Privacy Policy

Information you provide

• Contact & inquiry data: name, email address, company, role, and the contents of messages you send through forms or email.
• Account & engagement data: information necessary to deliver Services under a statement of work, including credentials, project materials, and authorized contacts.
• Billing data: billing contact name, billing address, tax/VAT identifiers, purchase order numbers, and bank or remittance details necessary to issue and reconcile invoices. We invoice Clients directly; when invoices are paid by card via the secure pay-link on the invoice, card numbers and security codes are collected and processed by our PCI-DSS compliant invoicing provider and are not stored on Saber Holdings' systems.

Information collected automatically

• Device & usage data: IP address, browser type and version, operating system, referring URL, pages viewed, timestamps, and approximate location derived from IP.
• Cookies & similar technologies: see our Cookie Policy for details.

Information from third parties

We may receive information from analytics providers, payment processors, identity providers, and publicly available sources, in each case used in accordance with this Policy.

• to provide, operate, secure, and improve the Services;
• to respond to inquiries and provide customer support;
• to process payments, prevent fraud, and comply with financial regulations;
• to communicate with you about your account, projects, security alerts, and service updates;
• to send marketing communications where permitted (you may opt out at any time);
• to comply with legal obligations and enforce our agreements; and
• to develop, test, and improve our products, including AI systems, using data in aggregated or de-identified form.

Where the EU/UK GDPR applies, we rely on the following legal bases: (a) contract performance to deliver Services you request; (b) legitimate interests in operating, securing, and improving our business, balanced against your rights; (c) consent for non-essential cookies and certain marketing; and (d) legal obligation for tax, accounting, and compliance purposes.

We do not sell your personal information. We share it only as described below:

• Service providers: hosting, analytics, email, customer support, payment processors, and similar vendors acting under written agreements that restrict their use of the data.
• Professional advisors: lawyers, accountants, and auditors under confidentiality obligations.
• Compliance & safety: when required by law, subpoena, or to protect rights, property, or safety of Saber Holdings, our users, or the public.
• Business transfers: in connection with a merger, acquisition, financing, or sale of all or part of our business.
• With your direction: when you instruct us to share information with a third party.

We are based in the United States and may process personal information in countries that may not provide the same level of data protection as your country of residence. Where required, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses or equivalent mechanisms.

We retain personal information for as long as necessary to provide the Services, comply with legal obligations (including tax, accounting, and audit), resolve disputes, and enforce our agreements. When no longer needed, we delete or de-identify the data. Inquiry records are typically retained for 24 months; engagement records for 7 years from the close of the engagement.

We implement administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (TLS), access controls, least-privilege permissions, secrets management, logging and monitoring, and vendor due diligence. Saber Holdings invoices Clients directly and does not collect or store cardholder data on its own systems; any card payments made against an invoice are processed by a PCI-DSS compliant invoicing provider. No system can be 100% secure, and we cannot guarantee absolute security.

Depending on your jurisdiction, you may have rights to: (a) access the personal information we hold about you; (b) request correction of inaccurate data; (c) request deletion; (d) object to or restrict certain processing; (e) data portability; (f) withdraw consent where processing is based on consent; and (g) lodge a complaint with a supervisory authority.

U.S. state privacy rights (CCPA/CPRA, VCDPA, CPA, and similar): California, Virginia, Colorado, Connecticut, and Utah residents (among others) have rights to know, delete, correct, and opt out of certain processing. We do not “sell” personal information or share it for cross-context behavioral advertising as those terms are defined under California law.

To exercise any right, contact info@saber-holdings.com. We will respond within the period required by applicable law. We do not discriminate against users for exercising their privacy rights.

The Services are not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

We use AI systems internally and to provide certain Services. Where we make decisions about you that produce legal or similarly significant effects based solely on automated processing, we will obtain your consent or rely on another lawful basis, and provide meaningful information about the logic involved and the right to human review where required by law.

Our Services do not currently respond to “Do Not Track” browser signals. We honor recognized opt-out preference signals such as Global Privacy Control (GPC) where applicable.

We may update this Privacy Policy from time to time. We will post the updated version on this page with a new “Last updated” date and, where required, provide additional notice.

For privacy questions or requests, contact:

Saber Holdings LLC
Attn: Privacy Officer
info@saber-holdings.com