Privacy policy.

DaVinci AI (“we”, “us”) respects your privacy. This page describes what information we collect when you visit davinciai.dev, how it is used, who we share it with, and what choices you have about it.

This policy applies to the public-facing davinciai.dev website. Information handled inside specific client engagements is governed by separate Data Processing Agreements and Business Associate Agreements where applicable.

Information we collect

We do not require you to create an account to browse this site. The categories of information we may collect are:

• Information you submit. If you contact us by email or through a form, we collect the information you choose to provide, typically your name, email address, organization and the contents of your message.
• Server logs. Our hosting provider records standard server logs, IP address, user agent, request timing, for operational and security purposes. These logs are retained for a short period and automatically rotated.
• Analytics. We may use privacy-respecting analytics to understand aggregate site usage (pages viewed, referrers, country-level geography). No personally identifying information is collected by these analytics, and we do not use cross-site tracking.
• Cookies. The website itself uses only the strictly necessary cookies required for the site to function. We do not set advertising or social-media tracking cookies.

How we use it

Information submitted to us is used solely to:

• Respond to your inquiry or request.
• Provide the services you’ve engaged us to deliver.
• Operate, secure and improve the website.
• Comply with our legal, regulatory and contractual obligations, including tax, accounting and audit requirements.

We do not sell or rent personal information to third parties. We do not use submitted information to train machine-learning models.

How we share it

We share personal information only with:

• Service providers we use to operate the site (hosting, email, analytics). These providers are bound by contract to use the information only as needed to provide their services to us.
• Regulatory or legal authorities when required by law, court order or other binding legal process, or where reasonably necessary to protect the rights, safety or property of DaVinci AI or others.
• Acquirers in the event of a merger, acquisition, financing or sale of all or part of our business, subject to equivalent protections.

Data retention

We retain inquiry correspondence for as long as needed to respond to and follow up on the inquiry, and then for a reasonable period afterward for our own records and legal obligations. Server logs are rotated on a short schedule. You can ask us to delete your information at any time using the contact details below; we’ll comply unless we have a specific legal obligation to retain it.

Security

We use industry-standard technical and organizational measures to protect personal information, including transport encryption (HTTPS), access controls, principle-of-least-privilege for staff access, and monitoring of our hosting environment. No system is perfectly secure, but we treat the bar as the level of care we would expect for our own data.

Your rights, GDPR (EEA, UK)

If you are in the European Economic Area or the United Kingdom, you have rights under the General Data Protection Regulation and equivalent legislation, including:

• The right to access the personal information we hold about you.
• The right to correct inaccurate or incomplete information.
• The right to deletion (“the right to be forgotten”) in defined circumstances.
• The right to restrict or object to certain processing.
• The right to data portability for information you provided to us.
• The right to lodge a complaint with your local supervisory authority.

To exercise any of these rights, contact us at the address below. We may need to verify your identity before responding.

Your rights, CCPA (California)

If you are a California resident, you have additional rights under the California Consumer Privacy Act and the California Privacy Rights Act, including the right to know what personal information we collect, to request deletion, and to opt out of any “sale” or “sharing” of personal information. We do not sell or share personal information in the sense those terms are defined under CCPA.

International transfers

We are based in North America and our service providers are based in North America and the European Union. When personal information is transferred internationally, we rely on appropriate safeguards, including Standard Contractual Clauses where applicable.

Children’s privacy

This site is not directed to children under the age of 16, and we do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact us so we can delete it.

Sub-processors

We use a small number of carefully chosen sub-processors to operate the site and the business, including hosting, email delivery and analytics providers. The list is reviewed periodically; we’ll provide an up-to-date list on request.

Changes to this policy

We may update this policy from time to time. The “last updated” date at the top of the page reflects the most recent revision. Material changes will be highlighted at the top of the page for a reasonable period after the change.

Contact

Questions about this policy, or requests to exercise any of the rights above, can be sent to admin@davinciai.dev. Privacy and data-protection inquiries can be addressed to the same address with the subject line “Privacy”.