Privacy Policy - Almondo Labs

This Privacy Policy (the "Policy") describes how Almondo Labs ("Almondo Labs", "we", "us", or "our") collects, uses, discloses, and protects information in connection with our website at https://almondo-labs.ai (together with its subdomains, content, trademarks, and services, the "Site").

This Policy is part of, and should be read with, our Terms of Use. Use of the Site constitutes acknowledgment of this Policy.

Almondo Labs may modify the Site or this Policy from time to time. If we make material changes, we will post the revised Policy and an updated date on the Site. Such modifications become effective seven (7) days following posting, and your continued use of the Site after that means you accept them.

The short version. This site has no cookies, no analytics, no advertising pixels, and no third-party trackers. Unless you fill in the trial request form, we do not receive anything about you beyond the ordinary server logs our host keeps to serve the page.

1. Applicability and scope

This Policy applies to any individual or entity that accesses or uses the Site. With respect to data collected in connection with the Site and with communications you send us through it, Almondo Labs acts as the data controller.

2. Eligibility (age restriction)

The Site is intended for individuals aged eighteen (18) years or older. We do not knowingly collect personal data from individuals under 18, and if we identify such data we will delete it. If you are under 18, please do not visit or use the Site.

3. Data we collect and process

There are only two ways we receive anything about you.

Information you send us through the trial request form

The form asks for, and transmits to us, exactly the following:

Name and email address, so we can reply to you
Organization or protocol name
Chain or language selections (EVM, Solana, Sui, Aptos, AppSec, other)
Repository or codebase URL, if you choose to provide one; the field is optional
Scope description, meaning whatever you write about what should be covered
Timeline, if you choose to provide one; the field is optional
How you heard about Almondo, if you answer the follow-up question after submitting

Anything else you include in the free-text fields is also processed, so please do not paste credentials, keys, or personal data about other people into them.

Technical information

Server logs. Our hosting provider processes standard request data in order to serve the Site and protect it from abuse. This may include IP address, user agent, requested URL, timestamps, and error information. We do not maintain our own separate log of visitors.
Country code. When a trial request is submitted, our host adds a two-letter country code derived from the connection, and it reaches us with the request. We do not receive your IP address alongside it.

4. Cookies, analytics, and tracking

The Site sets no cookies, uses no local or session storage for tracking, and runs no analytics, telemetry, advertising, heatmap, or session-replay services. There is no cross-site tracking and no user profiling. The Site's Content Security Policy forbids loading scripts, styles, fonts, or images from any external origin, which means third-party trackers cannot run here even inadvertently. The only JavaScript on the Site is a small first-party script that submits the trial form without reloading the page.

Because there is nothing to consent to, the Site does not display a cookie banner.

5. Purposes of processing

We process data to:

Respond to your trial request and correspond with you about it;
Evaluate whether the scope you describe is one we can take on;
Carry out the security work you ask us to do, where we agree to do it;
Provide, operate, maintain, and secure the Site;
Prevent fraudulent, abusive, or malicious activity, including automated form spam.

We do not use your details for advertising, and we do not send marketing email to people who only submitted a trial request.

6. Confidential material in a trial request

Repository locations, commit references, scope descriptions, and any source code you share with us are treated as confidential and used only to evaluate and perform the work you asked about, as set out in the Terms of Use. A mutual NDA is available on request, and we recommend putting one in place before sharing anything sensitive.

7. Feedback and contributions

Collection of feedback. We collect information you voluntarily provide through error reports, suggestions, or ideas about the Site or about Almondo ("Feedback").

Use of feedback. As set out in our Terms of Use, Feedback is owned by Almondo Labs. We process any personal data contained in Feedback to improve the Site and the product, develop features, and resolve technical issues.

Nature of provision. By providing Feedback, you acknowledge that any personal data included in it will be processed in accordance with this Policy.

8. Sharing, disclosures, and transfers

We do not sell personal data, and we do not share it with advertisers or data brokers. We rely on the following subprocessors:

Cloudflare, which hosts the Site and runs the function that receives the form submission.
Telegram, which is how the contents of a submitted request are delivered to us as a message. There is no database and no third-party form service between you and us.

Beyond those, we may disclose data where required to comply with lawful process, to enforce our Terms of Use, or to protect our rights or the safety of others. Both subprocessors operate internationally, so data may be transferred and stored outside your country. Such transfers are subject to appropriate safeguards, including contractual protections or standard contractual clauses where applicable.

9. Data security and retention

Security. The Site is served over HTTPS with HSTS and a strict Content Security Policy, and we apply commercially reasonable technical and organizational measures, including encryption in transit and access controls, to protect your data. No system is completely secure, and we cannot guarantee absolute security.
Retention. We keep trial requests and the correspondence that follows for as long as needed to answer you, carry out any resulting work, and meet legal or legitimate business obligations, after which they are deleted. Server logs are retained by our hosting provider under its own retention schedule.

10. Your rights

Subject to applicable law, you may have the right to access, correct, delete, export, or restrict the processing of your personal data, and to object to processing or withdraw consent where processing relies on it. To exercise any of these, contact us as described below and we will respond within the period required by applicable law. Because we hold very little, a deletion request usually amounts to removing your request message and the email thread that followed it.

11. Third-party links

The Site links to third-party sites, including LinkedIn and Medium. We are not responsible for the privacy practices or content of those services, and we encourage you to read their policies before providing them with any personal information. Following such a link takes you outside this Policy's scope.

12. Governing law

This Policy shall be governed by the laws of the State of Israel, and the competent courts of Tel Aviv-Jaffa shall have exclusive jurisdiction over any disputes.

13. Contact us

If you have any questions about this Policy, or you want to exercise any of the rights described in section 10, send your request through the request form and say what you need. Every message is read and answered individually.