Privacy Policy

Last updated: September 14, 2026

This policy explains what personal information www.pharosgraph.com collects, why we collect it, who receives it, and what choices you have. The rules for using the site are on a separate page, the terms of use. If anything is unclear, email info@pharosgraph.com.

The site is operated by PharosGraph Inc. ("PharosGraph", "we", "us"). This policy covers www.pharosgraph.com only. It takes effect on the date shown above. Our postal address is in the last section. The site is directed to the United States, and we do not offer our services through it to individuals in the European Economic Area or the United Kingdom.

The short version

This is a marketing site. There are no accounts, no logins, no purchases, no comments and no newsletter. The request form at /talk-strategy is the only place on the site that asks for personal information. Beyond that, we run Google Analytics to see which pages people read, and our hosting provider handles your IP address briefly to deliver each page. We do not sell the personal information collected through this site, we do not share it for targeted advertising, and we honor the Global Privacy Control signal.

What we collect and why

The request form

If you fill in the form at /talk-strategy, we collect your first name, last name, business email, organization, role and an optional message. We use this to reply to you, to discuss PharosGraph services with you, and to keep it as a business record. You are not required to give us any of it. If you do not, we cannot reply to you.

Please do not put sensitive personal information in the message. We do not ask for it and do not knowingly collect it.

Your browser sends the form over HTTPS directly to a Google Apps Script endpoint that runs on Google LLC infrastructure. The script adds one row to a Google Sheet inside PharosGraph's Google Workspace, with the time you submitted it, and emails a notification to info@pharosgraph.com, and a weekly email lists that week's submissions by name to the same address. We do not send you an automatic confirmation. The form has a hidden anti-spam field. A submission that fills it is recorded on a separate "Rejected" tab and is not treated as an inquiry. There is no CAPTCHA.

Site analytics

We use Google Analytics 4, a service of Google LLC, to understand how the site is used. It records the pages you view, the site that referred you, your device and browser type, and your approximate region, which Google derives from your IP address. Google does not store your full IP address, and we never receive IP addresses from Analytics. We have turned Google Signals and ad personalization off, so Analytics does not build cross-site or advertising profiles about you. We do not allow any third party to collect information about your online activity over time and across other websites through this site.

Google explains how it handles data from sites that use its services at policies.google.com/technologies/partner-sites.

Hosting

The site is served from Amazon Web Services (CloudFront and S3) in the United States. AWS processes your IP address briefly to deliver each page. We have not enabled access logging, so we keep no server logs of your visits. Fonts are hosted with the site itself; it makes no requests to Google Fonts. There are no third-party embeds, ad networks, social media pixels or tracking scripts other than Google Analytics.

Cookies and Global Privacy Control

Google Analytics sets two first-party cookies that last up to two years. One is named _ga; the other starts with _ga_ and ends with our property id. Google uses them to tell one visitor's pageviews apart from another's. These are the only cookies the site sets. There are no preference, session, advertising or third-party cookies, and the pages you visit store nothing in your browser's local storage.

If your browser sends the Global Privacy Control (GPC) signal, we do not turn Analytics on: it sets no cookies and records nothing about your visit. We treat GPC as an opt-out preference signal under California law, even though we do not sell or share personal information. You can also install the Google Analytics opt-out browser add-on, or block cookies in your browser settings.

The site does not respond to the Do Not Track (DNT) browser setting. It honors GPC.

Who receives your data

Two companies process your data on our behalf. Google LLC runs the Apps Script endpoint and the Google Sheet that receive form submissions, sends the notification email to us, and provides Google Analytics. Amazon Web Services hosts and delivers the site. We disclose each category of personal information described in this policy to these two providers, for the purposes described here. Apart from that, we would disclose personal information only if the law requires it, for example to comply with a valid legal request.

We do not sell or share personal information

We do not sell the personal information collected through this site, and we do not share it for cross-context behavioral advertising, as California law defines those terms. We do not run targeted advertising. We do not make automated decisions about you that have legal or similarly significant effects.

How long we keep your information

Form submissions stay with us for as long as we need them for the relationship with you and for any legal obligation. That includes the notification email copy, the weekly summary email and any entry on the Rejected tab. Then we delete them. You can ask us to delete yours at any time, and we will, unless a legal obligation requires us to keep it.

Analytics cookies expire after at most two years, and you can delete them sooner in your browser. Google Analytics deletes user-level and event-level data after 14 months. We keep no copy of your IP address: AWS processes it briefly to deliver the page, and Google does not store the full address.

Security

Every page is served over HTTPS with standard security headers. Access to the lead sheet is limited to authorized staff. No method of transmission or storage is perfectly secure, so we cannot promise absolute security. We take reasonable steps to protect what you give us.

Your rights

Wherever you live, you can ask what we hold about you, ask us to correct or delete it, and object to how we use it. Email info@pharosgraph.com for any of these requests.

California and other US states

If you live in California, the California Consumer Privacy Act (CCPA) gives you the right to:

• know what personal information we have collected about you and receive a copy
• have it deleted
• have it corrected
• opt out of sale or sharing (we do neither)
• limit the use of sensitive personal information (we collect none)
• not be treated differently for exercising these rights

In CCPA terms, these are the categories we collect and the categories we have collected in the preceding 12 months. Site analytics is the one exception: it began on the date this policy took effect, so its categories have a shorter history than that. Identifiers (name and email) and professional information (organization and role) come from the form, along with whatever you put in the optional message. Internet activity (pages viewed, referring site, device and browser type) and approximate location (region) come from Analytics. Your IP address is an identifier too: our hosting provider and Google process it briefly to serve you and to derive your region, and we never receive it. We collect these categories for the purposes above and keep them for the periods above.

An authorized agent may submit a request for you. To verify a request, we match the email address it comes from against the address on file. When an agent submits a request, we may ask for your signed permission, and we confirm the request with you at the address on file before acting. We respond within 45 days, or sooner where your local law requires it.

Residents of other US states with privacy laws can use the same email to exercise the rights those laws provide. If we refuse a request, you can appeal by replying to our answer. If we still refuse, we will tell you how to reach your state attorney general.

EU and UK visitors

This site is directed to the United States. We do not offer our services through it to people in the EEA or the UK, and we do not use it to monitor what they do, so we do not believe the GDPR or the UK GDPR applies to it. We grant the rights below to EU and UK visitors anyway, as a matter of practice.

Where those laws do apply to something you send us, PharosGraph Inc. is the controller, and we rely on legitimate interests: responding to your inquiry and keeping a record of it, and running and securing the site. Where local law requires consent instead, we rely on consent. The site does not ask for consent before Analytics runs, so if your local law requires it, use the opt-out tools above to stop Analytics.

You have the right to:

• access your personal data and receive a copy in a portable format
• correct it
• delete it
• restrict how we process it
• withdraw consent, where consent is the basis

Right to object. You can object at any time to our processing of your personal data based on legitimate interests, including analytics. Email us and we will stop unless we have compelling legitimate grounds to continue.

Everything described in this policy, including analytics data and anything you send us, is transferred to and processed in the United States, where privacy law may differ from your own. Both providers that process it for us, Google LLC and Amazon Web Services, Inc., are certified under the EU-US Data Privacy Framework and its UK extension, which is the safeguard we rely on for these transfers. Email us if you have questions about them. If you believe we have mishandled your data, you can file a complaint with your national data protection authority, or with the Information Commissioner's Office in the UK.

How to make a request

Email info@pharosgraph.com. Tell us what you want and which email address you used on the form, if any. We will verify the request and act on it. We operate exclusively online and deal directly with everyone who contacts us through the site, so email is the only method we provide for these requests. Analytics data is not tied to your name or email, so we cannot find or delete your individual analytics records. The opt-out tools above are the way to control that collection.

Links to other sites

The site links to LinkedIn, X and Bluesky, to maps.pharosgraph.com (a separate PharosGraph web application with its own practices), and to third-party sites from blog posts. Once you leave www.pharosgraph.com, the privacy practices of the site you land on apply, and this policy does not.

Children

The site is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has submitted the form, email us and we will delete the entry.

Changes to this policy

When we change this policy, we post the new version on this page and update the "Last updated" date at the top. We do not send notices of changes, so check this page from time to time.

How to reach PharosGraph

PharosGraph Inc., 200 Continental Drive, Suite 401, Newark, DE 19713. Email info@pharosgraph.com for privacy questions, requests and complaints.