How we handle the information you share with us.

When you fill in the project planner or contact form we collect: your name, email, phone (if you provide it), company name, country, the workflow summary you write, current tools, desired outcome, and source context such as the page you came from, UTM campaign fields, referrer domain, first landing page, and Google Ads click ID when present.

When you use the chat assistant ("Aora") we store the messages of that session in your browser's sessionStorage so the conversation survives a refresh. We do NOT log Aora chat messages on our servers by default.

Server-side, we keep an anti-spam ledger of hashed IP addresses tied to planner submissions, contact submissions, and portfolio likes. The IPs are HMAC-hashed before storage — we cannot reverse them back to the original address.

Standard server logs from our hosting provider (Vercel) may briefly retain your IP, user-agent, and the URL you requested for operational and security purposes.

To respond to your enquiry — review your intake, follow up by email or phone, and prepare a scope of work if it leads to a project.

To understand which directories, campaigns, search results, or referrals brought qualified enquiries to the site.

To enforce anti-abuse limits, prevent repeated low-quality submissions, and block obvious bots.

To validate the email address you supplied and flag obvious disposable or malformed addresses before we save the request.

To send transactional emails — lead notifications to our team and the occasional follow-up on a project enquiry. We do NOT send marketing newsletters from this site.

Form submissions, project planner requests, legacy quote records, and quota ledger entries are stored in Supabase (managed Postgres). The database is restricted by row-level security so only AorBorC staff with the service-role key can read it.

The public Project Planner does not accept file uploads.

Email is sent through Resend. Resend retains delivery metadata according to their own privacy policy.

Our infrastructure runs on Vercel (US/EU edge regions). Operational logs are retained for the period Vercel specifies in its terms.

OpenAI or the configured AI provider — when you use AI-powered features such as Aora or internal planning support, relevant messages or project context may be processed to produce a response. The Project Planner itself does not need AI to submit your request.

Resend — we use Resend to deliver lead notifications and follow-up email. The recipient address and the email body are processed by Resend for delivery.

Zoho SalesIQ — our site embeds the Zoho SalesIQ live-chat widget. If you interact with that widget, Zoho receives whatever you type into it, plus standard analytics data their widget collects and basic source context such as Direct, Organic Search, Google Ads, campaign fields, or referrer domain.

Vercel Analytics — we use Vercel's privacy-friendly analytics to count page views. It does not use cookies and does not identify you individually.

Google Analytics and Google Ads — we use Google's tag to measure page views, campaign performance, and lead events. Google may receive page URL, referrer, device/browser data, and ad click identifiers such as GCLID. We do not send form contents to Google through this tag.

We do NOT sell your personal information.

Supabase session cookies — set only if you sign into the admin area (employees only).

sessionStorage (browser-only) — used to remember the open chat conversation, remember if you've already seen the Aora nudge tooltip, and keep first-touch traffic source context for the current tab only.

aorborc_attribution_v1 (browser-only sessionStorage) — stores non-personal source context for the current tab, such as source category, landing path, referrer domain, UTM fields, and Google Ads click ID when present.

aorborc_visitor_v1 (browser-only localStorage) — only if you accept the privacy banner: your name, email, phone, and company are saved on YOUR device so our forms prefill and you type less. It never leaves your browser; clear it anytime with the control below.

aorborc_consent_v1 (browser-only localStorage) — records whether you accepted that banner.

Google Analytics and Google Ads may set measurement cookies or similar identifiers so we can understand campaign traffic and lead events.

Project planner and legacy request records: retained indefinitely for our internal project history. We will purge yours on request — see "Your rights" below.

Anti-abuse rate-limit events: 24 hours.

Legacy signed document links, where present, expire according to their token settings. The current public Project Planner does not create customer-facing PDF, quote, or proposal links.

You can ask us at any time to: tell you what data we hold about you, correct anything that's wrong, delete your record, or restrict how we use it. Submit the request through our /contact form using the same email address we have on file and we'll confirm within 7 working days.

If you're in the EU, UK, or India, you have additional rights under GDPR / DPDPA. We honour them regardless of where you write to us from.

If you believe we've mishandled your data, you can complain to your local supervisory authority.

Data protection enquiries: submit through /contact and put "Privacy" in the subject line.

Company: AorBorC Technologies, Shyamala Tower, Regus 3rd Floor, Arcot Rd, Saligramam, Chennai — 600093, India.

Phone: +1 (872) 267-2672 (872-AORBORC)