Abdabis LLC ("Abdabis," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain and protect personal information in connection with our website at abdabis.com, www.abdabis.com and any subdomain of abdabis.com that links to this policy (the "Site"), and when you contact us. It also explains the choices and rights you have.
This policy is designed to meet the requirements of the California Online Privacy Protection Act (CalOPPA), the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA), other comprehensive U.S. state privacy laws, the Children's Online Privacy Protection Act (COPPA), the EU General Data Protection Regulation (GDPR), the UK GDPR, the Swiss Federal Act on Data Protection, and Türkiye's Personal Data Protection Law No. 6698 (KVKK), in each case to the extent they apply to us.
At a glance
- We collect very little. Only what you choose to send us (for example, through the contact form) and, if analytics cookies are allowed, information about how the Site is used.
- We do not sell your personal information and we do not share it for cross-context behavioral advertising or targeted advertising. We do not use advertising cookies.
- Analytics is optional. If your device is set to a United States time zone, Google Analytics is on by default and you can turn it off at any time. Everywhere else, including the EEA, the UK, Switzerland and Türkiye, it stays off unless you accept it. We honor Global Privacy Control signals.
- You are in control. You can ask us to access, correct or delete your information by emailing info@abdabis.com, and change your cookie choices at any time through "Cookie settings" at the bottom of every page.
1. Who is responsible for your information
1.1. Abdabis LLC, a Wyoming limited liability company, is responsible for the personal information described in this policy. Under the GDPR, the UK GDPR and KVKK, Abdabis is the "controller" (in KVKK terms, the "data controller") of that information.
1.2. You can contact us about privacy at info@abdabis.com. Please use the subject line "Privacy Request."
1.3. Client data is outside this policy. When Abdabis builds or operates software, data or AI systems for a client under a Client Agreement, we may process personal information on that client's behalf and under its instructions, as its service provider or processor. That processing is governed by our agreement with the client and by the client's own privacy notice, not by this policy. If you are an end user of one of our clients' systems, please contact that client directly.
2. Personal information we collect
2.1. Information you give us
- Contact form. When you use the contact form on the Site, we collect your name, work email address, company name (optional) and the content of your message. The form also contains a hidden field used to block automated spam; it is not used to identify you.
- Correspondence. If you email us or otherwise communicate with us, we collect the information you include, such as your name, email address, job title, company, phone number and the contents of your messages and attachments.
- Business relationship information. If you or your organization become a prospective or actual client, partner or supplier, we collect business contact details and the information needed to manage the relationship. That information is also governed by the relevant agreement.
Please do not send us sensitive personal information (for example, government identification numbers, financial account or payment card details, health information, biometric data, precise geolocation, or information about racial or ethnic origin, religious or philosophical beliefs, sexual orientation, union membership or criminal history), or confidential information belonging to others. We do not need it to reply to you.
2.2. Information generated by your device
- Topic tagging of your message. Before you send the contact form, a small text-classification model that runs entirely in your own browser reads your message and suggests which of our practice areas it relates to (for example, "Software platforms 72%"). Those suggested areas are sent to us with your message so that it reaches the right people faster. The model does not run on our servers, does not make any decision about you and does not have any legal or similarly significant effect.
2.3. Information collected automatically
- Analytics information (only if analytics cookies are allowed). When analytics cookies are allowed, Google Analytics 4 collects information about your use of the Site, such as the pages you view, how you arrived at the Site (referring page or search engine), the date and time and duration of your visit, interactions with the Site (such as scrolling, clicks on outbound links and form submissions), your browser and device type, operating system, screen size, language setting, and an approximate location (country, region and city) derived from your IP address. Google Analytics assigns a random identifier stored in a cookie. According to Google, Google Analytics 4 does not log or store IP addresses. We have disabled Google signals and ad personalization for our Site. See our Cookie Policy for details.
- Server and security logs. Like virtually every website, the infrastructure that delivers the Site automatically records technical information when your browser requests a page or submits the contact form, such as your IP address, the date and time of the request, the URL requested, the referring URL, your browser's user-agent string and response status codes. Our hosting provider uses this information to deliver the Site, protect it against abuse and diagnose errors, and retains it for a limited period.
- Your cookie choice. If you accept or reject analytics cookies, we store that choice in a small cookie named
abd_consentso that we can respect it on later visits and across our subdomains.
We do not use advertising cookies, social media tracking pixels, session-replay tools, browser fingerprinting or cross-site tracking technologies. The fonts and software libraries used by the Site are hosted on our own domain, so loading a page does not send your information to font or code-library providers.
2.4. Information from other sources
If someone refers you to us, or if you interact with us at an event, through a professional network or through a business partner, we may receive your business contact information and the context of the introduction from that source. We may also collect publicly available business information, such as your company's website or your professional profile, to prepare for a conversation you have requested.
3. How we use personal information
We use personal information for the following purposes:
- To respond to you and communicate with you about your inquiry, including routing your message to the appropriate people at Abdabis.
- To evaluate and pursue a business relationship with you or your organization, including preparing proposals, negotiating and performing Client Agreements, and managing our relationship.
- To operate, maintain and secure the Site, including preventing spam, fraud and abuse, monitoring for security incidents, and diagnosing technical problems.
- To understand and improve the Site using aggregated analytics, but only where analytics cookies are allowed as described in this policy and our Cookie Policy.
- To comply with legal obligations, such as tax, accounting and record-keeping requirements, and responding to lawful requests from public authorities.
- To establish, exercise or defend legal claims and to enforce our Terms of Use.
- For other purposes with your consent, or that we describe to you when we collect the information.
We do not use your personal information for automated decision-making that produces legal or similarly significant effects concerning you. We do not use personal information submitted through the Site to train artificial-intelligence models.
We may create aggregated or de-identified information that can no longer reasonably be linked to you, and use it for any lawful purpose. We will maintain and use such information only in de-identified form and will not attempt to re-identify it, except as permitted by law.
4. Legal bases for processing (EEA, UK, Switzerland and Türkiye)
If the GDPR, the UK GDPR, Swiss law or KVKK applies to our processing of your personal information, we rely on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Responding to your inquiry and communicating with you | Our legitimate interest in responding to people who contact us; and, where you are seeking to enter into a contract with us, taking steps at your request before entering into a contract (GDPR Art. 6(1)(f) and 6(1)(b); KVKK Art. 5(2)(c) and 5(2)(f)) |
| Evaluating, entering into and performing a business relationship | Performance of a contract, or steps before entering into one, and our legitimate interests in managing our business (GDPR Art. 6(1)(b) and (f); KVKK Art. 5(2)(c) and (f)) |
| Operating and securing the Site, server logs, spam prevention | Our legitimate interest in providing a secure and functioning website (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)) |
| Analytics cookies | Your consent (GDPR Art. 6(1)(a) and the ePrivacy rules; KVKK Art. 5(1)), which you can withdraw at any time |
| Storing your cookie choice | Our legal obligation to record and respect your consent choices, and our legitimate interest in doing so (GDPR Art. 6(1)(c) and (f)) |
| Compliance with law; legal claims | Legal obligation and our legitimate interest in establishing, exercising or defending legal claims (GDPR Art. 6(1)(c) and (f); KVKK Art. 5(2)(ç) and (e)) |
Where we rely on legitimate interests, we have balanced those interests against your rights and freedoms. You can ask us for more information about that balancing.
5. How we disclose personal information
We do not sell, rent or trade your personal information. We disclose personal information only as follows:
5.1. Service providers. We use carefully selected service providers that process personal information on our behalf, under written contracts that restrict their use of it to providing services to us:
| Provider | Service | Information involved |
|---|---|---|
| Vercel Inc. (United States) | Website hosting, content delivery, serverless function that receives the contact form | Server and security logs; contact form content in transit |
| Resend (United States) | Delivery of contact form submissions to our mailbox | Contact form content |
| Zoho (business email hosting) | Our company mailbox at info@abdabis.com | Messages you send us and our replies |
| Google LLC (United States) | Google Analytics 4, only where analytics cookies are allowed | Analytics information |
We may also use providers for document storage, productivity tools, accounting and similar business functions. Those providers receive personal information only as needed to perform their services.
5.2. Professional advisers. We may disclose information to our lawyers, accountants, auditors and insurers, who are bound by duties of confidentiality.
5.3. Legal requirements and protection of rights. We may disclose information if we believe in good faith that doing so is necessary to comply with applicable law, regulation, legal process or an enforceable governmental request; to enforce our Terms of Use; to detect, prevent or address fraud, security or technical issues; or to protect the rights, property or safety of Abdabis, our clients, users or the public, as required or permitted by law.
5.4. Business transfers. If Abdabis is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of its assets, personal information may be disclosed or transferred as part of that transaction, subject to this policy or a policy that is at least as protective.
5.5. With your consent or at your direction, for example when you ask us to introduce you to a partner.
6. International transfers
6.1. Abdabis is based in the United States, and our service providers may process information in the United States and other countries. Those countries may not have data protection laws equivalent to those in your country.
6.2. When we transfer personal information from the EEA, the UK, Switzerland or Türkiye to a country that has not been recognized as providing adequate protection, we rely on an appropriate safeguard, such as the European Commission's Standard Contractual Clauses (and the UK Addendum or Swiss amendments where relevant), a provider's certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions, the standard contracts provided for in Article 9 of KVKK, or another mechanism permitted by applicable law. Where none of these is available, we rely on a derogation permitted by law, such as the transfer being necessary to respond to your request. You can ask us for more information about the safeguards we use.
7. How long we keep personal information
We keep personal information only for as long as reasonably necessary for the purposes described in this policy, unless a longer retention period is required or permitted by law. In particular:
| Information | Retention period |
|---|---|
| Contact form submissions and correspondence that do not lead to a business relationship | Up to 3 years after our last communication with you |
| Information about clients, partners and suppliers | For the duration of the relationship and then up to 7 years, to meet tax, accounting and legal requirements and to handle any claims |
| Google Analytics event-level data | No longer than 14 months, after which only aggregated reports remain |
| Google Analytics cookies on your device | Up to 13 months, or until you reject analytics cookies or clear your cookies |
Your cookie choice (abd_consent) |
6 months, after which we ask again |
| Server and security logs | For the limited period set by our hosting provider, unless needed longer to investigate a security incident |
When information is no longer needed, we delete it or de-identify it. If deletion is not technically possible (for example, because information is stored in backups), we will securely isolate it until deletion is possible.
8. How we protect personal information
We use administrative, technical and organizational measures designed to protect personal information against accidental, unlawful or unauthorized destruction, loss, alteration, disclosure or access. These include encryption of data in transit (HTTPS), restricting access to personal information to the people who need it, input validation and spam filtering on the contact form, security headers on the Site, keeping the Site free of third-party trackers other than the optional analytics described above, and careful selection of service providers. No method of transmission over the internet or of electronic storage is completely secure, however, and we cannot guarantee absolute security. If we learn of a security breach that affects your personal information, we will notify you and the relevant authorities where required by law.
9. Your choices and rights
9.1. Rights available to everyone
Regardless of where you live, you may ask us to:
- tell you whether we hold personal information about you and give you a copy of it;
- correct personal information that is inaccurate or incomplete;
- delete personal information we hold about you; and
- stop contacting you.
We will honor these requests to the extent required by applicable law, and we will make reasonable efforts to honor them where no law requires it, subject to our legal obligations and legitimate business needs (for example, keeping records of a contract).
9.2. Cookie and analytics choices
You can accept or reject analytics cookies at any time through "Cookie settings" at the bottom of every page. You can also block or delete cookies in your browser settings, or install the Google Analytics Opt-out Browser Add-on. See our Cookie Policy.
9.3. Global Privacy Control and Do Not Track
If your browser sends a Global Privacy Control (GPC) signal and you have not made a different choice on the Site, we treat the signal as a request to opt out, and Google Analytics does not load. Because there is no common industry standard for "Do Not Track" (DNT) browser signals, the Site does not respond to DNT signals separately; however, we do not track you across third-party websites, and we do not allow third parties to collect personal information about your online activities over time and across different websites through the Site, other than the Google Analytics measurement described in this policy, which is limited to the Site and can be turned off.
9.4. How to make a request
Email info@abdabis.com with the subject line "Privacy Request," and tell us what you would like us to do. To protect your information, we will verify your identity before acting on a request, normally by confirming that you control the email address associated with the information. If we cannot verify your identity, we may ask you for more information or decline the request. We will respond within the time required by applicable law, which is generally 30 days (GDPR and UK GDPR, extendable in some cases), 30 days (KVKK) or 45 days (U.S. state laws, extendable once by 45 days where reasonably necessary). We do not charge a fee unless a request is manifestly unfounded or excessive.
You may use an authorized agent to make a request on your behalf where permitted by law. We may ask the agent for proof of authorization and may ask you to verify your identity directly.
10. Additional information for residents of U.S. states
10.1. Scope. California and a growing number of other U.S. states, including Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia, have enacted comprehensive privacy laws. Some of these laws apply only to businesses that meet certain thresholds. This section describes our practices and the rights you may have under those laws, to the extent they apply to us. We extend these rights to all U.S. residents.
10.2. Categories of personal information. In the past 12 months we have collected the following categories of personal information, as defined by the CCPA:
| Category | Examples | Source | Disclosed for a business purpose to |
|---|---|---|---|
| Identifiers | Name, email address, IP address, analytics cookie identifier | You; your device | Service providers listed in Section 5.1 |
| Customer records (Cal. Civ. Code § 1798.80(e)) | Name, company, contact details, message content | You | Service providers listed in Section 5.1 |
| Professional or employment-related information | Company name, job title | You; other sources in Section 2.4 | Service providers listed in Section 5.1 |
| Internet or other electronic network activity | Pages viewed, interactions with the Site, browser and device information, server logs | Your device | Vercel; Google (analytics, only where allowed) |
| Geolocation data (approximate only) | Country, region or city derived from IP address | Your device | Google (analytics, only where allowed) |
| Inferences | The practice areas suggested by the in-browser model for your message | Your device | Service providers listed in Section 5.1 |
We do not collect sensitive personal information as defined by the CCPA, other than as you may choose to include in a message despite our request not to, and we do not use or disclose sensitive personal information for purposes that would give rise to a right to limit its use. We collect and use the categories above for the business purposes described in Section 3 and keep them for the periods described in Section 7.
10.3. No sale, sharing or targeted advertising. We do not sell personal information, we do not "share" personal information for cross-context behavioral advertising, and we do not process personal information for targeted advertising or for profiling in furtherance of decisions that produce legal or similarly significant effects. We have no actual knowledge of selling or sharing the personal information of consumers under 16 years of age.
10.4. Your rights. Depending on your state of residence, you may have the right to:
- know and access the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties to whom we have disclosed it;
- delete personal information we have collected from you, subject to legal exceptions;
- correct inaccurate personal information;
- obtain your personal information in a portable and, to the extent technically feasible, readily usable format;
- opt out of the sale or sharing of personal information, targeted advertising and certain profiling (although we do not engage in these activities);
- limit the use and disclosure of sensitive personal information (although we do not use it in ways that trigger this right);
- not be discriminated or retaliated against for exercising any of these rights; and
- appeal our decision regarding your request.
10.5. Appeals. If we decline to take action on your request, you may appeal by replying to our decision or by emailing info@abdabis.com with the subject line "Privacy Appeal" within a reasonable period after receiving our decision. We will respond to your appeal within the time required by law (generally 45 or 60 days) and explain the reasons for our decision. If you are not satisfied, you may contact the attorney general of your state.
10.6. California "Shine the Light." California Civil Code Section 1798.83 permits California residents to request information about personal information disclosed to third parties for their own direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes.
10.7. Nevada. We do not sell covered information as defined by Nevada law. Nevada residents may nonetheless submit an opt-out request to info@abdabis.com.
10.8. Minors in California. The Site is not directed to minors and does not allow users to post content publicly. If you are a California resident under 18 and believe you have submitted information to us, you may ask us to remove it by emailing info@abdabis.com.
11. Children's privacy
The Site is intended for business and professional audiences and is not directed to children. We do not knowingly collect personal information from children under 13 years of age (or under 16 years of age where that is the relevant threshold), and we comply with the Children's Online Privacy Protection Act. If you believe a child has provided personal information to us, please contact us at info@abdabis.com and we will delete it.
12. Additional information for the EEA, the UK and Switzerland
12.1. Your rights. Subject to the conditions and exceptions in applicable law, you have the right to access, rectify and erase your personal information; to restrict or object to its processing (including the absolute right to object to direct marketing); to data portability; and, where processing is based on consent, to withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal. You can exercise these rights as described in Section 9.4.
12.2. Complaints. We would like the chance to address any concern first, so please contact us. You also have the right to lodge a complaint with the data protection supervisory authority of the country where you live or work, or where an alleged infringement occurred. In the UK, this is the Information Commissioner's Office (ICO); in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC).
12.3. Is providing information required? Providing personal information through the Site is voluntary. If you do not provide the information marked as required in the contact form, we will not be able to reply to your inquiry through the form, but you can still contact us by email.
13. Additional information for Türkiye
If KVKK applies to our processing of your personal data, you have the rights set out in Article 11 of KVKK, including the right to learn whether your personal data is processed; to request information about the processing; to learn the purpose of the processing and whether data is used in line with that purpose; to know the third parties in Türkiye or abroad to whom data is transferred; to request correction of incomplete or inaccurate data; to request deletion or destruction of data under the conditions in Article 7 of KVKK; to request that third parties to whom data was transferred be notified of correction or deletion; to object to a result against you that arises exclusively from automated analysis; and to claim compensation for damage arising from unlawful processing. You can exercise these rights as described in Section 9.4. We obtain your explicit consent before placing analytics cookies, and we transfer personal data abroad only in accordance with Article 9 of KVKK.
14. Third-party websites
The Site may link to websites and services operated by others, such as Google's privacy pages. This policy does not apply to those websites and services, and we are not responsible for their privacy practices. We encourage you to read their privacy policies.
15. Changes to this policy
We may update this policy from time to time to reflect changes in our practices, technology or legal requirements. When we do, we will change the "Last updated" date at the top of this page. If we make material changes, we will provide additional notice reasonably designed to reach you, such as a notice on the Site, and, where required by law, we will ask for your consent. We will not apply material changes retroactively to personal information collected under a previous version without your consent where consent is required.
16. Contact us
If you have questions or concerns about this policy or our privacy practices, or wish to exercise your rights, please contact:
Abdabis LLC
Wyoming, United States
Email: info@abdabis.com (subject line "Privacy Request")
If you have a disability, you can access this policy in an alternative format by contacting us at the email address above.