Privacy Policy

Information You Provide Directly

We collect information you voluntarily give us when you interact with our Services, including:

• Contact details: name, email address, phone number, job title, and company name submitted through our contact form, quote requests, or newsletter signup
• Careers information: resume/CV, cover letter, work history, and any other information you submit when applying for a job
• Meeting and scheduling information: name, email, and selected time slot when you book a consultation through our scheduling tool
• Communications: any information you share with us via email, phone, or chat

Information Collected Automatically

When you visit buraq.dev, we and our analytics/advertising partners automatically collect certain information about your device and usage, including:

• Device and browser data: IP address, browser type, operating system, device identifiers, and screen resolution
• Usage data: pages viewed, time on page, referring/exit pages, click activity, and general geographic location (city/region, derived from IP address) used to route you to relevant regional content
• Cookies and similar technologies, as described in Section 4 below

Information From Third Parties

We may receive limited information about you from business partners, publicly available sources, or advertising and analytics providers (for example, when you interact with our ads on other platforms).

We use the information we collect to:

• Respond to inquiries, quote requests, and support questions
• Deliver, maintain, and improve our website and services
• Schedule and manage consultations and demos
• Evaluate job applications and communicate with candidates
• Send service updates, marketing communications, and newsletters (you may opt out at any time, see Section 8)
• Measure and analyze website performance, traffic, and engagement
• Detect, investigate, and prevent fraud, abuse, or security incidents
• Comply with applicable legal obligations and enforce our Terms of Service

We process personal information on the basis of your consent, to perform a contract or take steps at your request before entering into one (for example, preparing a quote), to comply with a legal obligation, or where we have a legitimate business interest that is not overridden by your privacy rights (such as securing our website or improving our services).

Any marketing emails we send comply with the CAN-SPAM Act, including accurate sender information, a clear subject line, and a working unsubscribe link in every message. You can opt out of marketing emails at any time by clicking "unsubscribe" or by emailing us at the address in Section 12; this will not affect transactional or service-related messages.

We use cookies, pixels, and similar tracking technologies to operate our website, remember your preferences, and understand how visitors use our Services. This includes:

• Essential cookies required for core site functionality (for example, keeping the admin dashboard secure)
• Analytics cookies via Google Analytics 4 and Google Tag Manager, used to understand traffic and usage patterns
• Advertising/measurement cookies via Meta (Facebook) Pixel, used to measure ad performance and, where enabled, deliver more relevant advertising
• Preference cookies, such as a cookie that remembers your selected regional content preference

You can control cookies through your browser settings, including blocking or deleting them, though some site features may not function properly without essential cookies. Where required by law, we will request your consent before setting non-essential cookies and provide a way to withdraw that consent. See our separate Cookie Policy for more detail on the specific cookies we use and how to manage them.

We do not sell your personal information for money. We share information only in the following circumstances:

• Service providers: vendors who process data on our behalf under contract, including our cloud database and hosting provider, Cloudinary (image/media hosting), our CRM/ERP provider Odoo, our scheduling provider Calendly, and our email delivery provider
• Analytics and advertising partners: Google (Analytics, Tag Manager) and Meta, who process usage data subject to their own privacy policies
• Professional advisors: lawyers, accountants, and auditors, where necessary for our business
• Legal and safety reasons: when required by law, subpoena, or other legal process, or to protect the rights, property, or safety of Buraq, our users, or the public
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, in which case personal information may be transferred as part of that transaction

We retain personal information for as long as necessary to fulfill the purposes described in this policy, including to provide our Services, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements.

• Contact form and quote submissions: retained for the duration of the business relationship and a reasonable period afterward for recordkeeping
• Job application data: retained for the duration of the hiring process and a limited period afterward, unless you ask us to delete it sooner or applicable law requires a different retention period
• Website analytics data: retained according to the retention settings of our analytics providers, generally up to 14 months for individual-level data

We implement administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction, including encrypted connections (HTTPS), access controls on our administrative systems, and token-based authentication for our content management dashboard.

No method of transmission over the internet or electronic storage is 100% secure. While we work to protect your information, we cannot guarantee its absolute security, and you provide information to us at your own risk.

Rights for U.S. Residents

Depending on your state of residence, you may have some or all of the following rights under laws such as the CCPA/CPRA (California), VCDPA (Virginia), CPA (Colorado), CTDPA (Connecticut), UCPA (Utah), and similar state privacy laws:

• Right to know/access, the categories and specific pieces of personal information we have collected about you
• Right to delete personal information we have collected from you, subject to certain exceptions
• Right to correct inaccurate personal information
• Right to opt out of the "sale" or "sharing" of personal information and of targeted/cross-context behavioral advertising (see Section 9)
• Right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects
• Right to non-discrimination for exercising any of these rights
• Right to appeal a denied request, where applicable under your state's law

To exercise any of these rights, contact us using the details in Section 12. We will verify your request using information reasonably necessary to confirm your identity and respond within the timeframe required by applicable law. You may also designate an authorized agent to submit a request on your behalf, subject to verification.

We do not sell personal information in exchange for money. Our use of analytics and advertising cookies (Google Analytics, Google Tag Manager, and Meta Pixel) may be considered "sharing" for cross-context behavioral advertising under some state laws.

You can opt out of this sharing by adjusting your cookie preferences in our cookie banner where available, disabling cookies in your browser, using your browser's Global Privacy Control (GPC) signal (which we honor as a valid opt-out request where applicable), or by emailing us at the address in Section 12.

We currently do not respond differently to browser-based Do Not Track (DNT) signals outside of GPC, as there is no common industry standard for DNT.

Our Services are directed at businesses and are not intended for children under 13 years of age, and we do not knowingly collect personal information from children under 13, consistent with the Children's Online Privacy Protection Act (COPPA). If we learn that we have collected personal information from a child under 13 without verified parental consent, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us using the details in Section 12.

Our website may link to third-party websites, such as social media platforms or client sites, that are not operated by us. We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies.

Buraq is based in the United States, and our Services are primarily intended for visitors and clients in the United States, although our website is accessible globally and offers region-specific content for certain countries. If you access our Services from outside the United States, your information may be transferred to, stored, and processed in the United States, where privacy laws may differ from those in your jurisdiction.

If you have questions about this Privacy Policy, want to exercise a privacy right described above, or want to report a concern, contact us at:

Email: privacy@buraq.dev

General inquiries: hello@buraq.dev

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will update the "Effective date" at the top of this page when we make changes, and for material changes we will provide additional notice where required by law. We encourage you to review this page periodically. Your continued use of our Services after changes take effect constitutes acceptance of the revised policy.