Plain-English privacy.

Sankara Labs (“we”, “our”, “us”) is an engineering studio registered in Nairobi, Kenya. We build contact-center platforms, AI systems, and back-office infrastructure for clients worldwide. Our website is sankaralabs.com.

If you have questions about this policy, email us at hello@sankaralabs.com.

We collect only what we actually need. Here is what that looks like in practice:

• Discovery call submissions — When you fill in the booking form we collect your name, email, company, and the description you provide. We use this solely to respond to your enquiry and schedule a call.
• Email correspondence — If you email us directly, we retain that correspondence to handle your request and keep a record of our communication.
• Website analytics — We may use privacy-respecting analytics (such as Vercel Analytics) to understand which pages are visited and how users navigate the site. No personal identifiers are stored.
• Cookies — We use only essential cookies required for the site to function. We do not run advertising cookies or third-party tracking pixels.

We use the information you provide to respond to your enquiry, schedule discovery calls, and deliver the services you have engaged us for. We do not sell, rent, or trade your personal information to any third party — ever. We do not use your data for advertising or profiling.

We share personal data only with the sub-processors required to operate our business. These currently include:

• Vercel — Our hosting provider. Your form submissions transit through Vercel's infrastructure.
• Slack (optional) — We may post notification summaries of form submissions to an internal Slack channel. The raw data is not stored in Slack beyond the notification.
• Email providers — If you email us, our email provider (Google Workspace) processes that message.

All sub-processors are contractually required to protect your data and may not use it for their own purposes.

We keep enquiry and contact data for as long as is necessary to manage our business relationship with you — typically no longer than three years after your last interaction with us. If a project engagement follows, we retain relevant records for seven years in line with standard accounting and legal obligations. You may request deletion at any time (see section 07).

We take reasonable technical and organisational measures to protect your data: HTTPS everywhere, access controls, and minimal data storage. No system is perfectly secure, but we keep the attack surface small by collecting only what we need.

Depending on your location you have rights under applicable data protection law (including the GDPR and Kenya's Data Protection Act 2019). These include:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data
• Restriction — ask us to limit how we use your data
• Portability — receive your data in a machine-readable format
• Objection — object to our processing of your data

To exercise any of these rights, email hello@sankaralabs.com with the subject line “Privacy Request”. We will respond within 30 days.

Our services are not directed at children under 16. We do not knowingly collect data from anyone under 16. If you believe we have inadvertently done so, please contact us and we will delete it promptly.

Our site may contain links to third-party websites (GitHub, LinkedIn, App Store listings, etc.). This policy applies only to sankaralabs.com. We are not responsible for the privacy practices of those sites.

We may update this policy from time to time. When we do, we will update the “last updated” date at the top of the page. If changes are material we will take reasonable steps to notify you — for example by posting a notice on the site.