Legal
Privacy notice
Last updated 6 October 2026
This notice explains how Involabs ("we", "us") handles personal data collected through this website. It does not cover data we process on behalf of clients during an engagement, which is governed by the contract with that client.
Who we are
Involabs is a data and applied AI engineering company based in Pakistan. For any privacy question, contact contact@involabs.ai.
What we collect
- Contact form: your name, work email, company, optional role and topic, and your message. We also store the page you submitted from, the time, and a one-way hash of your IP address used only for spam and abuse protection.
- Email: anything you send us directly.
- Analytics: only if you accept in the cookie banner, we use Google Analytics to understand how the website is used. Google Analytics sets first-party cookies (named
_ga) and records pages viewed, referrers, approximate location, device and browser type. We do not use it for advertising, and advertising features are switched off. If you reject, no analytics cookies are set and nothing is sent to Google. You can change your choice at any time with "Cookie settings" in the footer. Google acts as our service provider; see Google's privacy policy. - Server logs: our hosting provider keeps standard web server logs, including IP addresses, for security and reliability, for a limited period.
How we use it and why
- To reply to your enquiry and discuss a possible engagement. The legal basis is our legitimate interest in responding to requests, or steps taken at your request before entering a contract.
- To protect the website from spam and abuse, on the basis of legitimate interest.
- To understand how the website is used so we can improve it, on the basis of your consent, which you can withdraw at any time.
We do not sell personal data, use it for advertising, or add you to a mailing list.
Who we share it with
Only the service providers needed to run the website and our email: our web hosting provider (Hostinger), our email provider, and our analytics provider if one is in use. They process data on our instructions. We may disclose data if required by law.
International transfers
Our team and some providers are located outside your country, including in Pakistan and the European Union. Where required, we rely on appropriate safeguards for these transfers.
How long we keep it
Enquiries that do not lead to an engagement are deleted within 24 months of our last contact. Enquiries that become engagements are kept for the life of the relationship and as required for legal and accounting purposes.
Your rights
Depending on where you live, including under the GDPR, UK GDPR and Saudi PDPL, you may have the right to access, correct, delete or export your personal data, to object to or restrict processing, and to complain to a data protection authority. To exercise any of these rights, email contact@involabs.ai. We respond within one month.
Security
The website is served over HTTPS with strict security headers. Form submissions are stored outside the public web directory with restricted access. See our security and trust page for how we approach security more broadly.
Changes
We will update this notice when our practices change and revise the date above.