Privacy Policy

This Privacy Policy describes how SaTekk LLC ("we", "us", "our") collects, uses, discloses, and protects information about visitors to satekk.com (the "Site") and clients of our AI and software services (the "Services").

We comply with the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), Brazil's LGPD, Canada's PIPEDA, and other applicable privacy laws.

1. Information we collect

Information you provide directly

• Contact form submissions: name, email, company, message contents.
• AI chat interactions: messages you send to our chatbot.
• Client onboarding data: business contacts, billing details, and project requirements.
• Project data: content, datasets, or systems you authorize us to integrate with.

Information collected automatically

• IP address, browser type, device type, and approximate location.
• Pages viewed, time spent, and referrer.
• Cookies and similar technologies (see our Cookie Policy).

2. How we use information

• To respond to inquiries and deliver Services you request.
• To operate, secure, and improve the Site and Services.
• To comply with legal, tax, and regulatory obligations.
• To send service-related communications (you can opt out of marketing email at any time).

3. Legal bases (GDPR / UK GDPR)

• Contract — to deliver Services you have engaged us for.
• Legitimate interests — site operation, fraud prevention, service improvement.
• Consent — non-essential cookies and direct marketing.
• Legal obligation — tax, accounting, and regulatory record-keeping.

4. Sharing and subprocessors

We share information with vetted third-party processors who help us operate the Services (hosting, email delivery, AI model providers, analytics). A current list is published at satekk.com/subprocessors.

We do not sell personal data. We do not share personal data with third parties for their own marketing purposes.

5. International transfers

Where we transfer personal data outside the EEA or UK, we rely on the EU Standard Contractual Clauses, the UK International Data Transfer Addendum, the EU–US Data Privacy Framework where applicable, or other lawful transfer mechanisms.

6. Retention

We retain personal data only as long as necessary for the purposes described, then securely delete or anonymize it. Typical retention windows: 24 months for inquiries, 7 years for billing/tax records, project lifetime + 12 months for client project data (unless contractually shorter).

7. Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, port, or object to our processing of your personal data. EU/UK residents may lodge a complaint with their local Data Protection Authority. California residents can exercise CCPA/CPRA rights including the right to opt out of sale or sharing — we do not sell or share personal information as defined by these laws.

To exercise rights, email [email protected]. We respond within 30 days (or as required by applicable law).

8. Security

We use technical and organizational measures including encryption in transit (TLS 1.2+) and at rest, principle of least privilege, role-based access controls, regular dependency audits, and incident response procedures. No system is perfectly secure; we will notify affected individuals and regulators of qualifying breaches within the timelines required by law.

9. Children

The Site and Services are not directed to children under 16. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated where required.

11. Contact

Questions or requests: [email protected]. For non-privacy matters: [email protected].