Privacy Policy

Who we are

Mayhem Shield, LLC is a Texas limited liability company providing buyer-side AI deployment assurance services. This policy describes how we handle information in connection with this website and our business operations.

Two different roles

We handle information in two capacities, and different rules apply to each.

As a controller. For website visitors, inquiries, scheduling, contracting, and billing, we decide how the information is used. That processing is covered by this policy.

As a processor. For materials a client shares during an engagement, the client decides how the information is used and we act on their documented instructions. That processing is governed by the client agreement and our Data Processing Addendum, and is described on our security and data handling page, not by this policy.

What we collect

• Information you give us: name, business contact details, company, role, and whatever else you include when you contact us, book a call, or enter into an engagement.
• Website usage data: limited usage statistics described in the next section.
• Engagement materials: documents and evidence provided under a client agreement, handled as described on our security page.

Cookies and analytics

We set no cookies of our own, and we do not use advertising cookies, cross-site tracking, or third-party marketing pixels. We use one privacy-oriented analytics tool and one embedded scheduler, described below.

Vercel Web Analytics. Vercel processes request information to produce aggregate usage statistics. Per Vercel's published documentation it sets no third-party cookies, identifies visitors by a hash derived from the incoming request, and discards that visitor session automatically after 24 hours.

Calendly. Our contact page embeds the Calendly scheduler directly in the page, so it loads Calendly resources in your browser, receives your booking details directly, and may set its own cookies within that embedded frame under its own privacy policy.

Fonts are self-hosted and served from our own domain, so loading a page does not send your details to a font provider.

How we use information

We use information to respond to inquiries, schedule discovery calls, deliver and administer services, issue invoices, maintain security, improve the site, and comply with legal obligations. We do not sell or share personal information, and we do not use it for targeted or cross-context behavioral advertising.

Where the GDPR or UK GDPR applies, we rely on legitimate interests for operating and securing the site and responding to business inquiries, contractual necessity for delivering engagements and billing, and legal obligation where retention or disclosure is required by law.

Service providers

These providers process information on our behalf under their own terms and are not permitted to use it for their own purposes.

• Google Workspace: business email and file storage, including engagement materials.
• Anthropic: enterprise AI-assisted analysis and drafting for engagement content submitted under client instructions. Clients may opt out. See our security page for the full disclosure.
• Vercel: website hosting and the analytics described above.
• Calendly: meeting scheduling through the embedded scheduler on our contact page.

Vercel and Calendly are not used as repositories for client engagement materials.

International transfers

Mayhem Shield is established in the United States and information we hold is processed there. If you are in the European Economic Area, the United Kingdom, or Switzerland, transferring your information to us is a restricted transfer under your local law.

For client engagements, our Data Processing Addendum incorporates the EU Standard Contractual Clauses, the ICO International Data Transfer Addendum for the United Kingdom, and the Swiss adaptations to the EU clauses, as applicable. Clients can request the transfer information they need for their own assessments.

How long we keep information

• Analytics: Vercel discards the visitor session after 24 hours. We hold no other website usage data.
• Engagement materials: 90 days after engagement close by default, then deleted within 30 days, unless the client agreement specifies otherwise.
• Inquiries and business records: for as long as necessary for the purposes described above and to meet our legal, tax, and contractual obligations.

Your rights

Depending on where you live, you may have rights to access, correct, delete, port, restrict, or object to processing of your personal information, to opt out of sale or sharing (we do neither), and to appeal a decision on your request. We will not discriminate against you for exercising these rights.

To make a request, email tkadandara@mayhemshield.com. We may need to verify your identity before responding. If your information reached us inside a client's engagement materials, we will refer your request to that client, who is the controller, and assist them in responding.

Changes to this policy

We review this policy annually or when our practices change materially, whichever comes first. The date at the top reflects the most recent update.

Contact

For privacy-related requests, email tkadandara@mayhemshield.com or call (469) 237-8537.