Privacy Policy

01 Information we collect

We collect information in three ways: information you give us, information we collect automatically, and information we receive from clients and partners in the course of delivering services.

Information you provide

• Contact details such as your name, email address, company, and role when you reach out, request a quote, or join a waitlist.
• The contents of messages you send us, including project details and anything you choose to share.
• Account credentials and profile information if you use Incipient OS.

Information we collect automatically

• Usage data — pages visited, features used, and general interaction patterns within our website and product.
• Device and connection data such as browser type, operating system, approximate location derived from IP address, and referring URLs.
• Cookies and similar technologies, as described in the Cookies section below.

Information from clients and partners

When we deliver services or operate Incipient OS on a client's behalf, we may process data the client provides or makes available to us. In those cases we act as a processor or service provider, and our use is governed by our agreement with that client.

02 How we use it

We use the information we collect to:

• Provide, operate, maintain, and improve our website, products, and services.
• Respond to inquiries, scope engagements, and communicate about projects.
• Authenticate users, secure accounts, and prevent fraud or abuse.
• Understand how our products are used so we can make them better.
• Send service-related and, where permitted, relevant business communications. You can opt out of marketing messages at any time.
• Comply with legal obligations and enforce our agreements.

We do not sell your personal information.

03 Sharing

We share information only as needed to run our business and deliver our services:

• Service providers. Vendors who host infrastructure, process payments, send communications, or provide analytics on our behalf, under contractual confidentiality and security obligations.
• Clients. Where we process data as part of an engagement, information flows back to the client whose project it relates to.
• Legal and safety. When required by law, regulation, legal process, or to protect the rights, property, or safety of Incipient, our clients, or others.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

04 Data security

We maintain technical and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, and alteration. These include access controls, encryption in transit, least-privilege practices, and regular review of our systems. No method of transmission or storage is completely secure, so while we work hard to protect your information, we cannot guarantee absolute security.

05 Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information.
• Object to or restrict certain processing.
• Request a portable copy of information you provided to us.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, email us at hello@incipientcorp.com. We will respond within the timeframe required by applicable law. Where we process data on behalf of a client, we will direct your request to that client.

06 Cookies

We use cookies and similar technologies to keep you signed in, remember preferences, secure our services, and understand how our website and product are used. You can control cookies through your browser settings, including blocking or deleting them. Some features may not function properly if certain cookies are disabled. Where required, we will ask for your consent before setting non-essential cookies.

07 International transfers

Incipient is based in the United States, and the information we collect may be processed in the United States or other countries where we or our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction. Where we transfer personal information across borders, we rely on appropriate safeguards, such as standard contractual clauses, to protect it.

08 Retention

We keep personal information for as long as needed to fulfill the purposes described in this policy — including providing our services, meeting legal and accounting obligations, resolving disputes, and enforcing our agreements. When information is no longer needed, we delete or de-identify it. Data we process on behalf of a client is retained and deleted according to our agreement with that client.