Privacy Policy

Last updated: October 23, 2026

Ballast Engineering LLC ("Ballast", "we", "us") respects your privacy. This policy explains what information we collect, how we use it and how we protect it.

1. Information we collect

• Contact information: name, email, company and any details you share when you book a call, email us or hire our services.
• Billing information: payments are processed by Stripe or received by bank transfer. We do not store full card numbers; Stripe handles card data under its own privacy policy.
• Website usage data: we use Google Analytics and Cloudflare Web Analytics to measure how visitors use our website (pages viewed, approximate location, device and browser). It relies on cookies and similar technologies and is reported to us in aggregate. Cloudflare Web Analytics does not use cookies or track individual visitors across sites. You can opt out of Google Analytics through your browser settings or Google's opt-out add-on.
• Client source code and technical data: repositories, configurations and related technical information you provide so we can perform our services.

2. How we use your information

We use your information only to provide our services, operate Ballast's tools, communicate with you about your project, and meet legal and accounting obligations. We do not use client information, including source code, for advertising, and we do not sell, rent or share it with third parties for their own purposes. We use aggregated website analytics to understand and improve our website and to measure our own marketing. We contact clients only when the work requires it, through the channels they have provided.

3. Source code confidentiality

• Client source code is analyzed exclusively within our Amazon Web Services (AWS) environment, by our engineer and by AI-assisted tools powered by Amazon Bedrock. Source code is not copied to infrastructure outside our AWS environment, including personal devices.
• According to AWS, Amazon Bedrock does not share data with model providers or use it to train foundation models, and data is encrypted in transit and at rest.
• Client source code is kept private, is used only to perform the contracted services, and is never used to train AI models.
• Access is limited to the people working on your project.
• We delete your source code from our environment within thirty (30) days after the engagement ends, unless you ask us to keep it for ongoing work.

4. Service providers

We use these providers to operate our business, each under its own privacy and security terms:

• Stripe (card payments) and our bank (payments received by bank transfer)
• Cal.com (call scheduling)
• Amazon Web Services, including Amazon Bedrock (hosting and code analysis)
• GitHub (repository access)
• Google Workspace (email)
• Google Analytics and Cloudflare Web Analytics (website analytics)

5. Data retention

We keep contact and billing records as long as required for legal, tax and accounting purposes. Source code is retained as described in section 3.

6. Your rights

You can request access to, correction of or deletion of your personal information by emailing daniel@ballastengineering.com. We will respond within thirty (30) days.

7. Security

We use reasonable technical and organizational measures to protect your information, including access controls and encryption in transit and at rest.

8. Changes

We may update this policy and will post the new version on this page with its effective date.

Contact

Ballast Engineering LLC 30 N Gould St Ste N, Sheridan, WY 82801, USA daniel@ballastengineering.com