Privacy Policy

EKA Technology, LLC — How we collect, use, and protect your information

Effective Date: January 1, 2026  |  Last Revised: April 1, 2026
Effective Date: January 1, 2026    Last Revised: April 1, 2026

1. Overview

EKA Technology, LLC ("EKATech," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you visit our website at ekatechnology.com, use our AI products and services (including InsightFlow AI), engage with us for consulting services, or opt in to receive SMS text message communications from us.

Please read this policy carefully. By using our website or services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with its terms, please discontinue use of our site and services.

This policy applies to all personal information we process, regardless of the medium (website, phone, email, SMS, or in-person) through which it is provided.

2. Data Controller Information

The entity responsible for your personal information under this Privacy Policy is:

For privacy-related inquiries, please contact us at the email address above with the subject line "Privacy Inquiry."

3. Information We Collect

We collect information you provide directly to us, information collected automatically when you use our services, and information derived from your use of our AI-powered products.

Information You Provide Directly

  • Contact Information: Name, email address, phone number, and mailing address when you contact us, request a consultation, or complete a form on our site.
  • Business Information: Company name, job title, industry, and organizational role when provided in connection with consulting engagements.
  • SMS Opt-In Data: Mobile phone number, consent timestamp, consent language version, IP address, browser/device information, and alert type preferences when you subscribe to our SMS tech alert program.
  • Communications Content: The content of messages, emails, or other communications you send to us.
  • Consulting Engagement Data: Business challenges, system architecture details, project requirements, and other information shared during consulting engagements. This information is governed by any applicable Non-Disclosure Agreement (NDA) in addition to this Privacy Policy.

Information Collected Automatically

  • Log Data: IP address, browser type and version, pages visited, referring URL, date and time of visit, and time spent on pages.
  • Device Information: Operating system, device type, screen resolution, and unique device identifiers.
  • Analytics Data: Aggregated behavioral data collected via Google Analytics, including page views, session duration, traffic source, and geographic region (at the country/region level).
  • Cookies and Similar Technologies: See Section 9 for details.

Information from AI Product Usage

  • Interaction Data: Queries, responses, and conversation logs generated during use of InsightFlow AI or other EKATech AI-powered products.
  • Confidence and Feedback Signals: System-generated confidence scores and explicit user feedback collected to improve AI model performance.

4. How We Use Your Information

We use the information we collect for the following purposes:

  • Service Delivery: To provide, operate, and improve our website, consulting services, and AI products.
  • Communications: To respond to inquiries, send service-related notices, and communicate about your engagement or account.
  • SMS Alerts: To send you tech alerts, service notifications, and maintenance updates via text message, where you have expressly consented to receive such communications.
  • Analytics and Improvement: To understand how visitors use our site, identify areas for improvement, and monitor the performance of our services.
  • Security: To detect, investigate, and prevent fraudulent activity, security breaches, and abuse.
  • Legal Compliance: To comply with applicable laws, regulations, legal process, and regulatory requests, including maintaining SMS consent records as required by the Telephone Consumer Protection Act (TCPA).
  • Business Operations: To manage our business relationship with clients, including billing, project management, and contractual obligations.
  • AI Model Improvement: Aggregated and anonymized interaction data may be used to improve the accuracy and performance of our AI systems. We will not use identifiable personal information to train external AI models without your explicit consent.

We do not sell your personal information, and we do not use your personal information for behavioral advertising by third parties.

6. Sharing and Disclosure of Information

EKATech does not sell, rent, or lease your personal information to third parties for their marketing purposes. We may share your information in the following limited circumstances:

  • Service Providers: We work with trusted third-party vendors who process information on our behalf, including SMS messaging delivery platforms, cloud infrastructure providers, and analytics services. These vendors are contractually obligated to use your information solely to provide services to us and to maintain appropriate security practices.
  • Business Transfers: In the event of a merger, acquisition, or sale of substantially all of our assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.
  • Legal Requirements: We may disclose your information if required to do so by law or in response to valid legal process (e.g., a court order or subpoena), or to protect the rights, property, or safety of EKATech, our clients, or the public.
  • With Your Consent: We may share your information for any other purpose with your explicit prior consent.

We require all third-party service providers to implement appropriate technical and organizational measures to protect your personal information.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting requirements.

  • Contact and Inquiry Records: Retained for three (3) years from last contact, or longer if required by an active client relationship.
  • SMS Consent Records: Retained for a minimum of five (5) years from the date of last opt-out or last message received, in accordance with TCPA requirements (47 C.F.R. §64.1200).
  • Consulting Engagement Records: Retained for seven (7) years following the conclusion of the engagement for legal and business purposes, unless a longer period is required by applicable law.
  • Analytics Data: Google Analytics data is retained in accordance with Google's data retention policies. Aggregated analytics are retained indefinitely.
  • AI Interaction Logs: Retained for up to ninety (90) days for quality assurance, then anonymized or deleted unless required longer for legal or operational reasons.

When your information is no longer needed, we will securely delete or anonymize it. Where deletion is not possible (e.g., data in backup archives), we will isolate and protect it from further processing until deletion becomes possible.

8. SMS / Text Message Communications

Program Name: EKATech Tech Alerts

Purpose: Service incident alerts, scheduled maintenance notifications, product updates, and security advisories for EKATech services.

Opt-Out: Reply STOP to any message at any time to unsubscribe immediately.

Help: Reply HELP or contact info@ekatechnology.com.

Rates: Message and data rates may apply. Message frequency varies (typically 2–8 messages/month).

Consent and Collection

We only send SMS text messages to individuals who have expressly opted in via our web-based consent form. Consent is collected through an affirmative, unchecked checkbox that requires deliberate action. We record and retain the following data elements as proof of consent, as required by applicable law:

  • Date and time of opt-in (UTC timestamp)
  • IP address and user agent at the time of submission
  • Phone number (stored as a one-way cryptographic hash for lookup without plaintext exposure)
  • Verbatim consent language displayed at the time of opt-in, along with a version identifier
  • Source URL of the opt-in form
  • Double opt-in confirmation timestamp (reply YES to confirmation text)

Use of Phone Number

Your mobile phone number is used exclusively to send the tech alerts and notifications you subscribed to. We do not use your phone number for marketing unrelated to the services you have subscribed to, and we do not sell, rent, or share your phone number with third-party marketers.

Opt-Out and STOP Processing

You may unsubscribe from SMS messages at any time by:

  • Replying STOP to any text message from EKATech
  • Contacting us at info@ekatechnology.com with your phone number and request to be removed

Upon receipt of a STOP request, we will immediately suppress your number from all future text message communications. A single confirmation message will be sent acknowledging your opt-out. We retain a record of the opt-out for compliance purposes.

Carrier Limitations

EKATech is not responsible for any delays or failures in the delivery of SMS messages. Message delivery is subject to carrier availability and network conditions. Our SMS program is currently available to subscribers with U.S.-based mobile phone numbers on major U.S. wireless carriers, including AT&T, Verizon, T-Mobile, and others.

Compliance

Our SMS messaging program complies with the Telephone Consumer Protection Act (TCPA), the CTIA Messaging Principles and Best Practices (2023 edition), the FCC's one-to-one consent rule (effective January 2025), and all applicable state laws governing electronic communications. Our 10-digit long code (10DLC) messaging number is registered with The Campaign Registry (TCR).

9. Analytics and Cookies

Google Analytics

We use Google Analytics 4 (GA4) to understand how visitors interact with our website. Google Analytics collects information such as page views, session duration, traffic sources, device type, and general geographic location (country/region level). This data is processed by Google in accordance with Google's Privacy Policy.

Google Analytics data is collected via the Google Tag Manager snippet embedded in our pages. We have configured Google Analytics with data retention set per Google's default policies. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

Cookies

Our website uses the following categories of cookies:

  • Strictly Necessary: Session management and security tokens required for the functioning of our SMS portal (when you are logged in). These cannot be disabled.
  • Analytics: Google Analytics cookies (_ga, _ga_*, _gid) that help us understand site usage. These are first-party cookies set by the Google Analytics script.

We do not use advertising or tracking cookies. Most browsers allow you to control or block cookies through your browser settings. Blocking analytics cookies will not impair your ability to use our public website.

Local Storage

Our SMS portal uses your browser's localStorage to maintain your authenticated session (storing a JSON Web Token). This data is stored client-side and is cleared when you log out or when the token expires (after 8 hours).

10. AI Services and Data Processing

EKATech develops and operates AI-powered products, including InsightFlow AI. The following data practices apply specifically to our AI services:

  • Input Data: Queries, prompts, and information you provide to AI systems are processed to generate responses. This data may be temporarily retained to facilitate multi-turn conversations and ensure quality of service.
  • Model Training: We do not use your identifiable personal data to train or fine-tune AI models without your explicit written consent. Aggregated, anonymized interaction statistics may be used to improve our products.
  • Third-Party AI Services: Our AI products may utilize third-party large language model APIs (such as Anthropic's Claude). Data submitted to these models is subject to those providers' applicable terms and privacy policies. We recommend avoiding submission of sensitive personal information to AI query interfaces.
  • AI Output: AI-generated outputs are provided for informational and productivity purposes. EKATech does not warrant the accuracy of AI-generated content. You should not rely on AI outputs for legal, medical, financial, or other professional advice without independent verification.
  • Enterprise Engagements: For enterprise consulting engagements involving AI implementation, data governance, and AI strategy, additional data processing agreements (DPAs) may be executed to govern the handling of client business data. Contact us for details.

11. Third-Party Services and Links

Our website and services integrate with or contain links to the following categories of third-party services:

  • Google Analytics: Website analytics. Governed by Google's Privacy Policy.
  • Google Fonts: Typography delivery via fonts.googleapis.com. No personal data is stored by EKATech from this integration.
  • Podbean: Podcast hosting and player widget. Subject to Podbean's Privacy Policy.
  • SMS Delivery Platform: A CTIA-compliant messaging service provider that delivers text messages on our behalf. Your phone number may be transmitted to this provider solely for message delivery.
  • Social Media: Links to X (Twitter), LinkedIn, GitHub, Threads, and Bluesky. Visiting these links takes you to third-party sites governed by their own privacy policies.

EKATech is not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party services you visit through our website.

12. Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Specific measures include:

  • Encryption of data in transit using TLS/HTTPS
  • Bcrypt hashing for user credentials
  • One-way cryptographic hashing of mobile phone numbers in consent records
  • HMAC-SHA256 integrity verification for consent records
  • JSON Web Tokens (JWT) with short expiration windows for session management
  • Role-based access controls limiting access to consent records to authorized personnel
  • Restricted access to production data systems

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security and encourage you to take steps to protect your own information, including using strong passwords and keeping your contact information current.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law.

13. Your Privacy Rights

Depending on your location, you may have the following rights with respect to your personal information:

  • Right to Know / Access: You may request a copy of the personal information we hold about you.
  • Right to Correction: You may request that we correct inaccurate personal information.
  • Right to Deletion: You may request deletion of your personal information, subject to our legal obligations (e.g., TCPA retention requirements may prevent deletion of SMS consent records during the mandatory retention period).
  • Right to Opt Out of Sale: We do not sell personal information. This right is therefore applicable but already fulfilled by our practices.
  • Right to Data Portability: Where technically feasible, you may request your data in a portable, machine-readable format.
  • Right to Withdraw Consent: Where processing is based on consent (including SMS messaging), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, please contact us at info@ekatechnology.com with subject line "Privacy Rights Request." We will respond within 30 days. We may need to verify your identity before fulfilling your request.

14. California Residents — CCPA / CPRA Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) provides you with specific rights regarding your personal information:

  • Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, and the purposes for which it was used.
  • Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.
  • Right to Correct: You have the right to request correction of inaccurate personal information.
  • Right to Opt Out of Sale or Sharing: We do not sell or share your personal information for cross-context behavioral advertising.
  • Right to Limit Use of Sensitive Personal Information: We limit our use of sensitive personal information to purposes necessary to provide our services.

To exercise your CCPA/CPRA rights, please contact us at info@ekatechnology.com with subject "California Privacy Request." We will not charge a fee for processing a verifiable consumer request, and we will respond within 45 days (with an extension of an additional 45 days where reasonably necessary).

Do Not Sell or Share My Personal Information: EKATech does not sell or share personal information as those terms are defined under the CCPA/CPRA. No opt-out is necessary, but you may contact us to confirm this practice.

15. Children's Privacy

Our website and services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately at info@ekatechnology.com and we will take prompt steps to delete such information.

Our SMS messaging program is only available to individuals who are 18 years of age or older, or who have reached the age of majority in their jurisdiction.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

  • Update the "Last Revised" date at the top of this page
  • Post the revised policy on this page
  • For material changes affecting users who have opted in to SMS communications or who have active client relationships, we will provide notice via email

We encourage you to review this Privacy Policy periodically. Your continued use of our website or services after any changes constitutes your acceptance of the updated policy.

17. Contact Us

For questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us at:

We are committed to working with you to obtain a fair resolution to any privacy concern. If you are not satisfied with our response, you may have the right to file a complaint with the relevant data protection authority in your jurisdiction.

This Privacy Policy was prepared for informational purposes. EKA Technology, LLC recommends that organizations consult qualified legal counsel to ensure privacy policies meet all applicable legal requirements for their specific circumstances and jurisdictions.