ABSALAN / PRIVACY-POLICY
Privacy Policy
How ABSALAN collects, uses and protects personal information.
Effective date: October 12, 2026
ABSALAN Inc. ("ABSALAN", "we", "us" or "our") designs artificial intelligence, autonomous robotics, drone systems and aerospace technology. This Privacy Policy explains how we collect, use, share and protect personal information when you visit our website, contact us, or otherwise interact with us as a prospective customer, research partner or business contact. It also explains the choices and rights available to you.
This policy applies to information we process as a business. It does not cover third-party websites or services that we link to, which are governed by their own privacy policies.
Summary
- We collect only what we need to run, secure and improve this website and to respond to you.
- We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
- We do not use advertising cookies, analytics trackers or social media pixels.
- We do not use personal information collected through this website to train our AI models, perception systems or autonomous platforms.
- You can ask us to access, correct or delete your information at any time.
1. Information we collect
Information you provide to us
- Contact enquiries. When you use our contact form, we collect your name, email address, organization (optional), the type of project you are interested in, and the content of your message.
- Business communications. When you correspond with us by email, meet us at an event, or work with us as a customer, supplier or research partner, we collect business contact details such as your name, title, organization, email address and phone number, along with the content of our communications.
Please do not send us sensitive personal information, confidential business information, or any technical data that is classified or controlled under export control regulations (such as ITAR or EAR) through our website or contact form. If a project requires an exchange of controlled or confidential information, we will arrange an appropriate, secure channel and agreement.
Information collected automatically
Like most websites, our servers automatically record technical information about each request to keep the site running and secure:
- Request data: IP address, date and time, the page requested (including any query string), the HTTP method, the referring page, and the server response and response time.
- Device and browser data: your browser's user agent string and the browser, operating system and device type derived from it, and your browser's preferred language.
- Approximate location: a country code, when one is supplied by our hosting or content delivery provider. We do not collect precise geolocation.
- Session data: a one-way hashed (non-reversible) version of your session identifier, used to understand how pages are visited within a single session.
- Security data: details of requests that appear malicious or abusive, such as attack patterns, repeated failed form submissions or automated traffic, together with the IP address and user agent involved.
Information from other sources
We may receive business contact information from event organizers, partners, publicly available professional sources, or colleagues who refer you to us. We use it only for legitimate business communications related to our work.
2. How we use information
- To respond to you — answering enquiries, evaluating potential collaborations and providing the information you request.
- To operate and improve the website — delivering pages, diagnosing technical problems, and understanding aggregate traffic so we can improve content and performance.
- To protect our website and users — detecting, investigating and preventing spam, fraud, abuse, security incidents and attacks. This includes rate limiting, a human-verification challenge on our contact form, and temporarily blocking IP addresses that generate repeated high-severity security events.
- To manage business relationships — maintaining records of our communications with customers, partners and suppliers.
- To comply with legal obligations — including record-keeping, export control and sanctions compliance, responding to lawful requests, and establishing, exercising or defending legal claims.
We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing. Automated security measures, such as temporarily blocking an abusive IP address, are limited to protecting our services.
3. Our research and AI development
Our work involves machine learning, computer vision and autonomous systems. We do not use personal information collected through this website or our business communications to train machine learning models.
When our research platforms, such as aerial or robotic systems, operate in test environments, their sensors may incidentally capture images or other data about people nearby. We conduct testing in controlled locations wherever possible, collect only the data needed for the research objective, restrict access to it, and remove or de-identify incidental personal information when it is not required.
4. Cookies and similar technologies
We use only a small number of strictly necessary technologies. We do not use advertising, analytics or cross-site tracking cookies.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| Session cookie | Strictly necessary | Maintains your session so forms, including the contact form and its verification challenge, work securely. | Expires after 2 hours of inactivity |
| XSRF-TOKEN | Strictly necessary | Protects form submissions against cross-site request forgery. | Expires with the session |
| system-initialized | Browser session storage | Remembers that the site's introduction animation has played, so it is not repeated on every page. | Cleared when you close the tab |
Because these technologies are required for the website to function and be secure, they cannot be switched off in our systems. You can block or delete cookies in your browser settings, but some parts of the site, such as the contact form, may then stop working.
Web fonts. Our pages load typefaces from Google Fonts. When your browser requests these fonts, Google receives your IP address and browser information. Google's handling of this data is described in the Google Privacy Policy.
5. How we share information
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We disclose personal information only in the following circumstances:
- Service providers that process information on our behalf and under contractual confidentiality and security obligations, such as website hosting and content delivery, email delivery (contact form submissions are forwarded to our team by email), and IT and security services.
- Professional advisers, such as lawyers, auditors and insurers, where necessary.
- Legal and safety reasons — to comply with applicable law, regulation, legal process or enforceable government requests, or to protect the rights, property and safety of ABSALAN, our users or the public.
- Business transfers — in connection with a merger, acquisition, financing or sale of all or part of our business, subject to this policy's protections.
- With your direction or consent, for example when you ask us to introduce you to a partner.
6. Data retention
We keep personal information only for as long as necessary for the purposes described in this policy. Automated deletion runs daily on our systems.
| Information | Retention period |
|---|---|
| Website request logs | 90 days, then automatically deleted |
| Security event logs | 180 days, then automatically deleted |
| Contact enquiries and business correspondence | As long as needed to respond and maintain the business relationship, and then for any period required by law or to resolve disputes |
When information is no longer needed, we delete it or de-identify it so it can no longer be associated with you.
7. How we protect information
As an engineering company working on sensitive technologies, we take security seriously. Our safeguards include encrypted connections, CSRF and form protections, access restricted to authorized personnel, monitoring for malicious activity, automated threat detection, rate limiting, and the storage of session identifiers in hashed form only. No method of transmission or storage is completely secure, however, so we cannot guarantee absolute security. If you believe your interaction with us is no longer secure, please contact us immediately.
8. Your privacy rights
Depending on where you live, you may have some or all of the following rights regarding your personal information:
- Access — to know what personal information we hold about you and receive a copy of it.
- Correction — to correct inaccurate information.
- Deletion — to ask us to delete your information.
- Portability — to receive your information in a portable format.
- Objection and restriction — to object to, or ask us to limit, certain processing.
- Opt-out — of the sale or sharing of personal information, or of targeted advertising. We do not engage in these activities.
- Withdraw consent — where processing is based on your consent.
To exercise these rights, contact us using the details below. We will verify your request using information you have already provided to us, such as by confirming your email address, and respond within the time required by applicable law (generally within 30 to 45 days). You may use an authorized agent to make a request on your behalf, and we may ask for proof of that authorization. If we deny your request, you may appeal by replying to our decision, and we will explain the outcome of your appeal in writing. We will not discriminate against you for exercising any of your rights.
Additional information for California residents
Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA), we disclose that in the past 12 months we have collected the following categories of personal information, from the sources and for the business purposes described above:
- Identifiers, such as name, email address and IP address.
- Professional information, such as organization and job title.
- Internet or network activity, such as pages viewed, referring pages and browser information.
- Approximate geolocation at the country level.
- Inferences limited to security assessments, such as whether traffic appears automated.
We disclose these categories only to the service providers and other recipients described in Section 5. We have not sold or shared personal information in the past 12 months, and we have no actual knowledge of selling or sharing the personal information of consumers under 16. We do not use or disclose sensitive personal information for purposes that would give rise to a right to limit its use.
Additional information for visitors in the EEA, UK and Switzerland
ABSALAN Inc. is the controller of your personal information. We rely on the following legal bases: our legitimate interests in operating, securing and improving our website and managing business relationships; taking steps at your request before entering into a contract, such as responding to a project enquiry; compliance with legal obligations; and your consent where we ask for it. You also have the right to lodge a complaint with your local data protection authority.
Global Privacy Control and Do Not Track
Because we do not sell or share personal information or use targeted advertising, our practices already align with the preferences expressed by Global Privacy Control signals. We honor these signals where required by law. There is no common industry standard for "Do Not Track" browser signals, so we do not respond to them separately.
9. International data transfers
ABSALAN is based in the United States, and our website and systems are operated in the United States. If you access our website from outside the United States, your information will be transferred to, stored in and processed in the United States, where data protection laws may differ from those in your country. Where required, we use appropriate safeguards, such as the European Commission's Standard Contractual Clauses, for these transfers.
10. Children's privacy
Our website and services are intended for professional and business audiences and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
11. Third-party links
Our website may link to third-party websites, such as social media profiles or research publications. We are not responsible for the privacy practices of those sites, and we encourage you to review their privacy policies.
12. Changes to this policy
We may update this Privacy Policy as our technologies, practices or legal obligations change. When we do, we will revise the effective date at the top of this page. If we make material changes, we will provide additional notice where appropriate, such as a notice on our website.
13. Contact us
If you have questions about this Privacy Policy, or would like to exercise your privacy rights, please contact us:
- Email: privacy@absalan.com
- Online: through our contact form, selecting "Other" as the project type and including "Privacy request" in your message
ABSALAN Inc., Attn: Privacy