenAI, Anthropic Claude, and Google Cloud Vertex AI / Gemini).
We maintain strict zero-data-retention and zero-training protocols:
- No client-provided confidential code, technical architectures, or consultation briefs are submitted to train public foundational AI models.
- All commercial AI pipelines built for enterprise clients utilize commercial enterprise API tiers where zero data retention for training is contractually enforced.
- Custom agent memory and vector embeddings remain segregated within dedicated client databases backed by Row-Level Security (RLS).
5. Legal Bases for Processing (GDPR & CCPA/CPRA Compliance)
We process personal data under the following recognized legal grounds:
- Performance of a Contract: Scheduling consultations, delivering discovery roadmaps, and executing agreed Statements of Work (SOW).
- Legitimate Interests: Securing our infrastructure against automated DDoS, brute-force attacks, and SQL injection, ensuring high system uptime, and communicating directly with prospective clients.
- Legal Compliance: Retaining financial records, invoices, and audit logs required by applicable commercial and tax regulations.
6. Data Retention and Deletion
We retain consultation records only as long as necessary to fulfill the operational purpose for which they were collected, or as required by applicable legal statutes.
Inquiries that do not materialize into an active client engagement are automatically scheduled for archival and permanent cryptographic purging. You may request the immediate deletion of your data at any time by contacting our privacy officer.
7. Your Rights and Global Privacy Protections
Regardless of your geographic location, FACTAILE grants the following rights regarding your personal data:
Right of Access & Portability
Request a copy of your stored records in structured machine-readable format.
Right of Erasure (“To Be Forgotten”)
Request the permanent deletion of your inquiry details and contact records.
Right of Rectification
Request the prompt correction of outdated or inaccurate personal information.
Right of Restriction
Limit or restrict how your information is processed during pending disputes.
8. Subprocessors and Infrastructure Partners
To deliver high-availability services, we partner with verified, enterprise-grade cloud providers:
- Vercel, Inc.: Global Edge CDN, serverless runtime hosting, and DDoS protection.
- Supabase / AWS: Managed PostgreSQL storage with AES-256 encryption at rest and automated backups.
- Resend Technologies, Inc.: Secure transactional email dispatch for meeting confirmations and calendar invites.
- Google Workspace / Zoom Video Communications: Video conferencing links generated for scheduled discovery sessions.
9. Contact and Data Protection Officer
For privacy inquiries, data deletion requests, or security vulnerability disclosures, contact our privacy team directly:
Email: hello@factaile.com