Privacy,
without fog.

Public website

Anchor Point does not intentionally use advertising trackers or behavioural advertising cookies on these pages. Cloudflare Pages and related network infrastructure may process IP address, user agent, timestamps, requested URLs and security events to deliver and protect the site.

Email and WhatsApp enquiries

When you contact us, we process the details you send—such as name, organization, contact information, message and attachments—to respond, assess fit, scope a possible engagement, protect security and maintain necessary business records. Do not send passwords, API keys, recovery codes, restricted records or unnecessary personal data.

WhatsApp is offered only for non-confidential introductions. Email is the preferred initial business channel, but ordinary email is not an approved restricted-file transfer system.

Private Vault

The Vault uses Supabase for authentication, database and private object storage. Authorized staff identity data may include email address, role, authentication state and access-related metadata. Project records and documents are available only under configured row-level and storage policies.

Invitation-only access and verified TOTP/AAL2 are intended controls, not permission to upload every category of information. Restricted, defence, export-controlled, critical-infrastructure or safety-critical operational records remain prohibited until a separately approved environment and written handling policy exist.

AI theory assistant

Generic public theory questions are sent from the website to a Supabase Edge Function and then to OpenRouter, which routes them to an eligible free model provider. The interface prohibits confidential, personal and project-specific content. Provider availability and retention eligibility can vary; the assistant may refuse or become unavailable rather than weaken the configured privacy boundary.

The Edge Function may retain limited anti-abuse metadata such as a one-way client signal, request timing and returned model identifier. It is not designed as a confidential project record or engineering decision system.

Service providers

Current services include Cloudflare Pages for public delivery, Supabase for identity/database/storage/functions, OpenRouter and a routed model provider for opted-in public theory prompts, Zoho for domain email, and GitHub for website source control. Each provider processes information under its own infrastructure and terms. The Trust Centre maps their present roles.

Retention and deletion

Information should be kept only while needed for the stated purpose, security, contractual records, dispute handling, backup integrity or applicable legal obligations. Launch-candidate staff must classify information and identify its owner before long-term retention. Backup copies may take additional time to expire.

Access, correction and deletion requests

Contact info@anchorpoint.com.bd to request access, correction or deletion of information you believe Anchor Point controls. We may need to verify your identity and may retain records where security, contracts, disputes or law require it.

This notice will be revised when the production legal identity, jurisdiction-specific obligations, providers or data practices change. Material changes should receive a new version and effective date.