Privacy Policy & Data Fencing

RescountLab builds custom software, AI knowledge tools, and automated business workflows. We uphold an uncompromising security baseline: we never feed confidential client specifications, source code, database records, prompts, or customer interactions into public generative AI training pipelines.

• No client intellectual property or customer data is used to train foundation models.
• Contractual zero-data-retention enforced with enterprise model providers.
• Isolated vector stores and knowledge embeddings with strict cryptographic tenant segregation.

We collect information solely to assess technical feasibility, prepare Statements of Work (SOWs), and engineer agreed digital products. The scope of collected data includes:

• Project Inquiries: Name, work email address, company name, telephone number, technical scope specifications, and budget indications submitted via our contact forms.
• Client Operational Assets: Architectural schemas, API specifications, database design documents, and interface assets provided under mutual non-disclosure agreements.
• Technical Telemetry: IP addresses, browser user-agent strings, and diagnostic telemetry collected automatically to secure our platforms against denial-of-service attempts and verify system integrity.

In accordance with Article 6 of the General Data Protection Regulation (GDPR) and international privacy frameworks, we process your information strictly under the following lawful grounds:

• Contractual Necessity: To draft technical proposals, execute Statements of Work, and fulfill software engineering obligations.
• Legitimate Business Interests: To protect the integrity and security of our web infrastructure and maintain business communication records.
• Statutory & Tax Compliance: To maintain legally required commercial invoicing and accounting records under applicable French and European Union regulations.

We implement rigorous defense-in-depth security standards across all systems designed and operated by RescountLab:

• Encryption Standards: Data in transit is strictly encrypted using TLS 1.3 with forward secrecy. Data at rest is encrypted using AES-256 standards.
• Environment Isolation: Client staging, pre-production, and production workloads are isolated at the database schema and infrastructure layer.
• Access Control: Only senior engineering principals assigned to your project hold authorized access credentials, protected by hardware-backed multi-factor authentication (MFA) and least-privilege role-based access control (RBAC).

To deliver high-availability software platforms, RescountLab collaborates with premier enterprise infrastructure and hosting sub-processors. All vendors are bound by signed Data Processing Agreements (DPAs) guaranteeing equivalent data protections:

• Cloud Compute & Database: Supabase (PostgreSQL with Row-Level Security), Amazon Web Services (AWS), Google Cloud Platform (GCP).
• Edge CDN & Security: Cloudflare, Vercel, Netlify for global low-latency content delivery and DDoS shielding.
• Payment Processing: Stripe (PCI-DSS Level 1 certified). RescountLab never directly stores or processes raw credit card numbers or banking credentials.

Our public website uses minimal, privacy-first technical cookies. We do not participate in cross-site behavioral tracking networks, ad retargeting exchanges, or aggressive data broker ecosystems.

• Strictly Necessary Cookies: Session state, CSRF security tokens, and authentication tokens for our administrative portals.
• Functional Preferences: User accessibility preferences, including reduced-motion mode and theme state.
• Zero Third-Party Advertising Trackers: We do not deploy third-party advertising or commercial tracking cookies on this website.

We retain client inquiry records and project telemetry only as long as necessary to satisfy the purposes for which they were collected, or to comply with statutory accounting and warranty requirements.

Under the European Union General Data Protection Regulation (GDPR) and comparable global data protection standards (including UK GDPR and CCPA/CPRA), you retain comprehensive rights regarding your personal information:

• Right of Access: Request verification of whether your data is being processed and obtain a portable copy.
• Right to Rectification: Correct inaccurate or incomplete project or personal records.
• Right to Erasure (“Right to be Forgotten”): Permanently delete your personal data under qualified conditions.
• Right to Restrict Processing: Limit the processing of your data while an inquiry or objection is investigated.
• Right to Lodge a Complaint: File a formal inquiry with supervisory authorities, including France’s CNIL (Commission Nationale de l’Informatique et des Libertés).

All data privacy inquiries, DPA requests, and regulatory compliance notices are reviewed directly by our engineering leadership—never delegated to automated deflection systems or offshore call desks.

• Direct Legal Email: legal@rescountlab.com
• General Studio Inquiries: hello@rescountlab.com
• Response Time: All formal data protection requests are acknowledged within 2 business days.