Privacy Policy

Effective Date: September 10, 2025

Holmes Systems Inc., operating as Sherlocks.ai ("Company," "we," "us," or "our"), is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website at sherlocks.ai or use our AI-powered Site Reliability Engineering services.

Your Consent and Agreement

By accessing our website or using our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our practices, please discontinue use of our services immediately.

We reserve the right to modify this Privacy Policy at any time. When we make changes, we will update the effective date and notify you through our website, email notifications, or other appropriate means. Your continued use of our services after such modifications constitutes acceptance of the updated Privacy Policy.

Scope of This Policy

This Privacy Policy applies to all information collected through our website, services, and any related communications. It does not apply to information collected by third-party websites or services that we do not control.

For purposes of this Policy, "Personal Information" refers to any data that can be used to identify you as an individual, including but not limited to information covered by applicable privacy laws and regulations.

Information We Collect

Information You Provide Directly

We collect information that you voluntarily provide to us, including:

Professional Identity Information: Name, job title, company affiliation, and business contact details
Account Information: Username, email address, and password when you create an account
Communication Data: Content of messages, support requests, and other communications with us
Service Configuration Data: Technical specifications, preferences, and custom settings for our AI SRE services

Automatically Collected Information

When you interact with our services, we automatically collect certain technical information:

Technical Data: IP addresses, browser types, operating systems, device identifiers, and access times
Usage Analytics: Pages visited, features accessed, time spent on our platform, and interaction patterns
Performance Metrics: System response times, error rates, and service availability data
Location Data: General geographic location based on IP address (not precise location tracking)

Information from External Sources

We may obtain information from:

Business Partners: Companies that integrate with or refer clients to our services
Public Sources: Publicly available professional information to enhance our business relationships
Third-Party Analytics: Aggregated insights from analytics providers to improve our services

How We Use Your Information

Primary Business Functions

We process your information for the following core purposes:

Service Delivery: Providing, maintaining, and improving our AI SRE platform and related services
Customer Support: Responding to inquiries, troubleshooting issues, and providing technical assistance
Platform Enhancement: Analyzing usage patterns to develop new features and optimize performance
Security and Reliability: Monitoring for threats, preventing fraud, and ensuring system integrity

Communication and Business Development

Service Communications: Sending important updates, security alerts, and platform notifications
Business Relationship Management: Maintaining customer relationships and exploring expansion opportunities
Marketing Activities: Sharing relevant product information and industry insights (with your consent where required)

Compliance and Legal Obligations

Regulatory Compliance: Meeting legal requirements under applicable data protection and business laws
Legal Process: Responding to lawful requests from authorities and protecting legal rights
Dispute Resolution: Addressing conflicts and enforcing our terms of service

Information Sharing and Disclosure

Service Providers and Partners

We share information with carefully selected third parties who assist in our operations:

Technology Infrastructure: Cloud hosting providers, security services, and technical support vendors
Analytics and Performance: Services that help us understand platform usage and improve functionality
Customer Support: Third-party tools and services that enhance our ability to assist customers

Business Context Sharing

Professional Networks: Information may be shared within business contexts you explicitly authorize
Integration Partners: Data necessary for service integrations you configure and approve

Legal and Safety Requirements

We may disclose information when required by law or to protect legitimate interests:

Legal Compliance: Responding to court orders, government requests, and regulatory requirements
Safety Protection: Preventing harm to individuals or our business operations
Rights Enforcement: Protecting our intellectual property and contractual rights

Business Transfers

In the event of a merger, acquisition, or sale of business assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

Data Security and Protection

We implement comprehensive security measures to protect your information:

Technical Safeguards: Encryption, secure transmission protocols, and access controls
Organizational Measures: Employee training, data handling procedures, and regular security assessments
Infrastructure Security: Secure data centers, backup systems, and incident response procedures

While we strive to protect your information, no method of transmission or storage is completely secure. We cannot guarantee absolute security but commit to addressing any security incidents promptly and transparently.

Data Retention and Management

Retention Principles

We retain information only as long as necessary for legitimate business purposes:

Active Service Period: While you maintain an active account or service relationship
Business Requirements: For ongoing support, billing, and service improvement needs
Legal Obligations: As required by applicable laws and regulations

Data Deletion

You may request deletion of your personal information by contacting us at privacy@sherlocks.ai. We will process deletion requests within 30 days of verification, subject to:

Legal Requirements: Information we must retain for compliance purposes
Business Continuity: Data necessary for ongoing service obligations
Technical Limitations: Information that cannot be isolated from backup systems

Your Privacy Rights

Depending on your location and applicable laws, you may have the following rights:

Access: Request information about what personal data we hold about you
Correction: Update or correct inaccurate personal information
Deletion: Request removal of your personal information (subject to legal limitations)
Portability: Receive your data in a structured, machine-readable format
Objection: Object to certain types of data processing
Restriction: Limit how we process your information in specific circumstances

To exercise these rights, contact us at privacy@sherlocks.ai. We may require identity verification to prevent unauthorized access.

Cookies and Tracking Technologies

Cookie Usage

Our website uses cookies and similar technologies to:

Essential Functions: Enable core website functionality and security features
Performance Analysis: Understand how visitors interact with our website
Personalization: Remember your preferences and customize your experience

Cookie Categories

Necessary Cookies: Required for basic website operation and cannot be disabled
Analytics Cookies: Help us improve website performance and user experience
Functional Cookies: Enable enhanced features and personalization

Cookie Management

You can control cookie settings through your browser preferences. Disabling certain cookies may limit website functionality. For more information about cookies, visit www.allaboutcookies.org.

International Data Transfers

Our services are primarily operated from the United States. By using our services, you consent to the transfer of your information to the United States and other countries where we or our service providers operate.

We ensure appropriate safeguards are in place for international transfers, including:

Adequacy Decisions: Transferring to countries with adequate data protection laws
Standard Contractual Clauses: Using approved contractual protections
Certification Programs: Participating in recognized privacy frameworks

Children's Privacy

Our services are designed for business users and are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we discover that we have collected information from someone under 18, we will delete it promptly.

Third-Party Services

Our website may contain links to external websites or integrate with third-party services. This Privacy Policy does not apply to those external sites or services. We encourage you to review the privacy policies of any third-party services you choose to use.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes through:

Website Notice: Prominent notification on our website
Email Communication: Direct notification to registered users
Service Alerts: In-platform notifications for active users

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@sherlocks.ai
Mail: Holmes Systems Inc., Attention: Privacy Office
Support: For general inquiries, contact support@sherlocks.ai

We are committed to addressing your privacy concerns promptly and working with you to resolve any issues.

This Privacy Policy is effective as of September 10, 2025, and supersedes all previous versions.