Privacy Policy

IT PEOPLE (“we”, “us”) is a software development company. For website inquiries we are the controller of the personal data you submit. For production systems we build for a client, that client is typically the controller and we act as a processor under their instructions.

We collect only what we need to respond, quote, deliver, and operate the site. Categories include:

• Identity & contact. Name, email, phone, preferred contact method, and company details you type into contact forms.

• Project details. Scope notes, tech stack, files you upload, repositories you grant access to, and messages about AI, web, or e-commerce work.

• Technical data. IP address, browser type, device, pages viewed, and approximate location derived from analytics and server logs.

• Cookies. Session, analytics and, where enabled, advertising cookies that help us understand site use, keep the theme/session working and fund the website.

We do not intentionally collect special-category data (health, biometrics, precise location) through the public website. Do not paste secrets, private keys, or production dumps into contact forms.

• Answer contact requests and send confirmation emails.

• Prepare proposals, SOWs, and technical estimates for AI, web, and e-commerce work.

• Deliver, support, and invoice contracted software projects.

• Improve the website, diagnose errors, and measure which pages help visitors.

• Comply with law, enforce our Terms of Service, and protect against fraud or abuse.

Legal bases (where GDPR or similar rules apply) include contract, legitimate interests in running a software studio, consent for optional analytics and advertising cookies where required, and legal obligation.

We use Google Analytics to understand traffic: pages viewed, approximate geography, device, and referral source. Google may process this data under its own terms. You can block analytics with browser settings, extensions, or Google’s opt-out tools.

Advertising (Google AdSense). Our website displays advertisements served by Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on a user’s prior visits to this website or other websites. Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet. These cookies and similar technologies may collect your IP address, device identifiers and browsing activity to deliver, measure and personalise ads and to prevent fraud.

Where required by law, advertising and analytics cookies are only used after you give your consent through the cookie banner, and you can change your choice at any time. You can opt out of personalised advertising by visiting Google Ads Settings, or opt out of a third-party vendor’s use of cookies for personalised advertising at aboutads.info, optout.networkadvertising.org or youronlinechoices.eu. You can learn how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites.

Essential cookies or local storage may remember your theme (light/dark), language and consent choice.

We do not sell personal information. We share data only with:

• Email / SMTP. Form notifications and confirmations are sent through our email provider so we can reply to you.

• Hosting & CDN. The website is served from our hosting platform; logs may include IP and user-agent.

• Analytics and advertising. Google Analytics and Google AdSense, as above.

• Cloud & tools on projects. If you grant access, data may sit in AWS, GCP, Vercel, GitHub, Supabase, Firebase, or similar tools you approve in an SOW.

• Professional advisers and law. Accountants, insurers, or authorities when legally required.

Vetted subcontractors who help deliver code work under confidentiality. They may only use personal data to perform that work.

• Prompts, datasets, and evaluation files you send for an AI engagement are used only to build and test that product, unless you agree otherwise in writing.

• We do not use your confidential production data to train public foundation models.

• If an SOW uses a third-party model API (OpenAI, Google, Anthropic, or similar), that vendor processes prompts under its policy. Avoid sending live customer PII in prompts unless the SOW and DPA cover it.

• You are responsible for lawful collection of any training data you supply (consent, licenses, employment notices).

• Contact records: typically up to 24 months after last correspondence, unless a contract or tax rule requires longer.

• Project repositories and credentials: for the life of the engagement, then returned or deleted per the SOW.

• Analytics: according to Google Analytics’ settings and our hosting log rotation (often 14 months or less for detailed hits).

• Invoices and legal correspondence: as required by accounting and limitation periods.

We use HTTPS, access-controlled inboxes, and reasonable technical and organizational measures. No method of transmission is perfectly secure. You should use unique passwords, 2FA on cloud and git accounts, and a secrets vault instead of emailing private keys. Report suspected incidents to the contact below promptly.

Depending on where you live, you may have the right to access, correct, delete, or port personal data, to object or restrict certain processing, and to withdraw consent. You may also lodge a complaint with a supervisory authority.

California residents: we do not sell or share personal information for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA. To exercise rights, email us with enough detail to verify the request. We will not discriminate against you for exercising privacy rights.

We and our processors may store or access data in the United States and other countries. Where a transfer tool is required (for example EU Standard Contractual Clauses), we will use it for client project data under a DPA. The public website may be viewed globally.

Our website and services are directed at businesses and adults. We do not knowingly collect personal data from children under 18. If you believe we have, contact us and we will delete it.

We may update this policy as products, laws, or processors change. The “Last updated” date is the effective date. Material changes will be reflected on this page; continued use of the site after that date constitutes awareness of the new policy.

Privacy requests: email info@itpeoplesas.net. Related: Terms of Service.