Your data is yours.

This is a plain-language notice. It says what we collect, why, who sees it, and the choices you have. If anything here is unclear, write counsel@estableco.com and a person will answer.

I. Who we are.

Estable is operated by Estable Corporation, a Texas corporation (“Estable,” “we,” “us”). This notice covers estableco.com and the inquiries you send us through it. We are the controller of the information described below.

II. What we collect.

Two kinds, no more. What you give us: when you submit an intake or email us: your name, work email, company, role, and the scope of work you describe, with the site that sent you here when your browser tells us. What the site records: the standard server logs our hosting provider keeps: IP address, browser and device type, the pages requested, and timestamps, used to operate and secure the site. We do not run advertising cookies or third-party analytics. The site keeps a single flag in your browser so the intro animation doesn’t replay; it holds no personal data. When you pay, the charge runs through Stripe, which sets its own cookies strictly to process the payment and screen fraud; we never see your card number. The typefaces are served by Google Fonts, which receives your IP address to deliver them. Neither is used to advertise to you.

III. Why we use it.

To answer you, to judge whether we’re a fit, to operate and secure the site, and to meet our legal obligations. Where the GDPR applies, our bases are your consent, our legitimate interest in running the business, and taking steps at your request before any agreement.

IV. Who sees it.

Your information stays within Estable and the vetted providers that run the service for us, each under contract, each bound to use it only on our instructions: Vercel hosts the site, Supabase holds the database and handles sign-in, Stripe processes payments, Resend delivers our email, Anthropic reads applications submitted through our public forms to sort and route them (that call carries the company, the contact name and address, and the form as submitted), and Google Fonts serves the typefaces. We do not sell personal information, and we never have. We disclose to authorities only when the law requires it, or to protect people from harm.

V. Where it lives.

We operate from the United States and work with counterparties across Europe, MENA, and Asia-Pacific. When information moves across borders, we rely on the recognized safeguards for that transfer.

VI. How long we keep it.

Only as long as the purpose needs: to hold the conversation and to meet our legal and record-keeping duties. After that we delete or anonymize it.

VII. Your rights.

Depending on where you live, you may ask to see, correct, delete, port, or restrict the information we hold, or object to a particular use. California residents have the right to know and to delete, and the right not to be treated differently for exercising it, and again, we do not sell data. To exercise any right, write counsel@estableco.com; we’ll verify your request and respond within the time the law allows.

VIII. How we protect it.

Customer and counterparty data sits on a bank-grade ledger, each party’s information isolated from every other’s, under audit logs that can’t be edited or erased. Our full posture, and how to report a vulnerability, is on the Security page.

IX. Children.

The site is built for businesses. It isn’t directed to children, and we don’t knowingly collect their information.

X. Changes.

When this notice changes in a way that matters, we’ll update the date above and, where it’s appropriate, tell you directly. Questions go to counsel@estableco.com.