Privacy Policy

Last updated: April 24, 2026

Boriken AI Consulting LLC ("we," "our," or "us") operates borikenaiconsulting.com (the "Site") and provides cybersecurity assessment and consulting services (the "Services"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Information We Collect

Information you provide directly

• Contact form submissions: name, email, phone, company name, and any message content you choose to send.
• Service bookings: when you purchase a service, we collect your email and company name for engagement coordination. Payment information (card number, billing address) is collected and processed by our payment processor, Stripe — we never see or store your full card details.
• Engagement data: during a paid engagement, we may collect technical information about your systems that you authorize us to assess (domain names, IP addresses, account credentials when explicitly provided, etc.). Such data is handled per the written service agreement governing that engagement.

Information collected automatically

• Server logs from our hosting provider (Netlify) may record IP addresses, browser type, and pages visited for security and operational purposes.
• We do not currently use analytics cookies or third-party tracking scripts.

2. How We Use Information

• To respond to inquiries submitted through the contact form.
• To provide the Services you purchased and communicate about engagements.
• To process payments through Stripe and issue receipts.
• To comply with legal obligations (tax records, contracts, professional liability).
• To operate and secure the Site (rate limiting, abuse prevention).

We do not sell personal information, and we do not use your information for advertising.

3. Third-Party Service Providers

We rely on a small number of vendors to operate the Site and Services:

• Stripe — payment processing. Stripe's privacy practices are governed by its own privacy policy.
• Netlify — website and serverless function hosting.
• ImprovMX — email forwarding for our contact address.
• Zoho / OpenSRS — domain registration.

We only share the minimum information these providers need to perform their function.

4. Data Retention

Contact form messages are retained for up to 24 months unless you request earlier deletion. Engagement records, contracts, and invoices are retained for at least seven (7) years to comply with tax and professional liability obligations. Payment records are held by Stripe per their retention policy.

5. Data Security

We take the security of your information seriously — it would be embarrassing if a cybersecurity consultancy got breached. In practice that means: HTTPS everywhere, encryption in transit, secrets stored in managed secret stores (not in code), minimum-privilege access to client systems during engagements, and industry-standard practices aligned with the frameworks we assess clients against (NIST CSF, CIS Controls, OWASP). No system is 100% secure; we will notify affected clients promptly in the event of a material breach.

6. Your Rights

Depending on where you live, you may have the right to:

• Request a copy of the personal information we hold about you.
• Request correction or deletion of your information.
• Object to certain uses of your information.
• Withdraw consent where we rely on consent to process.

To exercise any of these rights, email contact@borikenaiconsulting.com. We will respond within 30 days. Note that some information must be retained for legal or tax reasons even after a deletion request.

7. Children's Privacy

The Site and Services are not directed to children under 13, and we do not knowingly collect information from children. If you believe a child has provided us information, please contact us and we will delete it.

8. International Users

We operate from the United States. If you access the Site from outside the U.S., your information will be transferred to and processed in the U.S., which may have different data protection laws than your country.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced on the Site at least 14 days before they take effect. The "Last updated" date at the top of this page reflects the current version.

10. Contact

Questions about this policy? Email contact@borikenaiconsulting.com or write to:

Boriken AI Consulting LLC
541 Stratford Rd
Union, NJ 07083
United States