Privacy policy

Summary, in one paragraph: we collect the minimum we need to deliver our services and reply to inquiries. We don't sell your data. We never use the contents of your audit or engagement data to train models. We use a small number of well-known vendors (analytics, email, scheduling) under data processing agreements. You can request deletion at any time.

1. Who we are

"RouterA2A," "we," "us," and "our" refer to RouterA2A LLC, a Delaware limited liability company, operating routera2a.com. For any privacy question, write to privacy@routera2a.com.

2. What we collect

2.1 Information you give us

• Contact details: name, work email, company, role — when you fill out our brief form, book a call, or download the checklist.
• Project context: the descriptions of your stack and goals you write in the brief form.
• Engagement data: during a paid engagement, anything you share with us under our mutual NDA — access tokens, traces, configs, documents. This is held under a separate data processing agreement.
• Payment information: billing details processed by our payment processor (Stripe). We do not store card numbers.

2.2 Information we collect automatically

• Analytics: pages visited, referrer, approximate location (city-level), device & browser. We use a privacy-respecting analytics provider (Plausible). No cross-site tracking. No advertising IDs.
• Server logs: standard request logs (IP, user-agent, timestamp), retained for 30 days for security purposes.

3. How we use it

• To respond to your inquiry and scope a possible engagement.
• To deliver the engagement you've contracted for.
• To send the lead magnet you requested and (if you opted in) occasional emails about new build logs and guides. Every email has an unsubscribe link.
• To improve the site & service — aggregate analytics only.
• To comply with our legal and tax obligations.

We do not: sell your data, share it with advertisers, use it to train models, or use engagement data for marketing.

4. Who we share it with

We use a short list of vendors, each under a data processing agreement:

• Hosting: Vercel / Cloudflare (US, EU)
• Email: Resend (US)
• Scheduling: Cal.com (US, EU)
• Analytics: Plausible (EU, cookieless)
• Payment: Stripe (US)
• Storage (engagement files): Google Workspace, AWS S3 (regions selected per contract)

We may share information when legally required, or to protect the rights, property, or safety of RouterA2A, our clients, or others. We'll notify you unless legally prohibited.

5. International transfers

We're a US-based company with EU and UK clients. Where personal data is transferred from the EEA, UK, or Switzerland to the US, we rely on Standard Contractual Clauses and equivalent safeguards.

6. Retention

• Inquiries we don't engage on: 12 months, then deleted.
• Engagement records: 7 years from project end (for legal & tax reasons).
• Marketing list: until you unsubscribe, then 90 days for suppression purposes only.
• Server logs: 30 days.

7. Your rights

Depending on where you live, you have the right to access, correct, port, restrict, or delete the personal data we hold about you, and to object to processing. To exercise any right, email privacy@routera2a.com — we'll respond within 30 days.

EEA/UK residents may also lodge a complaint with their local data protection authority.

8. Cookies

We use a single first-party cookie to remember your theme preference. No advertising or cross-site tracking cookies. Our analytics provider is cookieless.

9. Security

Encryption in transit (TLS 1.2+) and at rest. Access to engagement data is limited to the engineers on the project, under MFA, with audit logging. We don't ask for write credentials unless absolutely necessary — read-only access is preferred. Incident notification within 72 hours of confirmed breach.

10. Children

Our services are intended for businesses. We do not knowingly collect data from anyone under 16.

11. Changes

If we make material changes, we'll notify you by email (if we have one on file) and update the date at the top of this page. The current version is always the binding one.

Questions? privacy@routera2a.com — usually answered within 1 business day.