Privacy Policy

Scope

This policy applies to the Umfress Business Solutions company website, its contact and request forms, launch lists, the Ava website assistant, authenticated client and team portals, and client technology projects operated by Umfress Business Solutions, LLC.

Individual Umfress products may have their own Terms, Privacy Policies, consumer-health notices, subscription terms, or other policies. Where a product has its own privacy notice, that notice governs the information collected through that product. This company-wide policy does not replace or duplicate a product-specific policy.

Information We Collect

The information we collect depends on how you interact with the website. It includes:

• Start a Project / contact form: your name, company, work email address, focus area, and message.
• Speaking request form: organization name, contact name, email address, and the event details you provide.
• Ava lead form: your name and email address, and, if you choose to provide them, your company, phone number, and area of interest.
• Ava chat: the messages you send to Ava and Ava’s replies. Saved AI activity records have personal details such as email addresses and phone numbers automatically removed, as described in the Ava section below.
• Launch lists: your email address and the page or source where you signed up. The HarperWise list also accepts an optional audience type (for example, student or parent/guardian).
• Technical information: your IP address and an anonymous chat session identifier, used to prevent spam and abuse, and standard request information processed by our hosting infrastructure when you load a page.
• Portal accounts: login email address, account role, and sign-in records needed to administer portal access.
• Email records: when we send an email (for example, a form confirmation), we record the recipient address, the type of email, and its delivery status. The body of the email is not stored in the website database.

Please do not submit sensitive personal information, protected health information, financial-account credentials, Social Security numbers, or other confidential data through public website forms or AI chat interfaces unless Umfress Business Solutions has expressly authorized a secure method for that purpose.

How we use information

We use personal information to:

• Respond to inquiries, project requests, and speaking requests.
• Send confirmation emails for forms you submit.
• Send launch updates to people who join a launch list.
• Operate Ava and respond to questions asked through it.
• Scope, deliver, and support agreed client technology projects.
• Establish, authenticate, maintain, and secure user accounts and portals.
• Operate, evaluate, troubleshoot, and improve our website and internal systems.
• Detect misuse, prevent spam and fraud, protect security, and enforce contractual terms.
• Comply with applicable law and respond to valid legal requests.

Launch lists

Our website offers three separate launch lists: HarperWise, AllieBites, and a general “Notify Me at Launch” list. Each list stores your email address and the page or source where you signed up. The HarperWise list also accepts an optional audience type, which is not required.

We use launch-list information only to send launch updates and important news about the applicable product. Each list is kept separately, launch-list contacts are not used for unrelated marketing, and we do not sell them.

You can ask us to remove you from any launch list at any time by emailing info@umfressbs.com or using our contact form, and we will remove your entry. Launch emails, when sent, will include an unsubscribe link.

As with any form on our site, our servers also process your IP address for a short period to prevent spam and abuse. That information is not stored on your launch-list entry.

Ava and AI features

Ava is the AI assistant on our website. It helps visitors learn about Umfress products and services and find the right page or contact option.

• Before chatting with Ava for the first time, visitors must acknowledge our AI Use Notice.
• Messages you type are sent to our server, which applies security checks, rate limits, and message-size limits before processing.
• Conversations are then processed through the Lovable AI Gateway to generate Ava’s response.
• Your latest message and Ava’s reply may be saved to our AI activity log with personal details automatically removed. No name or user account identifier is attached to these saved website chat records.
• When Ava speaks a reply aloud, the text of Ava’s reply is sent to ElevenLabs to create the audio. Your typed messages are not sent to ElevenLabs.
• If you use the microphone to talk to Ava, speech recognition is performed by your web browser’s built-in speech feature. Your browser or device provider may process that speech according to its own practices. Umfress Business Solutions does not store audio from the microphone.
• If you choose to share your contact details through Ava’s lead form, we collect the information described in “Information We Collect” and use it to follow up with you.

AI-generated content may be incomplete, inaccurate, or inappropriate for a particular situation. It is provided for general informational purposes and does not constitute legal, tax, accounting, financial, medical, or other regulated professional advice.

Users should not submit confidential, legally privileged, protected health, or highly sensitive personal information to Ava or any other AI feature unless Umfress Business Solutions has expressly approved a secure workflow for that information.

Umfress Business Solutions will describe material uses of submitted content for service improvement or AI development when applicable. We will not promise that content is excluded from model training unless that exclusion is confirmed by the applicable system configuration and vendor agreement.

How we disclose information

Umfress Business Solutions does not sell personal information. We may disclose information in the following circumstances:

• Service providers: the providers that help us operate the website, listed below.
• Professional advisors: attorneys, accountants, insurers, and auditors where reasonably necessary.
• Legal and safety purposes: when required by law or reasonably necessary to protect rights, security, users, or the public.
• Business transactions: in connection with a merger, financing, acquisition, reorganization, sale of assets, or similar transaction, subject to appropriate safeguards.
• With your direction or consent: when you ask us to share information or otherwise authorize the disclosure.

The service providers used by the company website are:

• Lovable Cloud: hosting, database, authentication, and storage for website forms, launch lists, portals, and records.
• Lovable-managed email delivery: sending form notifications, confirmation emails, and internal reports.
• Lovable AI Gateway: processing Ava conversations to generate responses.
• ElevenLabs: converting Ava’s reply text into spoken audio.
• Calendly: meeting scheduling.
• Google (Google Fonts): delivering the fonts used on the website.

We do not use advertising pixels or marketing trackers on the company website. Service providers are expected to use personal information only for contracted purposes and to apply appropriate confidentiality and security protections.

Cookies and browser storage

Umfress Business Solutions uses a small number of first-party cookies and browser storage entries. We do not run analytics tools, advertising pixels, or marketing trackers on this website, and we do not place analytics identifiers or advertising or marketing tracking cookies. Because there is no optional tracking to gate, this site does not display a cookie consent banner.

Cookies:

• Sign-in cookies that keep portal users authenticated.
• A preference cookie that remembers whether the dashboard sidebar is open or closed.

Browser storage that stays on your device (not sent to us):

• Your acknowledgment of Ava’s AI Use Notice.
• A local visitor record containing the date you first visited, the date you last visited, and a visit count, used to tailor Ava’s greeting.
• Ava voice preferences (mute and speaking speed) and dashboard tour progress for portal users.
• Temporary session storage, cleared when you close the tab, for Ava’s session state, greeting, mute, and introduction settings.

The anonymous Ava chat session identifier is sent to our server with chat and lead requests to apply spam and rate limits.

Third-party content: Google Fonts are requested from Google’s font servers when a page loads. The Calendly scheduling calendar is embedded on our Contact page and loads automatically when that page is opened; other booking buttons open Calendly when clicked. Bookings are made through Calendly, and booking details are not stored in the Umfress website database. A full inventory is available in our Cookie Policy.

You may control cookies and browser storage through your browser settings. Blocking strictly necessary cookies may affect authentication, portal access, or other website features. If Umfress Business Solutions later adds advertising, analytics, or technologies that constitute “selling” or “sharing” under an applicable privacy law, we will add a consent banner with those categories defaulted off and provide any legally required opt-out mechanism.

Security

Umfress Business Solutions uses administrative, technical, and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, or destruction.

These measures may include authentication, access controls, transport encryption, activity logging, rate limiting, backups, and role-based permissions where appropriate.

No website, network, transmission, or storage system is completely secure. Accordingly, Umfress Business Solutions cannot guarantee absolute security.

Retention

• IP address records used for spam and rate limiting are retained for 24 hours.
• Start a Project / contact form messages are delivered to us by email and are not stored in the website database.

Other personal information, including launch-list entries, email delivery records, AI activity records, lead details, and portal account information, is retained for as long as reasonably necessary to provide our services, maintain business records, comply with legal obligations, resolve disputes, protect security, and enforce agreements, or until you ask us to delete it where applicable.

Information may be deleted, aggregated, or de-identified when it is no longer reasonably required.

Children’s privacy

The Umfress Business Solutions company website is not directed to children under 13, and children under 13 should not submit personal information through the company website, its forms, or Ava.

Certain Umfress products may be designed for students or families, and each product sets its own age requirements in its product-specific policies. Before such a product collects personal information from children, Umfress Business Solutions will provide a separate product-specific privacy notice and implement age screening, parental notice, verifiable parental consent, parental access and deletion controls, data minimization, retention limits, and other protections when required by applicable law.

A parent or guardian who believes a child has submitted personal information through the company website may contact us to request review and deletion.

Privacy choices and rights

Depending on your location and applicable law, you may have the right to request:

• Access to certain personal information.
• Correction of inaccurate information.
• Deletion of certain information.
• A portable copy of certain information.
• Information about categories of data collected, used, or disclosed.
• Restriction of or objection to certain processing.
• Withdrawal of consent where processing is based on consent.
• Opt-out of legally defined sale, sharing, or targeted advertising if Umfress Business Solutions engages in such activity.

Umfress Business Solutions may need to verify your identity before completing a request. Some requests may be limited or denied when permitted by law, including when information must be retained for security, legal, contractual, or recordkeeping purposes.

Umfress Business Solutions will not unlawfully discriminate against an individual for exercising an applicable privacy right.

Third-party services

Our website may link to or embed third-party services, such as Calendly scheduling and social platforms, that Umfress Business Solutions does not control. Their privacy practices are governed by their own notices, and users should review those notices before providing information.

Changes to this policy

Umfress Business Solutions may update this Privacy Policy periodically to reflect changes in our products, services, technology, legal obligations, or information practices.

The “Last updated” date identifies the most recent revision. We may provide additional notice when a material change is required by law or appropriate under the circumstances.

Contact us

Questions, privacy requests, and concerns may be directed to: