Privacy policy

1. What this policy covers

This policy describes what happens to information when you visit authecitysystems.com. It is written by Authecity Systems LLC, a Minnesota limited liability company, which is the party responsible for the site.

It does not cover purchases. We sell consumer goods through Amazon under the storefront name QuickShopa, and anything you do on Amazon is governed by Amazon’s own privacy notice rather than this one. We never see your card details, and any address information we receive for an order comes from Amazon for the sole purpose of getting the parcel to you.

2. Information you give us

The only place this site asks you for anything is the contact form. It collects your first and last name, your email address, and optionally your organisation, the subject you pick, and your message.

When you submit it, that information is emailed to us through Amazon Simple Email Service. Our server adds the IP address the request came from and a timestamp to the message, which is how we tell a genuine enquiry from automated spam. The server also holds a short-lived count of recent submissions per IP address in memory for rate limiting; that count is discarded within the hour and is never written to disk.

We use what you send us to reply to you and to keep a record of the conversation. We do not sell it, and we do not add you to a marketing list.

3. Information collected automatically

Analytics

We run our own copy of Umami on a server we control at analytics.authecitysystems.com. It records which pages are viewed, the referring site, and coarse details such as browser, operating system, country and screen size. It sets no cookies, does not follow you between websites, and does not store your IP address. None of it is shared with an advertising network, because there is no advertising network involved.

Server logs

Our web server keeps standard access logs — IP address, time, the page requested, and the browser’s user-agent string. These exist for security and fault diagnosis and are not used to build a profile of you.

4. Cookies

This site sets no cookies of its own, and there is no consent banner because there is nothing to consent to.

5. Third-party resources the pages load

Some styling and typography is loaded from other companies’ servers. When your browser fetches those files it necessarily reveals your IP address and user-agent to them, and each has its own privacy policy that we do not control:

• Google Fonts (fonts.googleapis.com, fonts.gstatic.com) — supplies the typefaces.
• Tailwind CSS CDN (cdn.tailwindcss.com) — supplies the stylesheet framework.

We send neither of them any information about you beyond what the request itself carries, and neither is used to identify you to us.

6. Who processes data on our behalf

The site and its contact-form backend run on Amazon Web Services infrastructure in the United States, and contact-form messages are delivered through Amazon Simple Email Service. AWS acts as our processor for these purposes.

7. How long we keep things

• Contact-form emails stay in our mailbox for as long as the enquiry may reasonably matter, and are deleted on request.
• Rate-limiting counts are discarded within the hour.
• Server access logs rotate on the server’s ordinary schedule.
• Analytics records are aggregate and hold nothing that identifies you.

8. Your choices and rights

Write to us and we will act on it: you can ask what we hold about you, ask us to correct it, or ask us to delete it. In practice, for almost everyone, the answer is that we hold whatever you typed into the contact form and nothing else.

Depending on where you live you may have formal rights under laws such as the EU and UK GDPR or the California Consumer Privacy Act. We will honour a request under any of them. You do not need to cite a statute to make one, and we will not charge you or treat you differently for asking.

9. Children

This is a business-to-business site. It is not directed at children and we do not knowingly collect information from anyone under 13. If you believe a child has sent us something, tell us and we will delete it.

10. Security

The site is served over HTTPS, the contact backend accepts only a limited, size-capped payload, and access to our mailbox is protected. No system is perfect and we will not claim otherwise.

11. Changes to this policy

If we change how any of this works we will update this page and move the date at the top. There is no mailing list to notify you through, so that date is the honest signal to watch.