Privacy: no cookies, no trackers

Controller

Rteam FZE LLC.

a-systems is run by Rteam FZE LLC, a company registered in the Sharjah Publishing City Free Zone, United Arab Emirates. It is the party responsible for this site and for the two demo stands linked from it. Alex Azariyev, its manager, is the person to write to about any of them.

Controller: Rteam FZE LLC, licence 4420354.01
Address: Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates
Manager: Alex Azariyev
Contact: alex@a-systems.pro

Kept

A server log, with the address cut.

Every request to this site and to the two demo stands writes one line: the time, the page, the referring page, the browser string, and an IP address whose last two parts the web server has already replaced with zeroes. The full address is never written to the log, so nothing can put it back together. Two things keep it whole: a request the server refuses or cannot complete, which its error log notes with the address, and signing the NDA, which keeps it as evidence (below).

Why: To know whether the demo stands are opened and which paths people take through them. That is the whole of it.
Kept for: About two weeks: the log is rotated daily and only the fourteen most recent copies are kept.
Errors: The error log keeps a request the server refused or could not complete (an upload over the limit, too many requests in a row) with its full address, to find what broke or who is hammering the server. Same two weeks.
Where: One server we rent in Germany (Hetzner, Nuremberg). It does not leave it.
Cookies: None. Not for analytics, not for preferences, not for anything.
Third parties: None on this site. No fonts, no scripts, no pixels, no tag manager.
Forms: One: the requirements form at /start/. It is described in full below. Otherwise you reach us by email, and our mail is held in Google Workspace. Booking a call opens Google Calendar’s booking page, a Google service: the name and address you give there reach Google and our calendar, and the booking stays in the calendar’s history.

Requirements

What happens to the document you send us.

If you use the form at /start/, you send us a company name, an address to reply to, optionally your name, and the requirements themselves as text or as a file. That material is your confidential business information and it is treated as such: it is read to produce the page we send back, and it is deleted thirty days later by a job that runs daily.

Where it goes: The same server in Germany. The document and the page produced from it sit in one directory on that machine.
Who reads it: Alex, and Claude. The scope read is produced by Anthropic's Claude, so the text of your requirements is sent to Anthropic, in the United States, to produce it. Anthropic processes it under its data processing agreement and the EU standard contractual clauses, and does not train its models on it. The finished scope read, with your company and email address, is then mailed to you and to us through Resend, our mail service, and lands in our Google Workspace mailbox.
Kept for: 30 days from the day it arrives, then deleted: the document, the page, and the log lines naming you. Ask sooner and it goes sooner. Two copies are kept as correspondence rather than as material: the mail with the scope read in our mailbox, and a deal in our own CRM, on the same server, with your company, your name and email address and one line on what the business does. Ask and both go too.
The page we send back: Lives at a link with a random 32-character token in it, tells browsers not to store it and search engines not to index it, and is not listed anywhere. Anyone holding the link can open it, so treat the link as the secret it is.
What we do not do: It is not added to a mailing list, not sold, not shown to another client, and not used as a case or an example without asking you first.
If you would rather not: Mail the same material to alex@a-systems.pro instead. It gets read either way; only the automatic part is skipped.

The NDA

What signing the NDA keeps.

The mutual NDA at nda.a-systems.pro is our own system on our own server in Germany, not a signing service. Its one outside party is mail: the signed copy reaches our mailbox, which Google Workspace hosts. Signing it is an act with evidence, and the evidence is what is kept.

What you type: The company's registered name, country, registration number and address, the name and position of whoever signs, and an email address. All of it is printed into the agreement itself, which is the point of asking.
What the act records: The time, the address your browser connected from, the browser's own description of itself, and the SHA-256 of the exact document you were shown. Without those a signature proves nothing, which is why they are kept rather than avoided.
Kept for: As long as the agreement can matter: its own term and the limitation period after it. This is the one thing on this page that is not deleted after thirty days, and the reason is that it is the agreement.
Where the copy goes: To the address you typed and to ours, as a PDF with a certificate page listing the same facts. Nobody else is sent it.
If you do not sign: What you typed stays as an unsigned request and is deleted with the others. Declining is a button on the page, and the reason you give is recorded and read.

Demo

The demo stands hold nobody's business.

demo.a-systems.pro, the distributor, and fab.a-systems.pro, the factory, run the same software we build for clients, on invented data: invented companies, people, orders and prices. On either one you are signed in as one of four demo personas, neither can send mail or reach any outside system, by construction, and each has its database destroyed and rebuilt from nothing every six hours.

What you type there: Lives until the next rebuild and is then gone with the rest of the database.
Who else sees it: Anyone else on the stand at the same time. It is one shared system, not a copy per visitor.
Your browser: Keeps the demo persona’s sign-in in its local storage, as any signed-in web application does. Nothing of yours is in it.
So: Do not type anything real into it. There is no reason to, and nowhere for it to go.

Rights

What you can ask for.

A truncated address in a log is not something we can find you by, so a request to see or delete "your" data from this site has nothing to match against - that is the point of cutting it. The error log is the exception: a request that failed stays there with its full address for two weeks, and you can ask about it like anything else. If you have written to us, sent requirements or signed the NDA, that is ordinary personal data and you can ask to see it, to correct it, to have it deleted, to restrict or object to its use, or to have it in a portable form. Write to alex@a-systems.pro and you will get an answer within 30 days. You can also complain to a data protection authority, in particular the one in the EU country where you live or work.

Why we may: The log, and the CRM record of a request you sent: our legitimate interest in running the site safely and in answering you (GDPR Art. 6(1)(f)). The scope read, a booked call and the NDA: steps you asked for before a possible contract (Art. 6(1)(b)).
Outside the EU: Anthropic, for the scope read, Google, for mail and the calendar, and Resend, which sends the scope read by email and is a backup sender for the system’s emails, can process data in the United States. Each does so under its data processing agreement, with the EU standard contractual clauses or the EU-US Data Privacy Framework as the safeguard, and Anthropic does not train its models on what you send.

Clients

If we build for you, this page is not the document.

This page covers visitors to this site. A system we run for a client is on our servers in the European Union, under the data processing agreement (DPA) signed with the contract. What we may touch, and under what terms, is the DPA - ask for it and read that instead of this.

Read the Trust page Sign the mutual NDA The DPA is signed with the contract: ask for the draft at the first call, or write to alex@a-systems.pro.

Who runs this site,
and what it keeps.