Privacy Policy

1. Who we are and who is responsible for your data

Augerie is the data controller responsible for the personal information described in this policy. We are based in Costa Rica and provide services to clients internationally.

For any question about this policy, or to exercise any of the rights described in Section 12, contact us at contact@augerie.com. We have not appointed a separate Data Protection Officer; privacy requests are handled directly by our leadership team through that address.

2. Scope of this policy

This policy applies to personal information we collect through augerie.com, including the consultation request form, the Augerie AI assistant, our Insights publication, and any email correspondence that begins on this website.

It does not apply to personal information we process on behalf of our clients while delivering consulting, engineering, data or business continuity services. In those engagements Augerie generally acts as a data processor, and the client’s own privacy notice and our contract with them govern that processing.

It also does not apply to third-party websites that we may link to from our Insights articles or elsewhere. Those sites operate under their own privacy policies.

3. Information we collect

We collect three categories of information: information you give us directly, information collected automatically as you browse, and information generated when you use the Augerie AI assistant.

(a) Information you provide directly. When you submit a consultation request or share your details with our assistant, we collect your full name, work email address, telephone number including country code, company or organization, your role, the message or requirements you describe, and any preferred date and time for a call.

(b) Information collected automatically. When you visit the site, our infrastructure and analytics record technical data such as your IP address (from which an approximate location may be derived), browser type and version, device and operating system, referring page, the pages and articles you view, and the date and time of your visit. We use this to keep the site secure, prevent abuse, and understand which content is useful.

(c) Augerie AI assistant conversations. If you use the assistant, we store the full conversation transcript, together with any contact details you choose to share within it.

We do not intentionally collect special categories of personal data (such as health, biometric, religious or political information), and we ask that you do not submit such information through this site.

4. How we use your information

• To respond to consultation requests, schedule calls, and communicate with you about your enquiry.
• To send an automated acknowledgment confirming that we received your request, and subsequent correspondence about it.
• To operate the Augerie AI assistant and answer your questions about our services.
• To prepare and deliver proposals, and to establish and manage a client relationship where one follows.
• To measure aggregate readership of our Insights articles and improve the content and structure of the site.
• To protect the site against spam, automated abuse, fraud and security incidents, including rate limiting and the flagging of suspicious submissions.
• To comply with legal, accounting and regulatory obligations, and to establish, exercise or defend legal claims.

5. Legal bases for processing

Where the EU or UK General Data Protection Regulation applies, we rely on the following legal bases:

• Performance of a contract, or steps taken at your request before entering into one — responding to your consultation request and preparing proposals.
• Legitimate interests — operating and securing the website, preventing abuse, measuring aggregate content performance, and understanding demand for our services. We balance these interests against your rights and do not rely on them where your interests override ours.
• Consent — non-essential cookies and analytics, and any marketing communications. You may withdraw consent at any time without affecting processing carried out beforehand.
• Compliance with a legal obligation — tax, accounting, and responses to lawful requests from competent authorities.

6. The Augerie AI assistant

Augerie AI is an automated assistant that answers questions about our services and can pass your details to our team. Please read the following before using it.

Conversations are stored and may be reviewed by Augerie personnel to follow up on enquiries, improve the quality of our responses, and monitor for misuse. Your messages are transmitted to a third-party large language model provider that processes them to generate replies; that provider acts as our sub-processor under contract.

Because of this, please do not enter confidential business information, credentials, payment details, or personal data about other people into the assistant. If you need to discuss sensitive matters, contact us directly at contact@augerie.com and we will arrange an appropriate channel.

The assistant’s answers are informational and do not constitute a binding offer, a professional recommendation, or legal, financial or security advice.

7. Cookies and similar technologies

We use a small number of cookies and browser storage entries to remember your language preference and your cookie choice, to keep administrator sessions secure, and — where you consent — to measure how our content performs.

Full details of each category, its purpose and its duration, along with instructions for managing or withdrawing consent, are set out in our Cookie Policy.

8. Sharing and disclosure

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We disclose it only in the following circumstances:

• Service providers and sub-processors who operate parts of our infrastructure on our behalf — our cloud hosting and managed database provider, our transactional email provider, and the AI model provider that powers the assistant. Each is bound by contract to process data only on our instructions and to maintain appropriate security.
• Professional advisers — legal, accounting and insurance advisers where necessary and subject to confidentiality.
• Legal and regulatory disclosure — where we are required to comply with applicable law, a court order, or a lawful request from a competent authority, or where disclosure is necessary to protect our rights, safety, or property.
• Business transfers — if Augerie is involved in a merger, acquisition, reorganization or sale of assets, personal information may be transferred as part of that transaction, subject to this policy continuing to apply.

9. International transfers

Augerie operates from Costa Rica and uses service providers whose infrastructure may be located in the United States, the European Union and other jurisdictions. As a result, your personal information may be transferred to, stored in, or accessed from countries whose data protection laws differ from those of your own.

Where personal information originating in the European Economic Area or the United Kingdom is transferred outside those territories, we rely on appropriate safeguards — principally the European Commission’s Standard Contractual Clauses, together with the contractual and technical commitments made by our providers. A summary of the safeguards applied to a particular transfer is available on request.

10. How long we keep your information

We keep personal information only for as long as it serves the purpose for which it was collected, and then delete it or render it anonymous.

• Consultation requests and business enquiries — up to 24 months from our last substantive contact, unless a client relationship begins, in which case the engagement contract governs retention.
• Augerie AI conversation transcripts — up to 12 months, or until you ask us to delete them.
• Email delivery logs — up to 12 months, for deliverability and dispute resolution.
• Aggregate article view statistics — retained on an aggregate basis with no attempt to identify individual readers.
• Records required for tax, accounting or legal purposes — for the period required by applicable law.

11. How we protect your information

Security is core to our practice, and we apply the same discipline to our own systems.

• All traffic to and from this website is encrypted in transit using TLS.
• Data is held in a managed database protected by row-level security policies, so records are readable only by the specific roles authorized to see them.
• Administrative access to the content management system requires authentication and is granted on a least-privilege basis.
• Public endpoints — the consultation form, the assistant and article view tracking — are rate limited to resist automated abuse.
• Credentials and API keys are held as server-side secrets and are never exposed to the browser.

12. Your rights

Subject to the law that applies to you, you may exercise the following rights over your personal information:

• Access — obtain confirmation of whether we process your data and receive a copy of it.
• Rectification — have inaccurate or incomplete information corrected.
• Erasure — ask us to delete your information where there is no overriding reason for us to keep it.
• Restriction — ask us to limit how we use your information while a concern is resolved.
• Portability — receive the information you provided to us in a structured, machine-readable format.
• Objection — object to processing based on our legitimate interests, and to any direct marketing at any time.
• Withdrawal of consent — withdraw consent you previously gave, including your cookie choice, at any time.
• Complaint — lodge a complaint with your supervisory authority.

13. How to exercise your rights

Write to contact@augerie.com with the words “Data request” in the subject line and tell us which right you wish to exercise. We may ask for information to verify your identity before acting, so that we do not disclose data to the wrong person.

We respond within 30 calendar days. If a request is complex we may extend that period, and we will tell you why within the original 30 days. Exercising these rights is free of charge, unless a request is manifestly unfounded or excessive.

If you are in Costa Rica, Law No. 8968 on the Protection of the Person against the Processing of Personal Data applies to you, and you may lodge a complaint with the Agencia de Protección de Datos de los Habitantes (PRODHAB). If you are in the European Economic Area or the United Kingdom, you may complain to your national data protection authority. If you are a California resident, you have equivalent rights to know, delete, correct and opt out under the CCPA as amended by the CPRA; we do not sell or share personal information as those terms are defined, and we will not discriminate against you for exercising your rights.

14. Children’s privacy

This website addresses a professional audience and is not directed to children. We do not knowingly collect personal information from anyone under 16 years of age. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

15. Automated decision-making

We do not make decisions producing legal or similarly significant effects about you based solely on automated processing. Our spam and abuse controls may automatically flag a submission for review, but any consequent decision is taken by a person.

16. Third-party links

Our Insights articles and other pages may link to third-party websites, research and tools. We do not control those sites and are not responsible for their content or their privacy practices. We encourage you to read the privacy policy of any site you visit from ours.

17. Changes to this policy

We may update this policy to reflect changes in our services, our providers, or the law. The “Last updated” date at the top of this page always shows the current version. Where a change materially affects your rights, we will provide a more prominent notice on the website and, where appropriate, contact you directly.

18. Contact us

Questions, concerns and data requests are all welcome at contact@augerie.com. We aim to resolve any privacy concern directly and promptly.