Privacy Policy

1. Information we collect

Information you give us. We collect information only when you choose to submit it:

• Contact form: your name, email address, and message.
• Dylan, our AI chat assistant: the messages you type and, if you choose to share them, your name, email, phone number, company, goal, and timeline.
• Digital business card (“Share My Info”): your name, email, phone number, job title, company, and any note you add.
• Newsletter (The AI Arbitrage): your email address and your consent to receive it, stored in our database with a private link you can use to unsubscribe at any time.
• Resource requests: your email address when you request materials such as our AI playbook.
• Assessments and diagnostics (for example, our AI Risk Analyzer and diagnostic scan): your name, company name, email, and your answers about your business, such as revenue range, workforce makeup, and the controls and processes you have in place.
• Client portal: the login credentials we issue to clients.
• Email and calls: whatever you include when you contact us directly.

Information collected automatically. Like most websites, our hosting provider records standard server logs (such as IP address, browser type, pages requested, and time of request) to operate and secure the Site. We also keep a basic log of a few on-site actions (for example, which page a button was clicked on, the referring page, and a timestamp) to understand how the Site is used. That log does not use cookies and does not identify you. For diagnostic responses, we store a one-way scrambled (hashed) version of your IP address to help prevent abuse, not the address itself.

What we do not collect. We do not use third-party advertising, analytics, or social media tracking pixels. We do not collect biometric information. Please do not send us sensitive information such as Social Security numbers, bank or card account numbers, or health information through the Site.

2. Cookies

We use only a small number of cookies that are strictly necessary for features you ask to use. We do not use advertising or tracking cookies, so we do not show a cookie consent banner.

You can block or delete cookies in your browser settings. If you do, the diagnostic will not remember your progress and you will not be able to stay signed in to the portal.

3. How we use information

• To respond to your inquiry, schedule a call, and follow up about our services.
• To deliver resources and assessment results you request.
• To provide services to clients under an engagement agreement.
• To operate, secure, troubleshoot, and improve the Site and our AI assistant.
• To send occasional relevant business emails. Every marketing email includes a way to unsubscribe, and you can opt out at any time by emailing us.
• To comply with law, professional obligations, and to protect our rights.

We do not use your information to make automated decisions that have legal or similarly significant effects on you.

4. Dylan, our AI chat assistant

Dylan is an automated AI system, not a human. We say so in the chat window, and Dylan is designed to identify itself as an AI if asked. A notice next to the message box explains that messages are sent to our AI provider; by sending a message, you consent to that processing. If you prefer not to use the chat, you can reach us through the contact form or by email instead.

• How it works: your chat messages, including any contact details you enter in the chat form, are sent to our AI provider, Anthropic, to generate responses. Anthropic processes this data on our behalf under its commercial terms and does not use it to train its models.
• Lead details: if you share contact details, they are emailed to the six50 team so we can follow up. They are not sold or shared with third parties for their marketing.
• Chat history: six50 does not save chat transcripts to a database. The conversation lives in your browser tab and is cleared when you leave the Site. We log technical metadata only (such as timestamps, token counts, and model version) to monitor reliability, cost, and quality.
• Accuracy: AI responses can be wrong and are not professional, legal, tax, financial, or accounting advice. For guidance on your situation, contact us directly.
• Oversight: we review the assistant’s instructions on a recurring basis and keep a change log. You can send questions or corrections to contact@six50.io.

5. How we share information

We do not sell personal information, and we do not “share” it for cross-context behavioral advertising as those terms are defined under state privacy laws. We share information only with:

• Service providers that help us run the Site and our business and are permitted to use the information only to provide services to us: Vercel (website hosting), Anthropic (AI assistant), Supabase (secure database for form and assessment submissions), Resend (email delivery), and the email, calendar, and workflow tools we use to manage client relationships.
• Legal and safety reasons: when required by law, subpoena, or professional regulation, or to protect the rights, safety, and property of six50, our clients, or others.
• Business transfers: as part of a merger, acquisition, or sale of assets, subject to this Policy.
• With your direction: when you ask us to.

Our service providers may store and process information in the United States.

6. Client engagement information

Information our clients provide during an engagement (such as financial records, systems access, and internal documents) is governed by the client’s signed engagement agreement and by the professional confidentiality standards that apply to our work, in addition to this Policy. Where the two differ, the engagement agreement controls.

7. How long we keep information

We keep personal information only for as long as reasonably necessary for the purposes described in this Policy, or longer where a longer period is required or permitted by law. To decide how long to keep something, we consider:

• whether we have an ongoing or potential business relationship with you;
• legal, tax, accounting, and record-keeping requirements that apply to us;
• the terms of any engagement agreement;
• whether the information is needed to resolve disputes, enforce our agreements, or establish, exercise, or defend legal claims, including for the applicable statute of limitations; and
• whether you have asked us to delete it, subject to the exceptions the law allows.

Inquiries, leads, and assessment responses are kept under these criteria. Client records are kept as the engagement agreement and law require. Server and technical logs are kept for the period set by our hosting provider. When information is no longer needed, we delete or de-identify it.

8. Security

We use reasonable administrative, technical, and physical safeguards, including encrypted connections (HTTPS), access controls, and database security rules. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a security breach affects your personal information, we will notify you as required by applicable law, including the Illinois Personal Information Protection Act.

9. Your choices and rights

Regardless of where you live, you can ask us to:

• tell you what personal information we have about you and give you a copy;
• correct information that is inaccurate;
• delete your information, subject to legal and professional record-keeping requirements;
• stop sending you marketing emails.

Residents of California and other states with consumer privacy laws may have additional rights under those laws, and we will honor them where they apply. To make a request, email contact@six50.io. We may need to confirm your identity before acting on a request, and you may use an authorized agent. We will respond within the time required by the law that applies to your request, generally 45 days from receipt, which may be extended by up to an additional 45 days where reasonably necessary; if we need more time, we will tell you why within the first 45 days. We will not discriminate against you for exercising your rights.

Do Not Track and Global Privacy Control. We do not track visitors across other websites, so there is no cross-site tracking to turn off. We treat a Global Privacy Control signal from your browser as a valid request to opt out of any sale or sharing of personal information.

10. Children

The Site is intended for business professionals and is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has sent us information, contact us and we will delete it.

11. Visitors outside the United States

six50 is based in the United States, and information you submit is processed in the United States. If you are located elsewhere, you may contact us to exercise any rights you have under your local law.

12. Changes to this Policy

We may update this Policy as the Site and our practices change. We will post the updated version here with a new effective date, and for material changes we will provide additional notice where appropriate.

13. Contact us

six50 solutions LLC
Illinois, United States
Email: contact@six50.io
Or use our contact form.