Estes Advisory LLC
Privacy
1. Who we are
Estes Advisory LLC (“we”, “us”) provides advisory, consulting, and software products (including Artifactum, ForgeLens, and related tools). Contact: estesadvisory.com contact · personal LinkedIn: mikedestes · company page: estes-advisory.
2. What this notice covers
- Marketing and technical websites we operate (e.g. estesadvisory.com, artifactum.ai, forgelens.ai)
- Private internal tools (e.g. ops dashboard) with separate authentication
- Developer apps we register (e.g. LinkedIn Developer apps that post or read only with your login)
- How we use analytics and hosting providers
Third-party sites we link to (Cal.com, LinkedIn, Plausible’s own site, customer/partner sites) have their own policies once you leave our pages.
3. Principles
- Minimum necessary. Collect what we need to deliver a page, a product, or a service—not a marketing profile of “everyone who breathed near our brand.”
- Cookies only when required. Our public brochure sites default to no tracking cookies. Where a feature needs a cookie (e.g. signed-in product sessions later), we keep it to the minimum required for that feature.
- Cookieless analytics when we measure traffic. We use Plausible Analytics for aggregate pageviews and outbound clicks—not ad retargeting databases.
- Sovereignty and respect. We care about data control for ourselves and for clients (see Artifactum and the company values on this page). We do not sell personal information as a business model.
- Plain English over theater. If we change material practices, we update this page and the effective date—not bury it in unread PDFs.
4. What we collect
Automatically when you visit a public site
- Standard web request data processed by our host (AWS S3 + CloudFront): IP address, user-agent, URL, timestamps—for delivery, security, and operational logs.
- Aggregate analytics via Plausible (page path, referrer, device class, outbound link clicks)—without cookies or advertising identifiers for that product. The tracker script loads from plausible.io on this origin’s pages.
- Web fonts (IBM Plex) are self-hosted on this CloudFront/S3 origin. We do not load Google Fonts.
When you contact us or work with us
- Information you send (email, booking form fields, contracts, project materials). We use it to respond, deliver work, and meet legal/accounting duties.
When you authorize a LinkedIn (or similar) app we operate
- OAuth tokens and profile identifiers needed to act on your behalf (for example create a post you requested). We do not use that access for silent bulk scraping or unsolicited messaging.
- Tokens are stored under operator control (e.g. local secure storage or cloud secrets for production)—not in public git repositories.
When you use product logins (future SaaS)
- Account credentials or identity-provider assertions, plus project data you store in the product. Product-specific terms may add detail; this page still applies to baseline privacy posture.
5. What we do not do (with your visitor data)
- Sell personal information to data brokers
- Run third-party ad pixels on our default brochure sites for behavioral ad networks
- Use Google Analytics on those surfaces (we chose Plausible instead)
- Hide material practices behind unreadable walls of text on purpose
6. Sharing
We share data only when needed:
- Processors that host or operate infrastructure (e.g. AWS, Plausible)
- Professional partners under agreement when a client engagement requires it
- Law if we are legally compelled and believe disclosure is required
7. Security
We use industry-reasonable controls (HTTPS, private storage for sensitive systems, least privilege, no secrets in public git). No system is perfect; report concerns via contact channels on the main site.
8. Retention
Operational logs and analytics follow provider and business retention defaults. Client engagement data is kept as needed for the work and legal records, then reduced or deleted when no longer needed.
9. Your choices
- Do not click third-party links if you do not want their policies to apply
- Revoke LinkedIn (or other) app access from that provider’s settings anytime
- Ask us to correct or delete personal data we hold that is not required by law
10. Children
Our services are directed to professionals and businesses, not children under 16.
11. Changes
We may update this page. The effective date at the top changes when we do. Material changes will be reflected here; continue using our sites only if you accept the then-current notice.
12. Company values
Short public version. Internal process docs stay private; we do not publish a GitHub markdown file as the values surface.
- Radical transparency without recklessness. Say what we do and why — without dumping secrets, client NDA content, or unsafe operational detail.
- Privacy by default. Minimize collection. Prefer cookieless analytics. Cookies only when a real feature requires them.
- Data sovereignty. Organizations and people should control durable work product — files, keys, process — not rent amnesia from chat vendors.
- AI as partner and force multiplier. Use strong models to ship faster; keep humans accountable for judgment, ethics, and risk.
- Simple, useful, secure, mindful. Useful over performative; secure over clever; easy for the next human or agent.
13. Contact
Estes Advisory LLC · Contact