Covenant of Privacy
This is a website with no accounts, no shop, no forms and no analytics. Almost everything below is a description of things that do not happen — which is the point, and which is why it is short enough to read.
Scope and who is responsible
This covenant is issued by Centralux AI LLC, a North Carolina limited liability company at 109 Hay St Suite 202, Fayetteville, NC 28301 (“Centralux”, “we”). It covers the website at centralux.ai and the booking page at book.centralux.ai.
It does not cover data we process on behalf of a client under an engagement — that is governed by the written agreement for that engagement, and is described separately at § 5.7. It also does not cover third-party websites reached by a link from here.
What this site collects by itself
Nothing that identifies you is collected by us from a visit to this site. Specifically:
- 5.2.1No analytics. There is no analytics script of any kind on these pages — no page-view tracking, no session recording, no heatmaps, no visitor identification.
- 5.2.2No advertising or tracking pixels. No advertising network, retargeting tag, conversion pixel or social tracking script is loaded.
- 5.2.3No cookies set by us. This site sets no cookies and writes nothing to your browser’s local storage. There is no cookie banner because there is nothing to consent to.
- 5.2.4No accounts, no forms, no payments. There is nothing to sign up for on this site, no contact form, no cart and no card entry.
- 5.2.5The page digest is local. The SHA-256 attestation at the bottom of every entry is computed inside your browser and is never transmitted, logged or stored anywhere.
Two technical exceptions, stated plainly. Serving a website means two other parties see the request. Cloudflare hosts these pages and processes your IP address, user-agent and request metadata in its logs to deliver the site and protect it from abuse. Google Fonts serves the three typefaces used here, and receives your IP address and user-agent as an unavoidable consequence of delivering the font files. Neither is used by us to identify you, and neither is combined with anything else we hold. Google Fonts is the only external resource this site loads.
What you send us deliberately
There are exactly two ways to send us information, and both require you to choose to.
If you write to contact@centralux.ai we receive your email address, your name if you sign it, and whatever you chose to put in the message, including attachments. Our mail is hosted on Google Workspace. Please do not send credentials, passwords or access tokens by email — we will never ask for them this way.
Booking a call
Booking at book.centralux.ai uses Cal.com as our scheduling processor. To hold the appointment it collects the name and email address you enter, the time you select, your time zone, anything you type into the notes field, and — if you choose a phone call rather than video — the number you provide for that purpose. A calendar invitation is then created in our Google Workspace calendar, and a video link is generated by Google Meet if that is the option you picked. The booking page is operated by Cal.com and is subject to its own cookie and privacy practices in addition to this covenant.
What it is used for
- 5.4.1To read and reply to your message, and to hold and prepare for a call you booked.
- 5.4.2To scope and quote work you have asked us to scope and quote, and to keep a record of what was discussed and agreed.
- 5.4.3To meet legal, tax and accounting obligations where a record of a business communication has to be kept.
- 5.4.4Nothing else. Your information is not sold, rented, brokered or shared with advertisers. It is not added to a marketing list without you asking for one — there is no newsletter on this site. It is not used to train any machine-learning model.
- 5.4.5We do not run automated decision-making or profiling on visitors or correspondents.
Processors and retention
The complete list of third parties that can see anything connected with this site, and how long each kind of record is kept.
| Processor | Role | What it can see |
|---|---|---|
| Cloudflare | Hosting and content delivery for centralux.ai | IP address, user-agent, requested URL and timestamp, in delivery and security logs |
| Google Fonts | Serves the three typefaces used on these pages | IP address and user-agent when the font files are requested |
| Cal.com | Scheduling for book.centralux.ai | Name, email, selected time, time zone, notes, and a phone number only if you choose a phone call |
| Google Workspace | Business email and calendar | The content of correspondence with contact@centralux.ai and the resulting calendar entries |
The seven-year figure on engagement records is the accounting and tax retention period, not a preference. Anything outside that obligation is deleted on request.
Your requests
Write to contact@centralux.ai from the address you corresponded or booked with, and say what you want: a copy of what we hold about you, a correction, or deletion. We will act within 30 days and confirm in writing what was done.
We may keep the minimum needed to satisfy a legal or accounting obligation, and will tell you specifically what that is rather than refusing in general terms. If you are unsatisfied with the outcome, say so in reply — that goes to the same person and is not routed to a queue.
Client data under an engagement
A different thing entirely from website visitors, governed by the engagement agreement. Summarised here because it is the question that actually matters to a prospective client.
- 5.7.1Single-tenant. Client data is held in storage isolated to that client — separate database, separate credentials, separate storage. It does not share a table, an index or a model context with another client’s data.
- 5.7.2You hold the credentials. Access is granted by you, scoped to least privilege, and revocable by you at any time without our cooperation.
- 5.7.3No training. Client data is not used to train any model, ours or a vendor’s. Language-model APIs are called under terms that exclude training on submitted data.
- 5.7.4No cross-client reuse. Nothing learned from one client’s data is applied to another client’s system as data. General engineering knowledge is not client data.
- 5.7.5Export and deletion. Your data is exportable in open formats on demand, and deleted on request or at the end of the engagement, subject only to retention we are legally required to keep.
- 5.7.6Incidents. If we become aware of a security incident affecting your data we will notify you without undue delay, with what we know and what we are doing about it.
Children, jurisdiction and changes
- 5.8.1Children. This site and these services are directed at businesses. They are not intended for anyone under 16, and we do not knowingly collect information from children.
- 5.8.2Where data is processed. Our operations are in the United States, and the processors listed at § 5.5 may process data in the United States and other countries in which they operate.
- 5.8.3Changes. If this covenant changes, the effective date above changes with it and the substance of the change is stated at the top of this entry. Because every page publishes a digest of its own contents, a silent edit to this text is detectable — the digest changes.
- 5.8.4Questions. contact@centralux.ai, or by post to Centralux AI LLC, 109 Hay St Suite 202, Fayetteville, NC 28301.