Privacy Policy

This policy covers Squadly LLC(“Squadly”, “we”) and the website at https://go.squadly.tech. It is a plain summary of our practices and is not legal advice. Have counsel review and adapt this before you rely on it commercially.

Information we collect

Information you give us. When you submit the contact form we collect your name, work email, company, optional phone number, industry, team size, area of interest, budget range and the message you write. When you book a call, our scheduling provider collects your name, email and selected time.

Information collected automatically. Our web server records standard request logs — IP address, timestamp, requested path, referrer and user agent. These are used for security, rate limiting and diagnostics.

What we do not collect. This site ships no third-party analytics, advertising or tracking scripts, and sets no cookies of its own. There is no cross-site tracking to opt out of.

How we use it

• To respond to your enquiry and prepare for a call.
• To deliver, support and improve services under an engagement.
• To protect the site from abuse — rate limiting and spam filtering.
• To meet legal, accounting and contractual obligations.

We do not sell your information, and we do not add you to a marketing list because you contacted us.

Who we share it with

We use a small number of processors to run the business: an email provider, a scheduling provider, a CRM, our hosting provider, and our own self-hosted workflow automation. Each receives only what it needs to perform its function, under contract. We disclose information to authorities only where legally required.

Client data in automation engagements

During a build we may process data belonging to your business and your customers. That processing is governed by our engagement agreement, not by this policy. Our standard practices:

• Access is scoped to the least privilege the workflow requires, using dedicated service accounts rather than personal credentials.
• Credentials are stored encrypted and rotated at handover, and access is revoked when an engagement ends.
• Data is encrypted in transit and at rest, and we prefer deployment to infrastructure you control.
• For regulated data we use zero-retention model endpoints or self-hosted models so your content is not retained for provider training, and we will sign a BAA or DPA.
• We do not use your business data to train models or to improve our services for other clients.

Retention

Enquiries are kept for up to 24 months so we have context if you come back to us. Server logs are kept for 30 days. Engagement data is retained per the engagement agreement and deleted on request at the end of a project, subject to legal retention requirements.

Your rights

You can ask us to access, correct, export or delete the personal information we hold about you, and to stop contacting you. Email hello@squadly.tech and we will action it within 30 days. If you are in a jurisdiction with statutory data rights — including under the CCPA/CPRA or GDPR — those rights apply and we will honour them regardless of where you are.

Security

The site is served over TLS with HSTS, a strict Content Security Policy and no third-party scripts. Form submissions are rate limited and validated server-side. No system is perfectly secure, but we would rather tell you what we actually do than claim “bank-grade” anything.

Changes

If we change this policy we will update the date at the top of the page. Material changes affecting an active engagement will be communicated directly.

Contact

Questions about privacy go to hello@squadly.tech, or Squadly LLC, Austin, TX, United States.