How we handle your information.

What this policy covers.

This Privacy Policy applies to siliconprime.ai, our marketing pages, our sales process, and information we collect during client engagements where Silicon Prime acts as a data controller. Where we process information on behalf of a client (as a data processor), the client's own privacy notice and the terms of our engagement contract govern that processing.

If you have any question about how a specific piece of information is handled, contact privacy@siliconprime.ai and we'll answer in writing within five business days.

Only what we need to do the work.

We collect four categories of information:

• Information you provide directly. Name, email address, company, and the contents of any message you send us through our contact forms, mailto links, or scheduled calls.
• Information collected automatically while you browse. Standard server logs (IP address, browser type, timestamps, referring URL) plus website-analytics data captured via our tag vendors — pages viewed, session duration, traffic source, UTM parameters, and anonymized mouse-movement / scroll patterns. The specific tools we use are listed in Cookies & analytics. We use this data to understand how the site is used and to improve it.
• Company-level identification. We use a business-to-business tool (Leadfeeder) that resolves an IP address to a likely company name based on publicly available business-IP registries. This does not identify you personally — only the company you appear to be browsing from, when that company is publicly detectable. Individual visitors remain anonymous to us until they choose to contact us.
• Information from third parties. If you connect via LinkedIn, Calendly, or another integrated service, we receive whatever data that service shares according to its own privacy controls. After you submit a contact form, we may also gather publicly available context about you and your company — for example, your LinkedIn role, your company website, or public news about the company — using web-search tools and a large language model (see How we use information, paragraph on personalization). We use only public sources; we never purchase data from data brokers.

We do not collect sensitive categories of personal information (health data, biometric data, government IDs) through our website.

Operate, respond, improve.

We use the information we collect to:

• Respond to your inquiry, book a strategy call, or send you the materials you requested.
• Deliver, manage, and bill for client engagements we've signed.
• Operate our website, prevent fraud, and investigate abuse.
• Personalize our reply. After you submit a contact form, we may use a large language model (Anthropic Claude) together with public web-search tools (Brave Search, Tavily) to draft a more relevant first reply — referencing your role, your company, or public context about what your team is building. A human partner reviews and sends every message. We do not generate or send any automated reply without that review.
• Inform outbound outreach. Where Leadfeeder identifies a company that fits our ideal client profile and has shown meaningful engagement (multiple page views, return visits, key pages), a member of our team may research the company publicly and decide whether to reach out via business email or LinkedIn. We do not contact individuals who have not engaged with our site or content.
• Improve our content, services, and the experience of working with us.
• Comply with our legal and regulatory obligations.

We do not use your information for automated decision-making that produces legal or similarly significant effects without human review. We do not train any third-party AI model on the contents of your inquiry or on data we collect through this site.

We do not sell data.

We share information only with the following parties, only when necessary:

• Subprocessors. Vendors that operate our website, analytics, CRM, and back office. As of the date of this policy they are:
  • HubSpot — CRM, contact form processing, email outreach, visitor analytics
  • Google — Google Analytics 4 (visit counting), Google Tag Manager (tag orchestration), Workspace email
  • Microsoft Clarity — anonymized session recordings and scroll/click heatmaps used to improve site usability
  • Leadfeeder — company-level identification via business IP registries
  • Cookiebot — cookie consent management
  • Anthropic (Claude API) — LLM used to draft personalized first replies; inputs are sent under Anthropic's no-training-on-API-data commitment
  • Brave Search and Tavily — public-web search APIs used to gather contextual information about companies that have contacted us
  • DigitalOcean — cloud hosting and managed database
  Each subprocessor is bound by a written data-protection agreement or equivalent terms.
• Professional advisors. Lawyers, accountants, and auditors under standard duties of confidentiality.
• Legal obligations. Where required by law, court order, or to protect the rights, property, or safety of Silicon Prime, our clients, or the public.
• Business transfers. If Silicon Prime is involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction subject to this policy.

We never sell personal information, and we do not allow third parties to use information collected through our site for their own advertising or retargeting purposes.

Your data is yours.

When we engage on a client project, we typically process the client's data as a data processor under the terms of a written contract — not as a controller. That means:

• The client owns its data. We use it only to perform the work we've been engaged to do.
• We do not train foundation models on client data. We do not use client data to improve generic Silicon Prime IP outside the engagement.
• Where the engagement uses third-party AI infrastructure (OpenAI, Anthropic, Azure, AWS, etc.), we route inference through the client's enterprise tenant whenever feasible so data never leaves the client's perimeter.
• On request, we return or delete client data after the engagement ends, subject to legal retention requirements.

Reasonable safeguards, real ones.

We maintain administrative, technical, and physical safeguards appropriate to the type of information we hold:

• Encryption in transit (TLS 1.2+) for all web traffic.
• Encryption at rest for stored client artifacts.
• Role-based access control, least-privilege provisioning, and quarterly access reviews.
• Endpoint protection, MFA, and managed device configurations for staff.
• Incident response procedures including notification of affected clients in accordance with our contracts and applicable law.

No system is perfectly secure. If you believe your information has been compromised through our service, contact security@siliconprime.ai immediately.

What runs on the page and why.

We use cookies and small tracking scripts to understand how the site is performing, to attribute visits to traffic sources, and to personalize follow-up communication once you've contacted us. We do not use cross-site advertising trackers, third-party retargeting pixels, or social-media trackers. We do not sell or share data with ad networks.

We use the Cookiebot consent management platform to surface a cookie preferences control. You can change your choices at any time by re-opening the consent banner from the link in our footer, or by clearing cookies in your browser. Essential site-functionality cookies do not require consent and cannot be disabled without breaking the site.

Specific tools and categories

• Essential / strictly necessary. Cookiebot's own consent cookie (records your choices). These cannot be disabled.
• Analytics. Google Analytics 4 (cookies _ga, _ga_*) — counts visits, measures session length and traffic source. Microsoft Clarity (cookies _clck, _clsk) — records anonymized session replays and heatmaps; sensitive form inputs are masked by default.
• Marketing & CRM attribution. HubSpot (cookies __hssc, __hssrc, __hstc, hubspotutk) — ties anonymous page views to a Contact record once you submit a form, so we can see the pages a prospect viewed before reaching out. Leadfeeder — uses your IP address to identify the company you appear to be browsing from; sets a cookie to avoid double-counting return visits. We do not receive any personal identifier from Leadfeeder.

For visitors located in jurisdictions that require opt-in consent (EU, UK, certain U.S. states), analytics and marketing tags are blocked by Google Consent Mode until you grant consent via the Cookiebot banner. Until then, only essential cookies are set and anonymized "pings" without personal identifiers may be sent to Google so that aggregate visit counts remain accurate.

Access, correct, delete.

Depending on your location, you may have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information, subject to legal exceptions.
• Request a portable copy of your data.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, email privacy@siliconprime.ai. We will respond within 30 days and may ask you to verify your identity before acting on a request.

Where your data actually sits.

Silicon Prime is a U.S. company headquartered in Los Angeles, California. Information we process is generally stored on cloud infrastructure located in the United States. For clients in the EU, UK, or other regions with cross-border transfer rules, we rely on Standard Contractual Clauses (or equivalent mechanisms) and, where required, perform a transfer impact assessment as part of the engagement.

We keep things only as long as we need them.

Marketing inquiries and website logs are retained for 24 months. Client-engagement records, contracts, and supporting documentation are retained for seven years following the close of the engagement, in line with U.S. tax and audit requirements. Client-owned operational data is governed by the engagement contract.

Not directed at children.

Our website and services are intended for businesses and professionals. We do not knowingly collect personal information from children under 13 (or under 16 where applicable). If you believe a child has provided us information, please contact us and we will delete it.

If something changes, we'll tell you.

We may update this policy from time to time. Material changes will be announced at the top of this page and, where appropriate, communicated to active client contacts at least 30 days before they take effect. The "Last updated" date at the top of this page always reflects the current version.

Questions, requests, or concerns:

• Privacy inquiries: privacy@siliconprime.ai
• Security issues: security@siliconprime.ai
• Mail: Silicon Prime AI · Los Angeles, California, USA