Legal
Privacy Policy
What we collect when you contact us or work with us, what we do with it, and your rights.
Last updated
01Who we are
Farcholabs LLC, a Wyoming limited liability company ("Farcholabs", "we") decides how the personal data described here is used. For anything about your data, write to hello@farcholabs.com, or by mail to 1621 Central Ave STE 69017, Cheyenne, WY 82001.
02What we collect
- When you send a brief: your name, email, company (if you give it), the kind of project, your message, the budget range and timeline you pick, and that you accepted this policy. To stop abuse we keep a salted hash of your IP address, never the address itself, and check the form with Google reCAPTCHA, which looks at how the page is used to tell people from bots and may set a Google cookie for that check alone. With the brief, the page sends where your visit began: the first page you opened here, the name of the site that linked to it (such as linkedin.com, never the full address) and any campaign tags on our own links. The page keeps that in memory until you send the brief; it sets no cookie and stores nothing in your browser.
- When we talk or work together: the emails and files you send us, notes from our calls, and the contact and billing details a proposal or invoice needs. Payments go through Stripe; we never see or store card numbers.
- When you answer a proposal: the name and email you give, your answer and any note, and a salted hash of your IP address, as the record of what was agreed. We also count how often the link to it is opened.
- When you browse the site: our hosting provider keeps standard server logs (such as IP address and browser) for security. We count visits from the request logs of the load balancer that serves the site: no script, no cookies and no profile of you. We use no advertising or tracking cookies. Your light or dark theme choice stays in your own browser and is never sent to us.
03How we use it
- To read your brief, reply to it and prepare a proposal.
- To run the projects we agree on, invoice them and keep the records the law requires.
- To keep the site and the form safe from spam and abuse.
- To learn which pages and links bring us briefs, so we know where to spend our time.
We never sell your data, never use it for advertising, and never add you to a mailing list. Sending a brief doesn't sign you up for anything.
04AI processing
We may use AI models to summarize and sort incoming briefs and to draft proposals for our team. The model gets the text of the brief and our notes about the project, never your email address or your IP hash. A person reviews everything it produces; nothing is sent to you automatically, and no decision about you is made by the model alone.
The models are provided by Anthropic, with OpenRouter as a fallback when Anthropic is unavailable, under commercial terms that don't allow them to train on what we send.
05Legal bases
We rely on your consent when you send a brief, on the steps needed to enter into and perform a contract with you, on our legitimate interest in keeping the site secure and our records in order, and on legal obligations such as tax and accounting rules. You can withdraw your consent at any time.
06Who processes it for us
These providers process personal data on our behalf, only to provide their service to us.
- Google CloudHosting for the site and its back end (Cloud Run), the domain's DNS and the load balancer that delivers the site, its database (Firestore) and its secrets (Secret Manager)United States
- Google reCAPTCHAThe check that the contact form is sent by a person, not a botUnited States
- Google WorkspaceOur email, including notifications to our teamUnited States
- StripeInvoices and paymentsUnited States
- AnthropicAI models that summarize briefs and draft proposalsUnited States
- OpenRouterA fallback route to the same kind of models when Anthropic is unavailableUnited States
Some of them process data in the United States. Where the law requires it, we rely on the safeguards they offer for international transfers, such as the European Commission's standard contractual clauses.
07How long we keep it
- A brief that doesn't turn into a project: we delete it, with our notes on it, 6 months after the last activity on it.
- Project and billing records: as long as tax and accounting law requires.
- Server logs: the short period our hosting provider keeps them for security.
08Your rights
You can ask us to show you the data we hold about you, correct it, delete it, send you a copy, or stop using it, and you can withdraw your consent. These rights come from Colombia's Law 1581 of 2012, the EU and UK GDPR and similar laws, depending on where you are.
Write to hello@farcholabs.com. We reply within 15 business days. If you're not satisfied, you can complain to your data protection authority, such as Colombia's Superintendencia de Industria y Comercio or the authority of your EU country.
09Security
Data travels encrypted. Only our team can reach the admin, through individual sign-in, and every change there is logged. IP addresses are stored only as salted hashes, and keys and credentials are kept out of our code.
10Children
Our services are for businesses. We don't knowingly collect data from anyone under 16.
11Changes to this policy
When this policy changes, we update the date at the top. If a change affects how we use data you already gave us, we'll tell you before it applies.