1. Overview
Corleh LLC ("Corleh," "we," "us," or "our") is an AI consulting and software development company. This Privacy Policy and Terms of Use ("Agreement") governs your access to and use of the Corleh website at corleh.com and all subdomains (including app.corleh.com and geo.corleh.com), as well as any applications, platforms, APIs, services, or content provided by Corleh (collectively, the "Services").
By accessing or using any of our Services, you agree to be bound by this Agreement. If you do not agree, you must discontinue use of our Services immediately.
This Agreement is a binding legal contract between you and Corleh LLC. Please read it carefully before using our Services.
2. Information We Collect
We collect information in three ways: information you provide directly, information collected automatically, and information from third parties.
Information You Provide
- Contact and inquiry data: Name, email address, phone number, company name, and the content of messages submitted via our contact form or direct email.
- Account information: If you create an account on any Corleh application, we collect the information required for registration (e.g., name, email, password hash).
- Client and engagement data: Business information, workflow documentation, strategic materials, and other data shared with us in the course of a consulting or development engagement.
- Payment information: Billing details collected when you purchase Services. Payment card information is processed by our payment processors and is not stored on our systems.
- Communications: Records of correspondence with us via email or any support channel.
Information Collected Automatically
- Usage data: Pages visited, features used, clickstream data, session duration, and interactions with our Services.
- Device and browser data: IP address, browser type and version, operating system, device identifiers, and screen resolution.
- Log data: Server logs recording requests made to our infrastructure, including timestamps and referring URLs.
- Cookies and similar technologies: See Section 5 for details.
Information from Third Parties
- Information from analytics providers (e.g., Google Analytics) about how users find and interact with our Services.
- Information from social media platforms if you interact with our content or connect a social account.
- Publicly available business information used to research prospective clients.
3. How We Use Information
We use the information we collect for the following purposes:
Service Delivery
- Provide, operate, maintain, and improve our Services.
- Process and respond to your inquiries, consultation requests, and support tickets.
- Execute consulting engagements, software development projects, and platform access agreements.
- Process payments and manage billing.
- Authenticate users and maintain account security.
Business Operations
- Analyze usage patterns to improve Service quality, performance, and user experience.
- Develop new features, products, and services.
- Conduct internal research, analytics, and business intelligence.
- Maintain business records and satisfy legal and regulatory obligations.
- Detect, investigate, and prevent fraud, abuse, and security incidents.
- Enforce this Agreement and protect our legal rights.
Communication
- Send transactional communications (receipts, confirmations, account notices).
- Send marketing communications about our Services, subject to your opt-out rights.
- Notify you of changes to our Services, pricing, or this Agreement.
AI Model Improvement and Training
We may use aggregated, de-identified, or anonymized data derived from your use of our Services to improve AI models and workflows. We will not use identifiable client engagement content to train AI models without your explicit written consent.
Legitimate Business Interests
We process information as necessary to pursue our legitimate business interests, including operating and growing our business, protecting our assets, and providing high-quality services to our clients, provided those interests are not overridden by your rights.
4. Data Sharing
We do not sell your personal information. We may share your information in the following circumstances:
Service Providers and Subprocessors
We share information with trusted third-party vendors that help us operate our Services, including:
- Anthropic (Claude): Our AI model provider. Inputs and outputs processed via the Claude API are subject to Anthropic's usage policies and data handling practices.
- Formspree: Our contact form processor. Form submissions are transmitted to Formspree servers.
- Payment processors: To facilitate billing and transactions.
- Hosting and infrastructure providers: Cloud hosting, CDN, and related infrastructure services.
- Analytics providers: To help us understand usage and improve our Services.
- Communication tools: Email, scheduling, and project management platforms used in client engagements.
All service providers are contractually required to protect your information and may only use it to perform services on our behalf.
Business Transfers
If Corleh is involved in a merger, acquisition, asset sale, financing, or similar transaction, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.
Legal Requirements
We may disclose your information when required by law, subpoena, court order, or governmental authority, or when we believe in good faith that disclosure is necessary to: (a) comply with applicable law; (b) protect the safety of any person; (c) prevent or investigate fraud, abuse, or security incidents; or (d) protect our legal rights and property.
With Your Consent
We may share your information for any other purpose with your explicit consent.
5. Cookies & Tracking Technologies
We use cookies and similar technologies (pixels, local storage, session storage) to operate and improve our Services.
- Essential cookies: Required for the Services to function (e.g., authentication sessions, security tokens). You cannot opt out of these.
- Analytics cookies: Help us understand how visitors use our Services. You may opt out by adjusting your browser settings or using browser-based opt-out tools.
- Preference cookies: Remember your settings and preferences across sessions.
Most browsers allow you to control cookies through browser settings. Disabling cookies may limit functionality of certain Services.
6. Data Retention
We retain your information for as long as necessary to fulfill the purposes described in this Agreement, comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:
- Contact form submissions are retained for up to 3 years.
- Client engagement data (including contracts, deliverables, and communications) is retained for a minimum of 7 years for legal and accounting purposes.
- Account data is retained for the life of your account plus 2 years after closure.
- Server logs are retained for up to 12 months.
When data is no longer required, we delete or anonymize it in accordance with our data retention policies.
7. Your Rights
Depending on your jurisdiction, you may have rights regarding your personal information:
For All Users
- Access: Request a copy of the personal information we hold about you.
- Correction: Request that inaccurate or incomplete information be corrected.
- Deletion: Request deletion of your personal information, subject to legal retention requirements.
- Opt-out of marketing: Unsubscribe from marketing communications at any time using the unsubscribe link in any email or by contacting us directly.
California Residents (CCPA/CPRA)
California residents have additional rights including the right to know, the right to delete, the right to correct, the right to opt out of sale or sharing of personal information (we do not sell personal information), and the right to non-discrimination. To exercise these rights, contact us at privacy@corleh.com.
EEA, UK, and Swiss Residents (GDPR)
If you are located in the European Economic Area, United Kingdom, or Switzerland, you have rights under GDPR or equivalent law, including rights to access, rectification, erasure, restriction of processing, data portability, and objection. You also have the right to lodge a complaint with your local data protection authority. Our legal bases for processing include contractual necessity, legitimate interests, legal obligation, and consent. To exercise your rights, contact privacy@corleh.com.
8. Security
We implement commercially reasonable administrative, technical, and physical safeguards designed to protect your information against unauthorized access, disclosure, alteration, and destruction. These measures include:
- Encryption in transit (TLS/HTTPS) for all data transmitted to and from our Services.
- Encryption at rest for sensitive stored data.
- Access controls limiting data access to personnel with a legitimate need.
- Regular security reviews and vulnerability assessments.
- Incident response procedures for detecting and responding to data breaches.
No security measure is perfect. If you have reason to believe your interaction with us is no longer secure, please contact us immediately at security@corleh.com.
In the event of a data breach that affects your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law.
9. Terms of Use
By accessing or using any Corleh Service, you agree to the following terms. These terms apply to all visitors, users, clients, and any other person who accesses our Services.
Eligibility
You must be at least 18 years old and legally capable of entering into binding contracts to use our Services. By using our Services, you represent that you meet these requirements. Our Services are intended for business use and are not directed at children under the age of 13. We do not knowingly collect personal information from children.
Account Responsibilities
If you create an account, you are responsible for maintaining the confidentiality of your credentials and for all activity that occurs under your account. You agree to notify us immediately of any unauthorized use of your account. Corleh is not liable for any loss or damage arising from your failure to maintain account security.
Acceptable Use
You agree to use our Services only for lawful purposes and in a manner consistent with this Agreement, all applicable laws and regulations, and any guidelines we provide. You may not use our Services to harm others, violate rights, or circumvent legal obligations.
Service Availability
We strive to maintain high availability but do not guarantee uninterrupted or error-free operation. We reserve the right to modify, suspend, or discontinue any Service at any time with or without notice, and we will not be liable for any such modifications, suspensions, or discontinuations.
Consulting and Development Engagements
All consulting, strategy, and software development work is governed by separate written engagement agreements or statements of work ("SOW") executed between Corleh and the client. In the event of a conflict between this Agreement and an executed SOW, the SOW controls with respect to the specific engagement.
10. Intellectual Property
Corleh Property
All content, software, designs, text, graphics, logos, trademarks, trade dress, and other materials available through our Services ("Corleh Content") are the property of Corleh LLC or our licensors and are protected by applicable intellectual property laws. You may not copy, modify, distribute, sell, or create derivative works from any Corleh Content without our express written permission.
Limited License to Users
Subject to this Agreement, Corleh grants you a limited, non-exclusive, non-transferable, revocable license to access and use our Services for their intended purpose. This license does not include any right to sublicense, resell, or commercially exploit our Services or Corleh Content.
Client Deliverables
For paid consulting and development engagements, ownership of custom deliverables (code, documents, designs) is governed by the applicable engagement agreement or SOW. Unless otherwise agreed in writing, upon full payment, clients receive a license to use deliverables for their intended business purpose; Corleh retains ownership of all underlying frameworks, tools, methodologies, know-how, and pre-existing intellectual property. Corleh retains the right to use non-confidential deliverables and methodologies in future client work.
Feedback
If you provide feedback, suggestions, or ideas about our Services, you grant Corleh a perpetual, irrevocable, royalty-free, worldwide license to use, reproduce, modify, and incorporate that feedback into our Services without compensation or attribution to you.
Platform and Application IP
All Corleh-built platforms and applications, including the Corleh AI Agent Platform and Corleh Geo, and all associated source code, databases, algorithms, APIs, and documentation, are proprietary to Corleh LLC. Unauthorized reverse engineering, decompilation, or reproduction is strictly prohibited.
11. User Content
Our Services may allow you to submit, upload, or input data, text, files, or other content ("User Content") — for example, data you process through the Corleh AI Agent Platform.
- You retain ownership of your User Content.
- By submitting User Content, you grant Corleh a limited license to process, store, and use that content solely to provide the Services to you.
- You represent that you have all necessary rights, licenses, and permissions to submit User Content, and that doing so does not violate any third-party rights.
- You are solely responsible for the accuracy, legality, and appropriateness of your User Content.
- We do not endorse User Content and are not responsible for any User Content submitted by you or any third party.
12. Prohibited Uses
You agree not to use our Services to:
- Violate any applicable law, regulation, or governmental order.
- Infringe, misappropriate, or violate any intellectual property, privacy, or other third-party rights.
- Transmit or upload viruses, malware, or any other harmful or disruptive code.
- Conduct unauthorized access, penetration testing, or security research against our Services or infrastructure without prior written authorization from Corleh.
- Scrape, crawl, or systematically extract data from our Services using automated tools without our express written permission.
- Circumvent or attempt to circumvent any access controls, authentication, or security measures.
- Use our Services to develop competing products or services, or to benchmark our Services for commercial publication, without our consent.
- Engage in fraudulent, deceptive, or misleading conduct.
- Use AI outputs from our Services in a manner that violates Anthropic's usage policies or applicable law.
- Harass, threaten, or harm any individual.
- Transmit unsolicited commercial communications.
We reserve the right to terminate or suspend your access to our Services immediately, without notice, if you engage in any prohibited use.
13. Disclaimers
AS-IS BASIS. OUR SERVICES ARE PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS WITHOUT ANY WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, OR COURSE OF PERFORMANCE.
AI OUTPUT DISCLAIMER. Our Services incorporate AI-generated content and outputs. AI outputs may be inaccurate, incomplete, or inappropriate for your specific use case. You are solely responsible for evaluating, validating, and determining the suitability of any AI-generated output before relying on it for business, legal, financial, medical, or other decisions. Corleh does not warrant the accuracy, reliability, or completeness of any AI output.
THIRD-PARTY SERVICES. Our Services may integrate with or link to third-party services (including Anthropic/Claude). We do not control and are not responsible for third-party content, policies, or practices. Your use of third-party services is governed by those services' own terms and privacy policies.
PROFESSIONAL ADVICE. Nothing in our Services constitutes legal, financial, tax, or professional advice. Consult qualified professionals for advice specific to your situation.
14. Limitation of Liability
TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, CORLEH LLC, ITS OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, SUPPLIERS, AND LICENSORS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES — INCLUDING LOSS OF PROFITS, REVENUE, DATA, GOODWILL, OR BUSINESS INTERRUPTION — ARISING OUT OF OR RELATED TO YOUR USE OF OR INABILITY TO USE OUR SERVICES, EVEN IF CORLEH HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
IN NO EVENT SHALL CORLEH'S TOTAL CUMULATIVE LIABILITY TO YOU FOR ALL CLAIMS ARISING OUT OF OR RELATED TO THIS AGREEMENT OR OUR SERVICES EXCEED THE GREATER OF: (A) THE TOTAL AMOUNT PAID BY YOU TO CORLEH IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM; OR (B) ONE HUNDRED DOLLARS ($100).
SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OR LIMITATION OF CERTAIN WARRANTIES OR LIABILITIES, SO THE ABOVE LIMITATIONS MAY NOT APPLY TO YOU IN FULL.
15. Indemnification
You agree to defend, indemnify, and hold harmless Corleh LLC and its officers, directors, employees, agents, licensors, and service providers from and against any claims, liabilities, damages, judgments, awards, losses, costs, expenses, or fees (including reasonable attorneys' fees) arising out of or relating to:
- Your violation of this Agreement.
- Your use of the Services.
- Your User Content.
- Your violation of any third-party rights, including intellectual property rights or privacy rights.
- Your violation of any applicable law or regulation.
16. Governing Law & Dispute Resolution
This Agreement is governed by and construed in accordance with the laws of the State of Delaware, United States, without regard to its conflict of law principles.
Informal Resolution. Before filing any formal legal action, you agree to first contact us at legal@corleh.com and attempt to resolve the dispute informally for at least 30 days.
Arbitration. If informal resolution fails, any dispute, controversy, or claim arising out of or relating to this Agreement or our Services shall be resolved by binding arbitration administered by the American Arbitration Association (AAA) under its Commercial Arbitration Rules. Arbitration shall take place in Delaware, or remotely by mutual agreement. The arbitrator's decision shall be final and binding and may be entered as a judgment in any court of competent jurisdiction.
Class Action Waiver. You agree that any arbitration or proceeding shall be conducted only on an individual basis, and not in a class, collective, or representative action. You waive your right to bring or participate in any class action or class-wide arbitration.
Exceptions. Either party may seek injunctive or other equitable relief in a court of competent jurisdiction for claims involving intellectual property infringement or misappropriation without first engaging in arbitration.
17. Changes to This Policy
We may update this Agreement from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email or via a notice in our Services. Your continued use of our Services after any changes constitutes your acceptance of the updated Agreement.
We encourage you to review this Agreement periodically. This page is always accessible at corleh.com/security.
18. Contact Us
If you have questions about this Agreement, wish to exercise your privacy rights, or need to report a security concern, please contact us:
Corleh LLC
General: tom@corleh.com
Privacy inquiries: privacy@corleh.com
Security reports: security@corleh.com
Legal notices: legal@corleh.com
Website: corleh.com