Privacy and data
Effective date: 2026-10-22
1. Faber Systems LLC and this notice
Faber Systems LLC handles personal information in ordinary business communications, business records and administration, and in the customer-discovery service described below. Contact [email protected] with privacy questions or requests. Our services target adult business contacts throughout the United States, not children or personal consumer services. The discovery-specific periods and practices below apply only to those records; linking this notice from Microsoft does not make every record a discovery response.
2. Ordinary business communications and records
When you communicate with us or share business materials, we receive the contact details, business affiliations, messages, attachments and other information you provide, together with related correspondence and document metadata. Where a business resource is shared with you, relevant account, access-permission and activity information may also be processed to manage that access. Microsoft 365 account and service administration involves account identifiers, roles, permissions and operational or security information. This describes relevant record categories; it does not imply that external guest access is currently active. Please share only necessary information and avoid passwords, confidential third-party records and sensitive personal information.
3. FABER-MVP-001 customer discovery
Customer-discovery intake is currently paused. When separately activated, the forms open on Microsoft's website. Written discovery asks for a recent operational example; role, broad context, consequences and workarounds are optional. Email is required only if you request contact. Conversation interest asks for a topic, follow-up email and affirmative permission to contact you about that request. We keep source identifiers, submission dates, minimal review/fit assessments, contact permission and relevant correspondence. Participation is voluntary. A request is not marketing enrollment, a booked meeting or a purchase commitment; no reply is guaranteed. Omit client names, confidential records and sensitive information, including health, financial-account, biometric and children's information. Unexpected sensitive information is restricted and reviewed for appropriate deletion or other action.
4. Why we use information
We use ordinary business information to communicate, handle requests and business relationships, maintain necessary records, administer business accounts and shared resources, and protect operations. We use discovery information to understand workflow problems, assess service fit, respond when requested, manage privacy requests and improve this discovery service. Human review controls discovery qualification and follow-up. Routine administrative reminders support that review; they are not automated customer decisions or messages. We do not upload identifiable discovery responses to AI systems or make automated decisions about people in this MVP.
5. Microsoft 365, providers and authorized access
Microsoft provides our business email, Forms and Microsoft 365 record-storage and administration services. Business documents may be handled in SharePoint or OneDrive when those services are used. Microsoft Forms is the authoritative discovery submission record. Email notifications support review; they do not prove a response was reviewed. Minimal discovery review records use the dedicated restricted SharePoint location. The regular business account has access, and existing site-owner administrative access remains. We prefer source identifiers and necessary classification over copying full narratives. The approved Power Automate reminder uses source links and review instructions, not response contents. Authorized administrators and service providers may access information under their roles and terms. This is not a claim that every business file has the discovery folder's permissions or that access is exclusive to one person. Microsoft may process device, network, service and security information under its own practices. Anonymous Forms mode does not mean there is no technical metadata. See Microsoft's privacy statement: Microsoft privacy statement. Cloudflare hosts this website and may process network/security information for that service. We do not sell personal information or share it for targeted advertising. We may disclose necessary information to operate the services described, meet applicable legal requirements or protect legal rights and security.
6. Retention and deletion
Discovery-specific rules: general discovery responses are retained for 90 calendar days from submission. Unconverted conversation requests: 180 calendar days after last meaningful contact, or submission if none. Active qualified prospects: review every 180 calendar days to decide whether retention remains necessary. Customer records follow their separate policy. Reconciled discovery-notification emails: 30 calendar days after reconciliation. Reminders, administrative views and exports do not restart these periods. Discovery copies follow their source category and clock. A manual discovery retention review occurs monthly; due records are deleted or a necessary legal, contractual or recordkeeping exception is documented with a next review. This is not automatic exact-day erasure. Non-identifying research may be kept only when people and organizations cannot reasonably be identified. Synthetic evidence is separate from genuine discovery evidence. Other business correspondence, documents and account/access records have no single retention period under this notice: retention depends on the record's purpose, continuing business need and applicable legal, contractual or security requirements. The discovery periods do not apply to unrelated business records. Provider service retention, recycle bins, version history and backups may require separate handling; immediate erasure of every provider copy is not promised.
7. Privacy requests and choices
Email [email protected] to ask to access, correct or delete information, withdraw contact permission, raise a concern or seek review of an outcome. Give only enough information to locate the record; do not send identity documents by default. We verify requests proportionately, explain our response and any applicable exception, and apply rights and deadlines required by the law relevant to the request. You can decline optional information or participation. Requests receive human review; this notice does not create a universal statutory right or promise that all records can always be deleted.
8. Security and operational safeguards
We use account and permission controls to manage access. The dedicated discovery review location is restricted, and original discovery responses remain in Forms. We minimize copying and review requests and exceptions through a human operator. These safeguards do not guarantee that every incident can be prevented, that all records have identical controls, or that a particular data-residency region, backup recovery time or deletion outcome is assured.
9. Website analytics and provider tracking
No public analytics, advertising tags, session replay or marketing cookies are active on this website. Its measurement script keeps allowed page/path events only in memory and sends nothing; it does not read form answers, email or query strings or identify unique people. It does not track activity across third-party websites. Because we do not use cross-site tracking, Do Not Track signals do not change this website's behavior. We do not sell/share data for cross-context behavioral advertising; an opt-out preference does not turn such processing on. Microsoft and Cloudflare may process technical information under their own notices. We do not promise the absence of provider cookies or operational logs. If analytics are later approved, the provider, data, purposes, retention and applicable choices will be verified and disclosed before activation.
10. Notice updates and effective date
Material changes will be described prominently with a new effective date on the published notice before the changed practice begins; additional notice or permission will be obtained where required. The effective date identifies this version. Effective date: the actual date this approved revision is published.