Privacy Policy

This policy applies to information processed through the Aback.ai public website, consultation workflows, and communication channels used for project discovery and support.

If your organization signs a separate commercial agreement with Aback.ai, the contract terms and data processing terms in that agreement may supplement this policy for project-specific environments.

For questions about how this policy applies to your use case, you may contact us through our contact page.

We collect information you provide directly, including name, work email, company information, business goals, project requirements, and any details included in consultation or inquiry submissions.

We collect operational usage data necessary for reliability and security, such as page interactions, browser metadata, approximate geolocation by IP, and diagnostic logs used for performance analysis.

When communicating with us by email or form submission, we may retain communication history to provide continuity, context, and quality assurance for future interactions.

We do not intentionally collect sensitive personal information unless you choose to provide it. If sensitive information is shared by mistake, please notify us so we can review handling controls.

We use submitted information to respond to inquiries, schedule consultations, scope delivery requirements, and provide services requested by your team.

Operational and usage information may be used to improve website reliability, user experience, conversion flow quality, and content relevance, including updates to resources published in our blog.

We may use business contact details for service-related communication and relevant updates. We do not sell personal information and do not use your data for unrelated campaigns without a lawful basis.

Where AI or automation tooling is used in operations, processing is constrained to legitimate business purposes and reviewed under our AI Ethics Charter.

Depending on jurisdiction, we process information under one or more lawful bases, including consent, contractual necessity, legitimate interest, and legal obligation.

When consent is required, you can withdraw it at any time for future processing activities without affecting prior lawful processing.

If you have regulatory or compliance requirements, please raise them early in the engagement through contact so controls can be mapped properly.

We may share information with trusted service providers that support hosting, analytics, communication, security, and operations. These providers are selected with reasonable diligence and contractual safeguards.

Information may be disclosed when required by law, legal process, or to protect rights, safety, and platform integrity.

We do not sell personal data to third parties and we do not permit third-party use for unrelated objectives inconsistent with this policy.

Information is retained only for as long as necessary to fulfill legitimate business, contractual, legal, or security obligations, then deleted or anonymized where feasible.

We apply layered safeguards appropriate to risk, including access controls, least-privilege principles, environment-level security controls, and monitoring practices designed to detect misuse or anomalies.

No system can guarantee absolute security. If a material incident impacts your information, we will take appropriate response actions and communication steps based on applicable obligations.

Subject to local law, you may request access, correction, deletion, portability, or restriction of your information, and object to specific processing activities.

You may also request clarification on data practices, processor categories, and retention windows relevant to your interaction history.

To exercise rights or submit privacy concerns, contact us through Contact. For platform usage terms, review our Terms of Service.