Privacy Policy

    Effective Date: April 1, 2025

    1. Introduction

    United States Digital Space LLC ("Company", "we", "us", or "our") is committed to protecting the privacy of our clients, website visitors, job applicants, and academy participants. This Privacy Policy explains how we collect, use, store, and protect your personal information when you interact with our website at unitedstatesdigital.space or engage our services.

    United States Digital Space LLC is a private company. We are not a government agency and are not affiliated with any federal, state, or local government entity.

    2. Information We Collect

    2.1 Information You Provide Directly

    We collect information that you voluntarily submit through our website forms, email, phone, or WhatsApp communications, including:

    • Contact & Service Inquiries: Name, email address, phone number, organization name, project requirements, and any details you include in your message.
    • Service Engagement: Business information, technical specifications, project documentation, credentials for authorized systems (for cybersecurity and development services), and billing information.
    • Career Applications: Name, email, phone number, LinkedIn profile URL, role of interest, professional qualifications, and cover notes.
    • Academy Registration: Name, email, organization, and course interest preferences.

    2.2 Information Collected Automatically

    When you visit our website, we may automatically collect:

    • IP address and approximate geographic location
    • Browser type, version, and operating system
    • Device type and screen resolution
    • Pages visited, time spent, and navigation paths
    • Referring website or source
    • Cloudflare Turnstile security verification tokens (for bot protection)

    2.3 Information from Third Parties

    We may receive information from:

    • LinkedIn: Publicly available professional information when you connect with us or apply through LinkedIn.
    • Analytics Providers: Aggregated website usage data.
    • Client-Provided Data: Data provided by clients for the purpose of delivering contracted services (e.g., training data for AI/ML models, system access for security testing).

    3. How We Use Your Information

    We use the information we collect for the following purposes:

    3.1 Service Delivery

    • Responding to inquiries and providing consultations
    • Preparing proposals, contracts, and invoices
    • Delivering contracted services including web/mobile development, AI/ML solutions, cybersecurity testing, cloud infrastructure setup, data analytics, and documentation
    • Communicating project updates, deliverables, and milestones

    3.2 AI & Machine Learning Services

    • Processing client-provided training data for model development and fine-tuning
    • Building and deploying AI chatbots, LLM integrations, RAG systems, and predictive models
    • Evaluating model performance and accuracy metrics

    We do not use client data to train models for other clients. Client training data is isolated and processed exclusively for the authorized engagement.

    3.3 Cybersecurity Services

    • Conducting authorized penetration testing and vulnerability assessments
    • Performing security audits and compliance reviews
    • Generating security reports and remediation recommendations

    All security testing data, findings, and reports are treated as strictly confidential and are shared only with the authorized client contact.

    3.4 Employment & Academy

    • Reviewing and processing career applications
    • Managing academy course registrations and communications

    3.5 Operations & Improvement

    • Improving our website, services, and user experience
    • Preventing fraud, spam, and unauthorized access
    • Complying with legal obligations and regulatory requirements
    • Sending relevant service updates (with your consent)

    4. Information Sharing & Disclosure

    We do not sell, rent, or trade your personal information to third parties.

    We may share information in the following limited circumstances:

    • Service Providers: Trusted vendors who assist in delivering our services, including cloud hosting providers (Firebase, AWS, Supabase), email services, and analytics tools — all bound by confidentiality agreements.
    • Third-Party AI Platforms: When our AI/ML services utilize third-party APIs (e.g., OpenAI, Anthropic, Google), data may be processed by these providers in accordance with their respective privacy policies. We will disclose such usage in the applicable Service Agreement.
    • Legal Compliance: When required by law, court order, or valid legal process.
    • Business Transfers: In connection with a merger, acquisition, or sale of company assets, with appropriate confidentiality protections.
    • With Your Consent: When you explicitly authorize sharing for a specific purpose.
    • Protection of Rights: To protect our rights, property, safety, or the rights and safety of others.

    5. Data Security

    We implement industry-standard technical and organizational security measures to protect your information, including:

    • Encrypted data transmission (HTTPS/TLS 1.2+) across all endpoints
    • Encrypted data storage at rest
    • Role-based access controls and multi-factor authentication
    • Regular security assessments, penetration testing, and code reviews
    • Secure development lifecycle (SDLC) practices
    • Employee confidentiality agreements and security awareness training
    • Incident response procedures with defined breach notification timelines
    • Cloudflare Turnstile bot protection on all public forms

    While we employ rigorous security practices, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to promptly addressing any security incidents.

    6. Data Retention

    We retain personal information based on the following guidelines:

    • Contact Inquiries: Retained for up to 24 months after the last interaction, then securely deleted or anonymized.
    • Client Project Data: Retained for the duration of the engagement plus 12 months, unless a longer retention period is specified in the Service Agreement or required by law.
    • AI/ML Training Data: Retained only for the duration of the active engagement. Upon project completion or termination, client training data is securely deleted within 30 days unless otherwise agreed.
    • Security Testing Data: Vulnerability reports and testing data are retained for 12 months after delivery, then securely destroyed.
    • Career Applications: Retained for up to 12 months to consider applicants for future opportunities, unless you request earlier deletion.
    • Academy Registrations: Retained for the duration of your enrollment plus 12 months.
    • Financial Records: Retained as required by applicable tax and accounting regulations.

    7. Cookies & Tracking Technologies

    Our website may use the following technologies:

    • Essential Cookies: Required for website functionality, security verification (Cloudflare Turnstile), and session management.
    • Analytics: Aggregated, anonymized usage data to understand how visitors interact with our website and improve our services.
    • Local Storage: Used to maintain user preferences and session state.

    We do not use advertising cookies or third-party tracking pixels. You can control cookie preferences through your browser settings. Disabling essential cookies may affect website functionality.

    8. Your Rights

    Depending on your jurisdiction, you may have the following rights regarding your personal information:

    • Access: Request a copy of the personal information we hold about you.
    • Correction: Request correction of inaccurate or incomplete information.
    • Deletion: Request deletion of your personal information, subject to legal retention obligations.
    • Restriction: Request restriction of processing in certain circumstances.
    • Data Portability: Request your data in a structured, machine-readable format.
    • Opt-Out: Unsubscribe from non-essential communications at any time.
    • Withdraw Consent: Where processing is based on consent, withdraw at any time without affecting prior processing.

    To exercise any of these rights, contact us at info@unitedstatesdigital.space. We will respond to all valid requests within 30 days.

    9. California Privacy Rights (CCPA)

    If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to:

    • Know what personal information is collected, used, and shared
    • Request deletion of your personal information
    • Opt out of the sale of personal information (we do not sell personal information)
    • Non-discrimination for exercising your privacy rights

    To submit a CCPA request, contact us at info@unitedstatesdigital.space.

    10. Third-Party Links & Services

    Our website and services may contain links to third-party websites, platforms, and tools including but not limited to LinkedIn, WhatsApp, GitHub, cloud service providers, and AI platforms. We are not responsible for the privacy practices, content, or security of these external services. We encourage you to review their respective privacy policies before sharing personal information.

    11. Children's Privacy

    Our website and services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have collected information from a child under 18, we will take steps to delete such information promptly.

    12. International Data Transfers

    Our primary operations are based in the United States. If you access our website or services from outside the US, your information may be transferred to, stored, and processed in the United States. By using our services, you consent to the transfer of your information to the United States, where data protection laws may differ from those in your jurisdiction.

    Where our AI and cloud services utilize infrastructure in multiple regions, data may be processed in data centers located outside the United States. We ensure that appropriate safeguards are in place for all cross-border data transfers.

    13. Changes to This Policy

    We may update this Privacy Policy periodically to reflect changes in our services, practices, or legal requirements. Material changes will be indicated by updating the "Effective Date" at the top of this page. We encourage you to review this policy regularly. Continued use of our website or services after any modifications constitutes your acceptance of the updated policy.

    14. Contact Us

    For questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact:

    United States Digital Space LLC

    Email: info@unitedstatesdigital.space

    Phone: +1 (681) 310-3197

    WhatsApp: +1 (681) 310-3197

    LinkedIn: United States Digital Space