Privacy policy

When you submit a project inquiry or request a technical briefing, we collect the details you provide, including your name, work email, organization, inquiry type, timeline, and description of the business challenge.

Our hosting and security systems may process technical information such as IP address, browser type, request time, and security signals. We use this information to operate the site, prevent abuse, and investigate failures.

We use inquiry information to assess and respond to your request, assign an internal owner, prepare a technical briefing, maintain a record of business correspondence, and protect the website from misuse.

Submitting an inquiry does not subscribe you to marketing. We may send an operational acknowledgement, calendar invitation, reminder, or direct response connected to your request.

We use specialist providers to operate this workflow. Resend processes transactional email and delivery events. Upstash provides persistent inquiry storage and rate limiting. Cal.com provides live appointment availability, calendar invitations, and reminders when scheduling is enabled. Vercel hosts the website and provides privacy-respecting, aggregated web analytics.

These providers process information on our behalf under their respective contractual and security terms. We do not sell or rent inquiry information, and we do not share it with third parties for their own marketing.

The website uses Vercel Web Analytics to understand aggregate page usage and conversion events. The implementation is designed without third-party advertising cookies and does not send names, email addresses, company names, or inquiry text as analytics properties.

The scheduling provider may use storage that is necessary to display availability and complete a booking. Its interface is loaded only after you submit the short briefing qualification form.

Inquiry records are normally retained for up to 12 months unless a longer period is required for an active commercial relationship, legal obligation, dispute, or security investigation. Delivery-event deduplication records are retained for a shorter operational period.

We use access controls, encrypted connections, request validation, rate limiting, origin checks, provider authentication, and delivery monitoring. No online system can be guaranteed completely secure, so please do not submit passwords, credentials, health records, payment-card details, or unnecessary sensitive information through the form.

Ndawo AI operates globally, with locations in Abu Dhabi, Shanghai, and Lusaka. Information may be processed in countries where we or our service providers operate. Where required, we use appropriate contractual and organizational safeguards for international transfers.

Depending on applicable law, you may request access, correction, deletion, restriction, or a copy of your personal information, or object to certain processing. We may need to verify your identity before completing a request.

To ask a privacy question or exercise a right, email privacy@ndawo.org. You may also contact the relevant data-protection authority in your jurisdiction.