Privacy Policy

1. Information collected

You provide chat messages and, if you submit an inquiry, your name, email address, company, project description, and optional email follow-up preference. A submitted inquiry also includes the current conversation transcript, an AI-generated project summary, and available follow-up drafts. The form does not request a phone number or collect SMS consent.

Hosting, security, and form providers may process IP addresses, browser or device information, request times, referring pages, and other metadata needed to operate the site and filter spam. Do not submit passwords, payment details, sensitive personal information, confidential documents, or private customer records.

2. AI conversations

When you send a chat message, the current conversation passes through our server to OpenAI to generate a reply, summary, and follow-up drafts. Information you type into the chat is included. Contact-form details are not separately sent to the model by this application.

The active chat stays in page memory. We do not intentionally save its transcript in our inquiry system unless you submit the project form. The homepage temporarily saves your starting description in this tab’s session storage to open the dedicated chat page. That handoff is removed when read, expires from use after 15 minutes, and is not used for tracking. If session storage is unavailable, a temporary URL fragment carries the description and is removed on arrival; fragments are not sent in HTTP requests. Reloading, leaving, or restarting the chat clears the active application conversation; service-provider logs and retention are separate.

Our API calls request that response objects not be stored. This is not a zero-retention promise: OpenAI may retain information for abuse monitoring or other purposes under its applicable terms and data controls. See OpenAI's API data controls. AI summaries and drafts may be inaccurate and should be reviewed.

3. How we use information

We use information to operate the guide, explain possible approaches, assess project fit, respond to inquiries, arrange conversations, review submitted context, troubleshoot problems, prevent abuse, and meet applicable obligations. Optional project-related email follow-ups depend on your permission where required. This demo does not make eligibility or similarly consequential decisions about people.

Where a legal basis is required, it depends on the activity: responding to a requested pre-contract inquiry, legitimate interests in operating and securing our business subject to your rights, consent for optional follow-ups where required, or a legal obligation.

4. Service providers and disclosures

• Netlify hosts the website and server functions and stores submitted inquiries through Netlify Forms, including anti-spam and request metadata.
• OpenAI processes conversation content for AI replies, summaries, and draft messages.
• Calendly processes scheduling information if you open the booking link and use its scheduler. Booking links on the project page include your current project summary and provisional blueprint (or your starting description if the AI has not finished) in Calendly’s notes field. These notes travel as URL query parameters and may appear in browser history and Calendly request logs. Avoid including confidential or sensitive information, and review the imported notes before confirming your appointment. See its Privacy Notice.
• Google Fonts supplies this site's fonts. Browser requests for those resources disclose technical request information, including an IP address, to Google.

Authorized personnel and providers may access information as needed for these purposes. We may disclose information when required by law, to protect rights or security, or in a business transaction subject to applicable safeguards and law. We do not sell personal information, share it for cross-context behavioral advertising, or publish submitted inquiries.

5. Cookies and tracking

The current site does not add advertising pixels, analytics scripts, or browser local-storage tracking. Single-use session storage carries your starting project description between our pages. Infrastructure providers may use technical mechanisms for security and operation. External sites, including Calendly and BowTiedCyber's main site, have their own practices. You can control cookies and website permissions through your browser. We do not currently change site behavior in response to a Do Not Track signal.

6. Retention and security

Submitted inquiries remain in our inquiry system while needed to respond, maintain relevant business records, resolve disputes, or meet legal obligations. No fixed automatic deletion period is configured. You can request deletion, subject to applicable exceptions. Providers' logs, backups, and legal retention may follow different schedules.

We use measures including HTTPS, server-side secret storage, and access controls; no online system is completely secure. Providers may process information in the United States and other countries where they operate. Local protections can differ. Where required, applicable transfer safeguards must be used.

7. Your choices and rights

You can browse without submitting an inquiry and use the booking link without chatting. Optional email follow-up permission is not required to submit an inquiry. Withdraw it by replying to a follow-up or contacting us. We may still respond to your requested inquiry or send necessary service communications. Automated email and SMS delivery is not enabled in the current version.

Depending on your location and applicable law, you may have rights to access, correct, delete, or obtain a copy of information; restrict or object to processing; or withdraw consent. Contact us to make a request. We may need reasonable verification, but do not send identity documents unless we arrange a suitable method. We handle requests within applicable legal requirements. You may also have a right to complain to a local data-protection authority. We do not retaliate for exercising applicable rights.

8. Children, updates, and contact

This business website and guide are intended for adults, not children under 18. Contact us if you believe a child provided information so we can review and address it. We may update this policy as practices change, revise the date above, and provide additional notice or obtain consent when required.

Contact BowTiedCyber LLC at support@bowtiedcyber.com with “Replace the Work” in the subject, or use the project inquiry form. For a privacy request, use the subject “Replace the Work — Privacy request.”