Privacy policy

What this website collects

This site is deliberately thin. It sets no cookies, runs no analytics or tracking scripts, and loads no third-party embeds. Fonts are served from this domain, so viewing a page contacts no one but us.

There are two ways data reaches us from this site:

• The access-request form. You submit an email address. That address, a timestamp, and the stringrootxlabs-site as the source are forwarded to our internal intake so a human can reply to you.
• Server request logs. Our hosting provider records the usual HTTP request metadata — IP address, timestamp, path, user agent. We also hold the requesting IP briefly in memory to rate-limit form submissions. That in-memory record is not persisted and disappears within a minute.

Why we hold it

The email address is used to contact you about the access request you made, and for nothing else. We do not sell it, rent it, share it with advertisers, or add it to a marketing list you did not ask to join. Request logs exist to keep the site available and to investigate abuse of the form.

Our legal basis is your consent for the address you typed in, and our legitimate interest in operating and defending the site for request logs.

How long we keep it

• Access requests: kept while the enquiry is open and for up to 24 months afterwards, then deleted.
• Request logs: retained by our hosting provider on their standard schedule, typically 30 days.
• Rate-limit records: under 60 seconds, in memory only.

Who else sees it

We use a hosting provider to serve this site and an intake tool to receive form submissions. Both act as processors on our instructions and neither is permitted to use your data for its own purposes. We do not transfer personal data to any other third party unless a law compels us to, and we will tell you if that happens unless we are legally barred from doing so.

Your rights

Depending on where you live you may have the right to access, correct, export, or delete the personal data we hold about you, to withdraw consent, and to object to processing. Email privacy@rootxlabs.ai and we will act on it within 30 days. You do not need an account, a form, or a reason.

If you are in the EEA or UK and are unhappy with our response, you may complain to your national data protection authority.

How it is protected

Traffic to this site is encrypted in transit. Access to submitted enquiries is limited to the people who need it to reply to you. We are an offensive security company; we hold our own perimeter to the standard we hold our clients'.

Children

This is a business-to-business service. It is not directed at anyone under 16 and we do not knowingly collect their data.

Changes

If this policy changes materially we will update the effective date at the top and, where we hold your address because of an open enquiry, tell you directly.

Contact

Privacy questions and data requests: privacy@rootxlabs.ai.