Privacy Notice

This Privacy Notice explains how Flatiron Foundry ("Flatiron Foundry," "we," "us," or "our") collects, uses, discloses, and safeguards personal information when you visit flatironfoundry.ai, contact us, subscribe to our communications, apply for a role, or engage us for advisory and software services.

It does not apply to information we process on behalf of a client under a services agreement. In those engagements the client determines the purposes of processing, and their own privacy notice governs. Our handling of that information is set out in the applicable contract and data processing terms.

Information you provide

• Contact and business details submitted through our forms: name, email address, company, phone number, the service you are interested in, budget range, timeline, and the content of your message.
• Subscription details, such as the email address you provide for our insights newsletter.
• Meeting and scheduling details when you book time with our team.
• Recruiting information you choose to send us, including resumes and work history.
• Messages you send to the AI assistant on this site. Please do not share confidential, regulated, or personally sensitive information in that conversation.

Information collected automatically

When you browse the site we may collect IP address, approximate location derived from it, browser and device type, referring URLs, pages viewed, and interaction events. This is gathered through cookies and similar technologies described below.

Information from other sources

We may receive business contact information from our clients, event partners, referral sources, and publicly available professional directories.

• Respond to inquiries, scope potential engagements, and deliver the services you request.
• Administer and improve our website, products, and service delivery.
• Send insights, event invitations, and marketing communications where permitted, and manage your preferences.
• Evaluate candidates who express interest in working with us.
• Protect the security and integrity of our systems, detect misuse, and prevent fraud.
• Meet legal, regulatory, contractual, and record keeping obligations.

Where data protection law requires a legal basis, we rely on one or more of the following, depending on the activity:

• Performance of a contract, or steps taken at your request before entering into one.
• Our legitimate interests in operating, promoting, securing, and improving our business, balanced against your rights.
• Your consent, for example for optional analytics cookies or marketing email, which you may withdraw at any time.
• Compliance with a legal obligation.

Our site offers an AI assistant that answers questions about our firm and services. The messages you send are transmitted to a third party model provider to generate a response and may be retained for a limited period to operate and troubleshoot the feature.

The assistant produces informational content only. It does not deliver professional advice, and we do not use it to make decisions that produce legal or similarly significant effects about you.

We use strictly necessary cookies to operate the site, and analytics cookies to understand traffic patterns and improve content. Analytics tags load only after you accept them in our consent banner, and you can change or withdraw your choice at any time through the banner or your browser settings.

Most browsers let you refuse or delete cookies. Disabling strictly necessary cookies may prevent parts of the site from working. We do not currently respond to browser "Do Not Track" signals, as no common standard has been adopted.

We do not sell your personal information, and we do not share it for cross context behavioral advertising. We disclose information in the following circumstances:

• Service providers who support our operations, including hosting and database infrastructure, email delivery, scheduling, analytics, and the AI model provider behind our assistant. Each is engaged under contract terms that restrict use of the information to our instructions.
• Professional advisors such as counsel, auditors, and insurers, where relevant to our legitimate business needs.
• Corporate transactions, including in connection with a merger, financing, reorganization, or sale of assets.
• Legal and safety reasons, where disclosure is required by law, legal process, or is necessary to protect our rights, our clients, or the public.

We retain personal information for as long as needed for the purposes described in this notice, and afterward only as required to meet legal, tax, accounting, or contractual obligations, resolve disputes, and enforce our agreements. Retention periods vary by record type. Inquiry and marketing records are kept while the relationship is active and for a reasonable period afterward, after which they are deleted or de-identified.

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• Access a copy of the information we hold about you.
• Correct information that is inaccurate or incomplete.
• Delete information, subject to legal and contractual exceptions.
• Object to or restrict certain processing, including direct marketing.
• Receive a portable copy of information you provided to us.
• Withdraw consent where processing is based on consent.

To exercise a right, email ceo@flatironfoundry.ai. We will verify your request before acting on it and will respond within the timeframe required by applicable law. You will not be treated differently for exercising a privacy right. You can unsubscribe from marketing email at any time using the link in the footer of any message.

We are headquartered in the New York metropolitan area, and our service providers may process information in the United States and other countries whose data protection laws differ from those in your jurisdiction. Where required, we put appropriate safeguards in place for such transfers, including standard contractual clauses with the recipient.

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, and destruction. These include access controls, encryption in transit, and provider level infrastructure controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Our website and services are intended for businesses and professionals. We do not knowingly collect personal information from children under 16. If you believe a child has provided us information, contact us and we will delete it.

We may update this notice to reflect changes in our practices, technology, or legal requirements. When we do, we revise the "Last updated" date above. Material changes will be highlighted on this page. Continued use of the site after an update constitutes acknowledgement of the revised notice.

Questions, requests, or concerns about this notice can be directed to ceo@flatironfoundry.ai. Please include enough detail for us to understand and respond to your request.

Flatiron Foundry, New York metropolitan area, United States.