How Chain handles your information.

What the contact form collects

The only place this website asks you for information is the contact form. When you send it, we receive:

• your name and company
• your work email address
• your phone number, only if you choose to give it
• the message you write
• the page you sent it from, the language you were using and the time it was sent

To limit abuse, the server also reads your IP address at the moment of submission and counts submissions per address for a short window. That count is held in memory only; the address is not stored with your enquiry and is not written to a database.

Why we use it

We use what you send to reply to you, to understand the problem you describe, and to keep a record of our correspondence and of our work on your enquiry in Chain's internal system. We do not add you to marketing lists, and we do not sell or rent your details.

How AI helps us handle your enquiry

We may use AI tools in Chain's internal system to help us handle enquiries:

• a suggested priority: when we have this switched on, your company name, your name, the domain of your email address (not the full address), the page you wrote from, the language you used on the site and your message are sent to an AI model, which suggests a priority score from 1 to 10 with a short reason and a possible next step
• an assistant: when one of us asks it for help with your enquiry, the details it needs, which can include your email address, your phone number and our notes, are sent to the AI model

These suggestions only help us decide what to look at first and how to prepare. A person at Chain reads your enquiry and decides how to respond: no decision about you is made by automated means alone. The AI models are provided by Anthropic, named below.

Who processes it on our behalf

The following service providers are involved in delivering a form submission to us and in handling it. Each processes your information only to provide its service to us, under its own security measures and terms.

• Vercel hosts the website and runs the code that validates your submission and forwards it to us. That code runs on Vercel's servers in the United States. Vercel also hosts Chain's internal system, which receives your enquiry, on its servers in Frankfurt, Germany, in the European Union.
• Supabase provides the database of Chain's internal system, where your enquiry is stored and where we manage it. The database is in Frankfurt, Germany, in the European Union.
• Resend delivers the notification email to us from the address leads@send.chaintec.ai. Resend's servers for this account are in Ireland, in the European Union, and Resend keeps a copy of each sent notification in its delivery log.
• Microsoft 365 provides the info@chaintec.ai mailbox where your enquiry arrives and where we reply from.
• Anthropic provides the AI models described above. When those features are used, the information they need is sent to Anthropic, a company based in the United States, and is processed in the United States or in other countries where Anthropic runs its service. Under Anthropic's Commercial Terms, Anthropic may not train its models on this information. Anthropic deletes it, and what its models produce from it, within 30 days, unless it must keep them longer to enforce its usage policy (content flagged as a violation can be kept for up to 2 years) or to comply with the law.
• GitHub runs the automated jobs that back up and test the database of Chain's internal system. Each backup is encrypted by the job that makes it, before it is stored with GitHub, and only Chain holds the key that opens it. A copy made to test a restore is discarded when the test ends.

When your enquiry arrives, the system notifies us in the system itself and on our own phones and computers. A notification sent to a phone or computer passes through that device's push service, such as Google's or Apple's, encrypted so that the push service cannot read it.

This means your information may be processed outside the country you live in, including in the United States and the European Union.

How long we keep it

We keep enquiries for as long as we need them to handle your request and to maintain our business correspondence.

If you ask us to delete your enquiry, we delete it from our mailbox, where Microsoft 365 may keep a deleted message for a short recovery period, and we delete it in our internal system. Deleting it there takes it out of our lists and day-to-day use, but does not erase it: your enquiry, a copy of the submission as we received it, our notes, the notifications about it and any conversation with the system's AI assistant about it remain in the system's database, where only Chain's administrators can still see them. The system also keeps a protected log of the changes made in it, which deleting an enquiry does not erase. We use what remains only for security, accountability and recovery, or where the law requires us to keep it.

The system's database is backed up twice a day by the automated jobs on GitHub described above. GitHub keeps each of these encrypted backups for 90 days and then deletes it automatically. Separately, we keep encrypted recovery copies of the database on our own secured devices, so that we can restore the system if it fails; GitHub's automatic deletion does not apply to these copies.

Your choices

You can ask us at any time to tell you what information we hold about you, to correct it, or to delete it as described in the previous section. Send your request to info@chaintec.ai and we will answer from the same address.

Cookies and browser storage

The website sets no advertising or tracking cookies. It uses two small pieces of browser storage, both strictly functional:

• NEXT_LOCALE, a cookie that remembers whether you chose English or Arabic. It lasts for your browser session.
• chain-intro, a flag in session storage so the opening animation plays once per visit and not on every page.

Because nothing here identifies or tracks you, the site does not show a cookie banner.

Analytics

The site is built to use Vercel Web Analytics, a cookieless measurement tool. It counts page views in aggregate, with the country, device type and referring site, and does not use cookies, cross-site identifiers or fingerprinting. It cannot single you out as an individual.

Live AI agent demos

Some case study pages let you try a live AI agent. The demo is provided by Convocore, a third-party service, and nothing from it loads until you press the button that opens it. When you open it, your browser loads the demo from Convocore's servers together with the tools Convocore itself uses, which may set their own cookies and run their own analytics. Anything you type into the demo is sent to and processed by Convocore under Convocore's privacy policy, not by this website. Please do not enter personal or confidential information into a demo.

Links to other sites

The site links to client websites, to WhatsApp and to a map service. Those sites have their own privacy practices, which we do not control.

Security

The website is served only over HTTPS with strict browser security policies, has no user accounts and stores no personal data of its own: what you send goes to Chain's internal system and through the providers named above, and nowhere else. Only people working for Chain can open that system; each signs in with a password and an authenticator app and sees only what their role allows.

Changes to this policy

If the way the site handles information changes, we update this page and the date at the top.

Contact

Questions about this policy or about your information: info@chaintec.ai.