Privacy Policy
Last updated: 2026-05-27.
Who we are
This policy describes the privacy practices of Efficient Labs ("we", "us", "the firm"), operated by Michael Ward under the trade name "Efficient Labs". Questions go to founder@efficientlabs.ai.
What information we collect
We collect only the information you knowingly provide to us, plus a small set of operational records that come from running our services.
Information you provide
- Audit intake form. When you fill our intake form (hosted by Tally Forms), we receive the fields you submit: company name, your name, email, role, industry, automation stack details, sovereignty concerns, regulations that apply, budget range, urgency, and any free-text you write about your situation.
- Payment information. When you complete payment for an audit, Stripe collects your card and billing details directly. We do not see your card number; we receive only the order amount, the receipt email, the country of payment, and a transaction reference.
- Email correspondence. Anything you write to us via email — including replies to deliverable emails — is stored in our email systems and may be referenced when responding to you.
Operational records
- Delivery records. A record that an audit was delivered to you, when it was delivered, and the email address it went to. Stored for at least the warranty period and as required by tax/business records law.
- Server logs. Our infrastructure produces operational logs (timestamps, request paths, status codes) that are stored on our servers and used for debugging and incident response. We do not log audit content beyond what is necessary to deliver it.
How we use this information
- To scope, generate, and deliver the AI Sovereignty Audit you booked.
- To process your payment and provide receipts.
- To respond to questions and provide post-delivery support.
- To improve our service — for example, by using anonymized patterns from past engagements to refine our audit methodology. We do not use your identifiable data to train external models.
We do not sell your information. We do not share it with third parties for advertising or marketing purposes.
Who we share information with (sub-processors)
To run our service we use a small set of vendors. Each receives only the data necessary for its role:
| Vendor | Role | Data they receive |
|---|---|---|
| Tally Forms | Intake form hosting | Form submission contents |
| Stripe | Payment processing | Card and billing details, transaction record |
| Anthropic (Claude) | AI assistance for audit generation | Your intake submission, used as context to draft the deliverable |
| Resend | Transactional email delivery | Your email address and email content |
| Cloudflare | Site hosting, DNS, network protection | HTTP request metadata only |
| Google Workspace | Operator's email and calendar | Inbound and outbound correspondence with us |
If our sub-processor list changes, we update this page. The current list is also kept in our public repository at /legal/vendor-list.md.
How long we keep your information
- Intake submissions and audit deliverables: kept for at least 12 months after delivery, then archived or deleted at your request.
- Payment records: kept as required by tax and business records law (typically 7 years).
- Email correspondence: kept as part of normal email history; no automatic deletion.
Your rights
You can ask us at any time to:
- Tell you what information we hold about you.
- Correct anything that is wrong.
- Delete your information, subject to records we are required to keep by law.
- Provide a copy of your information in a portable format.
Email founder@efficientlabs.ai with the request. We respond within 14 business days.
Security posture
We treat client data with the same discipline we audit for. Concretely: data at rest is on encrypted disks; access requires authentication; our infrastructure is on a private network not reachable from the public internet except where deliberately exposed for service. Our incident-disclosure policy is published in /legal/incident-disclosure.md in our public repository.
Children
This service is for businesses. We do not knowingly collect information from anyone under 18.
Changes to this policy
If we change this policy, the "Last updated" date at the top changes, and material changes are flagged with a clear notice on this page for at least 30 days.
Contact
Email: founder@efficientlabs.ai