Privacy policy

What we collect

Two kinds of information, and only these two.

The first is what you send us. The Strategy Call page is a contact form. If you fill it in, we receive what you typed: your name, work email, company and your description of the workflow, plus your role, company size and the systems involved if you choose to add them. If you email us instead, we receive your email. Please leave out passwords, credentials and personal details about other people; a first conversation does not need them.

The second is request logs. This site is a set of static files served by Cloudflare. Altivus runs no server of its own for it. Cloudflare records each request to the site: the IP address it came from, the browser and device type (the user agent), the page requested and the time. Sending the form is a request too, and is logged the same way. We can look at these logs to keep the site running, block abuse and troubleshoot. We do not use them to identify or profile visitors.

That is the full list. This site runs no third-party analytics, no tracking pixels, no session recording and no advertising tags. Fonts and scripts are served from the site itself, so loading a page sends nothing to an analytics, advertising or social media company.

Cookies

This site sets no cookies for analytics, advertising or profiling, and none to remember you between visits.

There is one exception, and it is a security measure. Cloudflare, which serves the site and protects it from automated traffic, may set a strictly necessary cookie when it needs to tell a person from a bot. It exists only so that check can pass. It holds no profile, it is not used for advertising, and it is not connected to anything you type into the form.

No cookie data from this site is sold or shared with any third party for that party's own purposes. Since there is nothing to opt out of, browser signals such as Global Privacy Control and Do Not Track are honored by default.

How we use what you send

For two things: to reply to you, and to prepare for the conversation you asked for. Preparing means reading what you wrote and, sometimes, looking at your company's public website before the call.

Nothing else. Submitting the form does not subscribe you to a newsletter, a drip sequence or any other mailing. We do not send marketing email. If you separately ask for something, such as a follow-up note or a document, you get that and nothing further.

Request logs are used for security and troubleshooting only.

Who else sees it

Nobody, for their own use. Altivus does not disclose personal information to third parties, and does not sell personal information or cookie data to anyone. No data brokers, no advertising networks, no list rental. Nothing is shared for cross-context behavioral advertising.

A service provider is different from a third party. A service provider handles data on our instructions, to deliver a service to us, and may not use it for anything of its own. Three touch data from this site:

• Cloudflare hosts and delivers the site, manages its DNS and TLS certificates, and screens traffic for abuse. It sees requests to the site and keeps the logs described above. When you send the form, a small program we wrote, running on Cloudflare, receives the submission, checks that it is complete, and passes it on. It holds the submission only long enough to do that.
• Composio, an integration platform, takes the submission from that program and turns it into an email. It does this by running a "send email" action for us through a mailbox account we own. Composio sees the submission in order to send it. It is a service provider in its own right, and we name it here for that reason.
• Google provides that mailbox account. The email is sent from a Google mailbox that belongs to Altivus, and it lands in an Altivus inbox that Google holds. That inbox is where we read what you sent, and our replies to you go from there.

Each is bound by contract to process data only for us. None is a CRM, marketing or analytics platform, and submissions are not passed into one, because we do not use one.

The only other case is legal. We will disclose information if a court order, subpoena or other lawful request requires it, or if disclosure is necessary to protect our rights, our systems or someone's safety. We disclose only what the request requires and, where the law permits, we tell you. That is the whole list.

Where it is held and how it is protected

Not on a server of our own; this site has none. A form submission passes through Cloudflare and Composio, both handling it for us under contract, and ends as an email in a Google mailbox account that Altivus owns. That mailbox is where we read it and where it stays. Altivus is based in the United States and processes information there; if you write from elsewhere, your information is handled in the United States under this policy.

Your connection to the site is encrypted in transit (TLS), and so is each step from there to our inbox. Access to submissions is limited to the people at Altivus who need it to reply to you, and access to Cloudflare's logs to the people who keep the site running. No system is perfectly secure. If a security incident affects your information, we will tell you as the law requires, and sooner if we can.

How long we keep it

A form submission is kept while the conversation it started is live, and for 24 months after our last contact with you. Then it is deleted. Ask sooner and we delete sooner, unless a legal obligation or a live engagement requires us to keep a record, in which case we keep only what is required and tell you what that is.

If the conversation becomes a consulting engagement or a HeyQuinn license, the written agreement for that work governs its records from then on.

The 24-month rule applies to the email in our Google mailbox, which is the only copy we hold. When we delete it, we delete it from that mailbox in full, including any sent copy. Cloudflare keeps its request logs for a short period under its own terms, then deletes them; we keep no copy of those logs. Composio keeps a record of each send it runs for us under its own terms; we keep no copy of that record and do not use it. Google holds the email for as long as it sits in our mailbox, and clears its own backups after we delete it under its terms. Ordinary email between you and us follows the same 24-month rule.

Your rights

Wherever you live, you can ask us to tell you what we hold about you, correct it, delete it, give you a copy in a usable format, or stop using it for a particular purpose. Email [email protected]. We reply by email within 30 days. We may ask you to confirm you are the person the information is about, usually by writing from the address we have on file. No account, no form, no fee, and we will not treat you differently for asking. Someone else may ask on your behalf if they can show you authorized them.

State privacy laws, including California's, give residents the right to opt out of the sale of personal information and of its sharing for cross-context behavioral advertising. Altivus does not sell or share personal information as those laws define it, so there is nothing to opt out of. We do not collect what those laws call sensitive personal information.

If you are in the European Economic Area, the United Kingdom or Switzerland, the same rights apply. Our basis for handling what you send is that you asked us to respond; for request logs, it is our legitimate interest in keeping the site secure. You may also complain to your local data protection authority, though we would rather hear from you first.

Children

This site is for people making decisions for organizations. It is not directed to anyone under 16, and we do not knowingly collect information from anyone under 16. If you believe someone under 16 has sent us information, email [email protected] and we will delete it.

If the business changes

If Altivus is sold, merges with another company, or transfers the part of the business this site belongs to, the information described here may move with it. Whoever receives it is bound by this policy for that information, and would have to tell you before using it differently.

Other sites

This site links to heyquinn.com, the HeyQuinn product site, and occasionally to other sites. Each has its own privacy policy. This policy covers altivusops.ai only.

Changes to this policy

When this policy changes, the "last updated" date at the top changes with it, and the new version applies from that date. If a change expands what we collect or narrows your rights, we say so in plain words at the top of the policy for at least 30 days, and we email anyone who has an open conversation with us at the time. We keep no mailing list, so that is the only email you will get about it.