This Privacy Policy explains how Falco AI ('we', 'us', 'our') collects, uses and protects information about you when you visit falco-ai.com or engage our services. We keep this short and direct because that's how we'd want to read it.
Who we are
Falco AI is a UK-based AI consulting and build studio. We design and ship custom AI systems, AIOS deployments and strategy work. Founded and run by Marcus Mewett.
Contact: marcus@falco-ai.com
What we collect
Three categories.
Information you give us
- Contact details (name, email, phone) when you book a call or fill in a form
- Business context (company, role, budget signals, the problem you're trying to solve) shared during discovery, strategy calls or audits
- Files, transcripts, system access and credentials shared during an engagement, only as needed for the work
- Payment details when you book a paid Strategy Session or Deep Dive (handled by Stripe; we never see card numbers)
Information we collect automatically
- Standard web analytics: pages viewed, referral source, device type, time on site (via Vercel Analytics, which does not use cookies)
- Cookies the site and the booking calendar need to work (see Cookies below)
Information from third parties
- Lead enrichment data (company size, industry, public profile) when relevant to qualifying inbound leads, only after you've contacted us
How we use it
- To deliver the service you booked (calls, audits, builds, ongoing retainer work)
- To respond to your inquiries and follow up on prospects
- To improve our offers, content and the way we run engagements
- To send occasional updates if you've opted in. We do not spam.
- To meet legal and accounting obligations
Third parties we work with
We only share data with vendors needed to run the business. Each gets only what it needs.
- Anthropic Claude API: language model backbone for our work. Subject to Anthropic's enterprise data terms. Anthropic privacy policy.
- Supabase: the database behind our own client and lead records, including what you send through our contact form.
- n8n: the automations that receive our website forms and bookings and pass them to our records.
- Telegram: internal alerts to our team when a new enquiry or booking comes in.
- Cal.com: call booking.
- Stripe: payment processing for paid sessions.
- Google Workspace: email, docs, calendar.
- Airtable: older lead records, being phased out.
- Vercel: website hosting and website analytics without cookies.
We do not sell your data. Ever.
How long we keep data
- Inbound lead inquiries: kept for up to 24 months after last contact, then deleted unless you've become a client.
- Active client data: kept for the duration of the engagement plus 7 years for accounting and tax purposes (as required by UK law).
- Website analytics: anonymous and aggregated, kept by Vercel within its standard retention limits.
Your rights
If you're in the UK, EU or another GDPR-equivalent jurisdiction, you have the right to:
- Access the personal data we hold about you
- Have it corrected if it's wrong
- Have it deleted (where we don't have a legal obligation to keep it)
- Restrict or object to how we use it
- Receive your data in a portable format
- Withdraw consent at any time
- Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) if we've messed up
To exercise any of these, email marcus@falco-ai.com. We respond within 7 working days.
Cookies
We use a minimal set of cookies:
- Essential: for the site and the booking calendar (Cal.com) to work (no consent needed)
Our website analytics (Vercel) do not use cookies. You can disable cookies in your browser settings and the site will still work, though the booking calendar may not.
Security
Client work runs through encrypted channels and on infrastructure with industry-standard security. AIOS deployments live on your environment, not ours; we don't hold your data on our servers. For specific security requirements (SOC 2 procurement requests, etc.), email and we'll send a security one-pager.
International data transfers
We're UK-based. Some of our vendors (including Anthropic, Google, Stripe, Vercel and Cal.com) are US-based and process data under standard contractual clauses or equivalent transfer mechanisms.
Children
Our services aren't directed at anyone under 18. We don't knowingly collect data from children.
Updates to this policy
We update this policy when we change something material. The Last updated date at the top reflects the latest revision. For significant changes, we'll notify active clients by email.
Contact
Questions, concerns or want your data? Email marcus@falco-ai.com and we'll respond within 7 working days.