Privacy Policy

1. Who We Are

Foundation21 LLC, a Connecticut limited liability company doing business as Foundation21 ("Foundation21", "we", "us", or "our"), provides AI consulting and managed services. We operate the website foundation21.io and are the data controller responsible for the personal information described in this policy.

For any privacy question or request, contact hello@foundation21.io. We will provide our registered business address on request.

2. Information We Collect

2.1 Information you give us

When you submit our contact form, we collect the information you choose to provide: your name, email address, company name (optional), the service you are interested in, and the content of your message. If you email us directly, we receive whatever you include in that email.

Please do not send us sensitive personal information — such as health records, government identification numbers, or financial account details — through the contact form. It is not the right channel for it, and we do not need it to answer your inquiry.

2.2 Information collected automatically

Our website sets no cookies and runs no analytics or tracking software. We do not build profiles of visitors and we cannot identify you from browsing our site alone.

As with any website, our hosting provider and the third parties listed in Section 5 receive standard technical information required to deliver the page to you — including your IP address, browser type, and the time of the request. This is ordinary server log data, and we do not use it to identify or track individuals.

2.3 We do not collect

We do not knowingly collect location data, biometric data, browsing history from other sites, or information about your household. Our website has no file upload feature — there is no way to upload documents, images, or other files to us through this site.

3. How We Use Your Information

We use the information you provide only to:

• Respond to your inquiry and answer your questions;
• Prepare a proposal or quote where you have asked for one;
• Follow up about the services you asked about, where you have asked us to;
• Keep records required for our own legal, tax, and accounting obligations.

We do not use your information for advertising, we do not add you to a marketing list without your consent, and we do not sell, rent, or trade it to anyone.

If you are in the EEA or UK: our legal basis for processing is our legitimate interest in responding to inquiries about our services, and, where you have asked to receive follow-up communications, your consent. You may withdraw consent at any time.

4. Our Use of Artificial Intelligence

Foundation21 is an AI consultancy, and we use AI tools in our own work. We think you are entitled to know exactly how, so here it is in plain terms.

4.1 Where we use AI

• Content on this website. Portions of our website copy and our blog posts are drafted or edited with the assistance of AI tools and reviewed by a human before publication. Articles that are substantially AI-generated are labeled as such.
• Our internal operations. We use AI-assisted software for engineering, research, drafting, and administrative work.
• Client engagements. Where we deploy AI systems for a client, the terms governing that data are set out in the separate written agreement for that engagement, not this policy.

4.2 What we do not do with your information

• We do not use your personal information to train AI models, ours or anyone else's.
• We do not paste your personal information into public or consumer AI chatbots.
• We do not use AI to make automated decisions that produce legal or similarly significant effects about you. A human at Foundation21 reads and answers every inquiry.

4.3 AI-generated content may contain errors

AI-assisted content on this site, including blog posts and summaries of third-party news, may contain inaccuracies. It is provided for general information only and is not professional advice. Verify anything you intend to rely on.

5. Third-Party Services and Data Sharing

We keep third parties to the minimum needed to run this website. We share your information only with the providers below, and only for the purposes described. We do not share it with anyone else except where required by law.

We may also disclose information if we are legally required to do so, or to protect our legal rights. If Foundation21 is ever sold or merged, information may transfer as part of that transaction; we will update this policy if that happens.

6. How Long We Keep Your Information

• Inquiries that do not become engagements: deleted within 24 months of our last contact with you, or sooner if you ask.
• Inquiries that become client engagements: retained for the life of the engagement and afterward as required for legal, tax, and accounting purposes.
• Deletion requests: we keep a minimal record that you made the request, so that we can prove we honored it.

7. Your Privacy Rights

Depending on where you live, you may have some or all of the rights below. We extend these rights to everyone who contacts us, regardless of location — we would rather do this once and do it properly.

• Access — ask what personal information we hold about you.
• Correction — ask us to fix information that is wrong or incomplete.
• Deletion — ask us to erase your personal information (see Section 8).
• Portability — receive a copy of your information in a portable format.
• Opt out — tell us to stop contacting you, at any time.
• Non-discrimination — we will never treat you differently for exercising any of these rights.

For California residents (CCPA/CPRA): we have not sold or shared personal information in the preceding twelve months, and we do not sell or share it now. We do not process personal information for targeted advertising, and we do not use or disclose sensitive personal information beyond the purposes permitted by law.

For EEA and UK residents: you also have the right to object to or restrict processing, and the right to lodge a complaint with your local data protection authority.

8. How to Request Deletion of Your Data

You can ask us to delete everything we hold about you. Here is exactly how it works.

1. Send the request. Email hello@foundation21.io with the subject line Data Deletion Request, or use our contact form and select Privacy or data deletion request. Include the email address you originally contacted us from so we can find your records.
2. We verify it is you. We will reply from hello@foundation21.io to confirm the request came from you. This protects you from someone else deleting your records. We ask only for what we need to match you to an existing record.
3. We acknowledge within 10 business days of receiving your request.
4. We complete deletion within 30 calendar days. If the request is complex and we need longer, we will tell you why before that deadline and finish within 90 days.
5. We confirm in writing when it is done, and tell you if anything had to be retained and the legal reason why.

Requests are free. If we cannot fulfil a request, we will explain why and tell you how to challenge that decision.

9. Data Security

This is a static website with no user accounts, no login, and no database of visitor information. It is served over HTTPS. Inquiries reach us as email and are stored in our business email account, which is protected by strong authentication.

We take reasonable measures to protect the information in our possession. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and any required regulator as the law requires.

10. International Data Transfers

We operate in the United States and our service providers listed in Section 5 process data in the United States. If you contact us from outside the US, your information will be transferred to and processed in the US, where privacy laws may differ from those in your country.

11. Children's Privacy

Our services are sold to businesses and are not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, email hello@foundation21.io and we will delete it promptly.

12. Links to Other Sites

Our website and blog link to third-party sites we do not control. This policy does not apply to them, and we are not responsible for their privacy practices. Read their policies before providing them with information.

13. Changes to This Policy

We may update this policy as our business or the law changes. The "Last updated" date at the top reflects the most recent revision. If we make a material change to how we handle your personal information, we will make that clear on this page rather than quietly editing the text.

14. Contact Us

Questions, requests, or complaints about this policy or your personal information: hello@foundation21.io. We aim to respond within 10 business days.