Who is responsible
Mostafa Abedi operates this website under the AB23 Technologies brand.
Information you provide
The inquiry form asks for your name, email address, inquiry category and message. Company, budget, timeline and website are optional. We also record a reference, submission time, inquiry status and the privacy notice version you read.
Please do not send passwords, confidential documents or sensitive personal information. This form does not accept attachments.
How information is used
Inquiry details are used to understand your request, respond, coordinate internal follow-up and maintain an appropriate record. This website does not send an automatic email receipt to visitors. An inquiry does not subscribe you to marketing. Staff may add internal notes about the conversation.
Services and processing locations
AB23 operates the application, database and staff sign-in on its own server. Cloudflare carries public website traffic and provides DNS, traffic protection and aggregate website analytics. These supporting services may process information globally; we do not promise that all processing occurs only in Canada.
Business email uses Google Workspace. Where enabled, AB23 sends inquiry notifications to authorized staff through Google Workspace. These notifications contain an inquiry reference and a private-dashboard sign-in link, not the visitor's message or contact details. This outbound connection does not read or synchronize inboxes, Google Drive files or calendars, and does not provide password recovery.
GitHub stores source code; inquiry records do not belong in source code or build artifacts.
The optional GitHub connection lets the Owner check metadata and recent issues from selected repositories. It is read-only: it cannot change code or issues, grant access, or dispatch deployments. It does not send inquiry records to GitHub.
Cookies and technical information
The public website does not enable advertising or nonessential third-party tracking. Staff sign-in uses essential session and sign-in cookies. Authentication tokens are not stored in browser local storage.
Limited technical information is used for abuse prevention and operational security. The design uses short-lived, hashed rate-limit identifiers and avoids recording full inquiry messages or raw personal data in application logs.
Retention and deletion
Inquiry records are retained for 365 days from submission. A separate agreement may cover records needed if an inquiry becomes a client engagement. Authorized staff can delete an inquiry earlier. Security audit records contain limited action metadata and have a separate 730-day retention period.
Deleting a live record does not instantly erase retained backups. Daily server backups are stored on AB23's separate desktop, with the seven most recent scheduled backups retained. Earlier recovery copies may be retained separately until their removal is approved. A restore must reapply deletion records before restored data is used. Operational logs are limited in size and rotated; they are not used to store passwords, authentication codes or full inquiry messages.
Your requests
You can ask about access, correction or deletion of your inquiry. Provide your inquiry reference if available. We may need to verify that a request concerns your own information.
Contact [email protected].
For general questions, use the contact page.
Changes to this notice
This page identifies the notice version shown. Material changes will be reflected in an updated notice before new collection practices take effect.