Privacy Policy

This Policy explains what personal information BayconAI collects, how we use it, when we share it, and the choices you have. It is written to comply with the California Consumer Privacy Act (as amended by the CPRA) and is informed by the principles of the EU/UK GDPR.

Revised October 6, 2026. The provider is identified as Mauricio Nunes Marques, an individual providing services under the BayconAI brand, and contact details are consolidated to ai@bayconai.com; a postal address and a toll-free phone number are no longer published, and privacy requests are made by email. Previous version: May 14, 2026.

1. Scope

This Policy applies to personal information we collect through bayconai.com, the tools and content we make available on it, communications with you (including email, calendar, and form submissions), and consulting engagements where we act as a "business" or "controller" with respect to your information.

If we process personal information on behalf of a client under a Statement of Work, we act as a "service provider" or "processor," and that client's privacy notice (not this one) governs that processing. The terms of the Data Processing Addendum control the relationship.

2. Who we are

The controller of your personal information is Mauricio Nunes Marques, an individual providing services under the BayconAI brand. For privacy questions and requests, contact ai@bayconai.com.

3. Categories of personal information we collect

We collect the categories of information listed below. Some are provided by you; others are collected automatically or from third parties. We collect each category from one or more of these sources: directly from you (forms, email, calls), automatically from your device (cookies, server logs), service providers (analytics, calendar, payment, infrastructure), and publicly available sources.

We do not knowingly collect biometric information, precise geolocation, or racial/ethnic, religious, union-membership, health, sex-life, immigration, or genetic data through the Site.

4. How we use personal information

• Operate, maintain, secure, and improve the Site and our Services.
• Respond to inquiries, deliver audits, estimators, content, and consulting Services you request.
• Bill and collect payments and keep accounting records.
• Send transactional and, where permitted, marketing communications. You can opt out of marketing at any time by clicking "unsubscribe" or emailing ai@bayconai.com.
• Analyze usage to make our content and tools more useful, including with privacy-respecting analytics.
• Detect, prevent, and investigate fraud, abuse, and security incidents.
• Comply with law and enforce our agreements.

We do not use personal information collected through the Site to train general-purpose AI models without your consent. We may use aggregated, de-identified data for product improvement.

5. When we share personal information

We share personal information with the following categories of recipients, only as needed and under appropriate contracts:

• Service providers (hosting, email, analytics, CRM, payment, scheduling, AI platforms) who process information on our behalf and are restricted from using it for other purposes.
• Professional advisors (lawyers, accountants, auditors).
• Authorities when required by law, subpoena, or to protect rights, safety, or property.
• Successors in connection with a merger, acquisition, financing, or sale of assets, subject to confidentiality.
• With your direction, such as when you connect a third-party tool to the Services.

6. "Sale" or "share" of personal information

BayconAI does not sell personal information for money. We may "share" personal information for cross-context behavioral advertising as defined under the CPRA when you interact with certain third-party advertising or analytics cookies. You can opt out at any time using the Do Not Sell or Share My Personal Information link in the Site footer or by emailing ai@bayconai.com. We honor recognized opt-out signals such as Global Privacy Control (GPC) where required.

7. Sensitive personal information

We do not use or disclose sensitive personal information (as defined by the CPRA) for purposes other than those allowed by Cal. Civ. Code § 1798.121, and we do not need to offer a right to limit use of sensitive personal information for Site visitors.

8. Cookies and similar technologies

We use cookies, local storage, and similar technologies to operate the Site, remember preferences, and measure usage. For a full description and how to control them, see our Cookie Policy.

9. How long we keep information

We retain personal information for as long as we have an ongoing legitimate business need (for example, while you are a client, to comply with tax or other laws, or to defend or assert legal claims). When retention is no longer required, we delete or anonymize it. Typical retention windows: prospect inquiries — 24 months; client records — 7 years after engagement end; server logs — 90 days.

10. Security

We implement administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls based on least privilege, vendor due diligence, and incident response procedures. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your rights under California law

Subject to verification and limited exceptions, California residents have the right to:

• Know what personal information we have collected, used, disclosed, and (if applicable) sold or shared in the prior twelve (12) months.
• Access / portability — receive a copy in a portable, readable format.
• Delete personal information we have collected from you.
• Correct inaccurate personal information.
• Opt out of sale or sharing for cross-context behavioral advertising.
• Limit use of sensitive personal information (where applicable).
• No retaliation for exercising any of these rights.

You may use an authorized agent to make a request, with proof of authorization.

12. How to exercise your rights

Submit a request by email to ai@bayconai.com with the subject line "Privacy Rights Request." We will verify your identity using information already on file. We respond within 45 days, extendable by an additional 45 days when reasonably necessary, with notice.

13. Other U.S. state rights

If you live in a state that grants similar privacy rights (including, as applicable, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and others), you have rights substantially similar to those listed above. Submit a request as described in Section 12; we will respond consistent with the law of your state.

14. Notice to EU / UK residents

If you are in the European Economic Area, the United Kingdom, or Switzerland, the legal bases on which we process your personal information are: performance of a contract; our legitimate interests in operating and improving our Services (balanced against your rights); consent (which you may withdraw at any time); and compliance with legal obligations. You have rights of access, rectification, erasure, restriction, objection, and portability, and the right to lodge a complaint with your supervisory authority. Where we transfer personal information out of the EEA or UK, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum) and additional safeguards as needed.

15. Children

The Services are intended for adults. We do not knowingly collect personal information from children under 13. If we learn that we have, we will delete it. Parents or guardians who believe their child has provided personal information may contact us.

16. Changes to this Policy

We may update this Policy from time to time. The "Last updated" date at the top shows when. Material changes will be announced on the Site or by email.

17. Contact

Privacy questions and requests:
Mauricio Nunes Marques (BayconAI)
Email: ai@bayconai.com