Privacy Policy

Effective date: November 11, 2026 · Last updated: November 11, 2026

This Privacy Policy explains how Athena Information Technology Services LLC ("AthenaIT," "we," "us") collects, uses, discloses, and protects personal information when you visit athenait.ai (the "Site"), use our contact or IT health check forms, or email us. A short summary of what our forms collect is in the Notice at collection at the end of this page.

Who we are

AthenaIT is the brand name of Athena Information Technology Services LLC, a California limited liability company based in San Francisco that provides managed IT services to businesses.

• Email: team@athenait.ai
• Mailing address: Athena Information Technology Services LLC, 2261 Market St, STE 85291, San Francisco, CA 94114

Information we collect

Information you give us. When you submit our contact form or our IT health check request form, we collect:

• Contact details: your name and work email address.
• Professional information: your company name and, if you choose to give them, your role and your location.
• Your inquiry: what you need help with, and which form you used.
• Your consent record: that you agreed to the required consent statement, the exact consent text and its version, the version of this policy in effect, the page you submitted from, the date and time, your IP address, and whether you checked the optional marketing email box (with the text shown and the time you opted in).

Our forms do not ask for your phone number. If you take part in an IT health check, we also collect what you choose to share with us in conversation or in documents you send. We do not access, scan, or test your systems as part of the health check; we access a system only if you sign a separate written authorization that names the systems and scope, and we handle that information as set out in that authorization and in How long we keep information below.

If you email us, we collect what you choose to share. Please do not send passwords, admin access, sensitive system details, or regulated personal data (for example, health or financial account information) through the Site or by email.

Information collected automatically.

• Internet and device information: your IP address, browser and device details (such as user agent and TLS fingerprint), the page you are on, and the referring page. Cloudflare processes this to deliver and secure the Site and, when you use a form, Cloudflare Turnstile uses it to block bots (see Cookies, security, and analytics below).
• Abuse prevention: to limit repeated form submissions, our form service keeps a coded (hashed) version of your IP address and the time of the submission, used only to limit repeated submissions and deleted automatically, normally within a day.
• Analytics, only if you allow it: page views and page-load speed from Cloudflare Web Analytics.
• Cookies and browser storage: one strictly necessary Cloudflare security cookie (__cf_bm) and, after you make a choice in our cookie banner, a record of that choice in your browser's local storage (athenait_consent_v1), which is never sent to our servers. See our Cookie Policy.

How our form service uses your IP address. When you submit a form, our form service uses your IP address in only three ways:

• Bot check: it sends your IP address to Cloudflare Turnstile to confirm that a person submitted the form.
• Limiting repeated submissions: it keeps a coded (hashed) version of your IP address for about 10 minutes, and these records are deleted automatically, normally within a day.
• Consent record: it stores your IP address with your inquiry as part of your consent record. It stays in our Cloudflare queue until it is transferred to our internal system with the rest of your inquiry, and then it is kept for the consent-record periods in How long we keep information below.

We use the IP address in a consent record only as proof of consent and for security, not to locate or profile you. Our form service does not keep request logs, and it does not write IP addresses to its logs.

We do not knowingly collect sensitive personal information, and we do not use personal information to infer characteristics about you.

How we use information

• To respond to your inquiry, schedule a conversation, and follow up about our services.
• To prepare and deliver an IT health check you request.
• If you opted in, to send occasional emails about IT tips and our services. You can unsubscribe at any time.
• To keep the Site and our forms secure, prevent spam and abuse, and fix problems.
• To understand, in aggregate, how the Site is used and how fast it loads.
• To keep records of consent and to meet legal obligations.

We do not use automated decision-making to make significant decisions about you.

Cookies, security, and analytics

We use Cloudflare, Inc. to host the Site and keep it secure.

Security cookie. Cloudflare sets one strictly necessary cookie, __cf_bm, to help tell people from bots and to guard the Site against automated attacks. It expires after 30 minutes of inactivity. Its contents are encrypted and readable only by Cloudflare, and Cloudflare says it is not used to track you across sites or sessions.

Your cookie choice. After you click Accept analytics or Reject, or save a choice in Cookie settings, we store your choice, the policy version, and the date in your browser's local storage (athenait_consent_v1) for 365 days or until we change our policy, and then we ask again. It stays in your browser and is never sent to our servers. Details are in our Cookie Policy.

Cloudflare Turnstile. When you start using one of our forms, we load Cloudflare Turnstile to check that a person, not an automated program, is submitting it. Turnstile does not set cookies on our Site. It processes technical information from your browser and connection, such as your IP address, browser and device details (user agent and TLS fingerprint), and the website you are on, only to detect and block bots. When you submit a form, our form service also sends your IP address to Cloudflare to confirm the check. Cloudflare processes this information for us as our service provider and also uses it to improve its bot detection. Turnstile does not receive what you type into our form. See Cloudflare's Turnstile Privacy Addendum.

Cloudflare Web Analytics, only with your permission. We use Cloudflare Web Analytics to count page views and measure how fast pages load. According to Cloudflare, it does not use cookies and does not track individual visitors. We load it only after you choose Accept analytics. We don't load it if you choose Reject, or if your browser sends a Global Privacy Control or Do Not Track signal. You can change your choice at any time with Cookie settings in the Site footer, and changes take effect right away.

We do not use advertising pixels, cross-site tracking, or session-recording tools, and we do not allow other companies to collect personal information about your online activities over time and across different websites when you use our Site.

How we share information

We do not sell or share your personal information. We do not disclose it to any other company, including any affiliate, for that company's own purposes, and we do not use it for cross-context behavioral advertising.

We disclose personal information only to the service providers listed below, which act on our behalf to help us run our business, under contracts that limit their use of it:

• Cloudflare, Inc. (Workers and D1 database): receives form submissions and holds them in a short-term queue. Information: contact details, professional information, inquiry details, and consent record.
• Google LLC (Google Cloud): hosts our internal business system, where we store inquiries for review and follow-up. Information: contact details, professional information, inquiry details, and consent record.
• Google LLC (Google Workspace): hosts our email, including team@athenait.ai, so we can communicate with you. Information: contact details and inquiry details.
• Cloudflare, Inc. (hosting, security, Turnstile, and, if you allow it, Web Analytics): delivers and secures the Site and measures performance. Information: internet and device information.
• Professional advisers (such as lawyers and accountants): legal and accounting services. Information: any category, as needed.

Inside AthenaIT, access to inquiries is limited to authorized personnel, including team members in India (see Where information is processed below), through a protected internal console, and to automated internal systems that move the data between our service providers.

Apart from these service providers, we disclose personal information only if required by law or to protect rights and safety. If AthenaIT is involved in a merger, acquisition, financing, reorganization, or sale of all or part of its business or assets, personal information may be transferred as part of that transaction, consistent with applicable law and this policy.

How long we keep information

These are the periods AthenaIT has chosen based on common practice. They are not periods required by law, except where we say so.

• Form submissions in our Cloudflare queue, including the consent-record IP address: deleted from the queue as soon as they are transferred, with the rest of the inquiry, to our internal system. Anything still in the queue is deleted automatically by a daily cleanup once it is more than 30 days old.
• A coded (hashed) version of your IP address, used only to limit repeated submissions: deleted automatically, normally within a day.
• Inquiries that do not become clients, including the consent record for that inquiry (consent text shown, date and time, page, and IP address): 24 months after our last contact with you, then deleted.
• Information you share for an IT health check, and any system information you separately authorize us to access: deleted within 90 days after we deliver our findings, unless you become a client or ask us to delete it sooner.
• Marketing email opt-in and opt-out records (consent text shown, date and time, page, and IP address): at least 4 years after we last use them.
• Information about clients: for the term of the client agreement and as required by law or contract.
• Your cookie choice (athenait_consent_v1, in your browser only): 365 days, or until we change our policy.
• __cf_bm security cookie: expires after 30 minutes of inactivity.
• Security logs held by Cloudflare: according to Cloudflare's retention practices.

We keep opt-out records so we can keep honoring your request. If you opted in to marketing email, that opt-in record may be kept longer than the rest of your inquiry, for the period above. If you become a client, your inquiry and consent records are kept as information about clients. We keep personal information only as long as reasonably necessary for the purposes in this policy.

Your choices and privacy requests

Email. We send marketing emails only if you checked the optional box on our form. Every marketing email includes an unsubscribe link, and you can also unsubscribe by emailing team@athenait.ai. We honor requests within 10 business days. We keep your email address on a do-not-email list so we don't email you marketing again. Unsubscribing does not stop replies to your inquiries or messages about services you receive from us.

Cookie settings. Use Cookie settings in the Site footer to accept or reject analytics at any time.

Do Not Track and Global Privacy Control. We do not track visitors over time and across third-party websites, and we do not sell or share personal information. If your browser sends a Do Not Track or Global Privacy Control signal, we treat it as a choice to reject analytics: we don't show the cookie banner, don't load our analytics tool, and don't store a cookie choice. You do not need to do anything else.

Access, correction, and deletion. Whether or not a privacy law requires it, we voluntarily let anyone ask us to:

• Access the personal information we hold about them.
• Correct inaccurate personal information.
• Delete their personal information, unless we need to keep it (for example, an opt-out record, or information we must keep by law or contract).

We won't treat you differently for making a request.

How to make a request. Email team@athenait.ai. We will respond within 45 days. To protect you, we will verify your request by matching information you give us (such as your name and email address) to what we hold, and we may ask you to confirm from the email address you used. An authorized agent may submit a request for you with your signed permission; we may ask you to verify your identity directly.

Security

We use reasonable administrative, technical, and physical safeguards, including encryption in transit, access controls, and limited access to inquiry data. These safeguards apply wherever our personnel handle personal information, including in India. No method of transmission or storage is completely secure.

Children

The Site is for businesses and is not directed to children under 16. We do not knowingly collect their personal information.

Where information is processed

We are based in the United States, and our service providers store personal information for us in the United States. Some AthenaIT team members are located in India. Personal information you give us may be accessed or processed in India by our personnel to respond to inquiries and support our services. Privacy laws in India may differ from those where you live. We limit access to people who need it, and we protect the information as described in this policy wherever it is handled.

Changes to this policy

We may change this policy from time to time. We will post any changes on this page with a new "Last updated" date.

Contact us

Questions about this policy or our privacy practices:

• Email: team@athenait.ai
• Mailing address: Athena Information Technology Services LLC, 2261 Market St, STE 85291, San Francisco, CA 94114