Privacy Policy

Arx Sable LLC is located in Banning, California, United States. Contact [email protected] about this policy.

This policy covers arxsable.ai and services that expressly link to it. A separate product or customer environment may have its own privacy notice. Engagement information is governed by the client agreement.

The inquiry form asks for:

• Name.
• Email.
• Organization, optional.
• Approximate team size, optional.
• Who this is for.
• What is going on.
• What you would want to be different.

We receive the information you enter in the form or send by email. The form also sends an inquiry identifier and limited page or source context used to route the message. It does not accept uploads.

Do not enter passwords, personal records about others, health information, financial account information, or confidential client records. A short description is enough for an introductory conversation.

Hosting and security providers process technical information to deliver and protect the site. This includes IP address, user agent, timestamps, requested pages, and request or error information.

We do not run third-party analytics or advertising trackers. Cloudflare provides website security and Turnstile abuse prevention. These services process the technical signals needed for those functions.

Providers described in Subprocessors receive information when their services are used. We do not embed advertising or tools that collect visitor activity across unrelated websites for advertising.

• Respond to inquiries and decide whether an engagement is appropriate.
• Scope services and communicate about agreed work.
• Keep inquiry and business records.
• Deliver, diagnose, and secure the website.
• Reduce spam, abuse, and duplicate submissions.
• Meet legal obligations.

An inquiry authorizes communication about that inquiry. It does not subscribe you to unrelated promotional email. We do not sell personal information or share it for cross-context behavioral advertising.

The form sends your information to a Supabase server-side function. The function validates the submission, checks a Cloudflare Turnstile token, and applies request limits. Accepted inquiries are stored in Supabase for Arx Sable to review.

The Turnstile token is checked by the server and is not stored in the inquiry record. Resend receives inquiry information for notification to Arx Sable and confirmation to the submitter when email delivery is configured. Storage and email delivery are separate events. An accepted inquiry can remain stored if email delivery fails.

Lovable and Cloudflare provide website hosting and delivery. Email providers process correspondence sent to us. The Subprocessors page identifies providers and their purposes. Providers process information under their applicable agreements and terms.

Before engagement information is disclosed, the agreement must identify its approved providers and permitted uses.

Akeakamai AI LLC handles call intake information when a separate engagement involves phone AI. It does not receive every website inquiry. The client agreement covers that engagement.

We disclose information to public authorities when legally required.

The site uses necessary security storage. It does not set first-party localStorage or sessionStorage entries. The Cookies and Tracking page lists observed storage and provider details that still need confirmation.

We honor Global Privacy Control as an opt-out of sale or sharing. We do not sell or share information for cross-context behavioral advertising, and we do not load analytics or advertising scripts. Necessary security and processing of an inquiry you choose to submit remain available.

We do not change site behavior in response to Do Not Track signals. We honor Global Privacy Control as described above.

Our policy retains ordinary inquiries and related email correspondence for 12 months after the last meaningful contact. A substantive conversation or reply starts a new period. Automated notifications and retries do not.

New inquiry records are checked for expiry each day. Older records require a review of their contact history before automatic expiry. Our policy requires a monthly review of inbox copies under the same retention period.

Engagement records follow the written client agreement. A documented legal hold can suspend deletion of the records it covers. The hold is reviewed and released when its reason ends.

Our policy limits routine security logs under our control to 30 days. Provider-operated logs follow the provider's retention terms. Rate-limit counters are removed after two days, with a daily cleanup check.

A separate record of a privacy request and our response is retained for 24 months. It records the request date, type, verification outcome, action, and response date. It does not preserve the original inquiry or identity documents.

Lovable Cloud keeps daily database backups for roughly 14 days. Deleted information is removed again before a restored database returns to service. The Security page describes backup status.

The inquiry flow uses server-side validation and abuse controls. The Security page describes verified practices and operational details awaiting confirmation. No method of internet transmission or electronic storage is completely secure. Use the public form only for an initial description.

You can ask what personal information we hold about you, request a correction, or request deletion. You can ask us to stop a sale or sharing of personal information. We do not sell or share it for cross-context behavioral advertising. We do not discriminate against you for making a privacy request.

Email [email protected] with the subject “Privacy request.” We respond within 45 calendar days. We verify a request by replying to the email address associated with the information and asking for enough information to identify the record. Do not send identity documents through the inquiry form.

An authorized agent can submit a request with your written permission. No account is required. Legal requirements and other applicable exceptions can affect what we can delete or disclose. The Privacy Requests page explains the process.

Rights under applicable law depend on the jurisdiction and the processing involved.

Engagement information is covered by the client contract. That agreement identifies the purpose, permitted data, access, providers, reporting rules, retention, and deletion.

Individual conversations stay private. Leadership receives patterns and recommendations without identifying the people behind them. Public examples use agreed publication boundaries and can describe an improvement anonymously.

This website is not directed to anyone under 18. We do not knowingly collect personal information from children through the site. Email [email protected] if a child has submitted information so we can review and delete it.

We update the effective date when this policy changes. We post a notice of material changes on the website for 30 days.

Contact [email protected]. Arx Sable LLC, Banning, California, United States.