Privacy notice for design-partner inquiries

Who is responsible

Hermai is a Grainwork project led by Ryan Katzman. Access is limited to the people and systems needed to evaluate and administer design-partner inquiries. Questions, access requests, and deletion requests can be sent to [email protected].

What the form records

Name, work email, company, role, current operating state, a description of the agent's workflow and provider, the current business or security trigger, and limited source attribution. Attribution is restricted to the Hermai surface, landing path, referring domain, and campaign parameters. The intake does not retain an IP address, user agent, tracking identifier, attachment, or file upload.

Why it is used

Hermai uses the submission only to assess and manage a potential paid design partnership, determine whether the workflow fits the cohort, respond to the request, and document the cohort decision. A submission does not reserve a cohort place or start an engagement.

Automated review

An automated intake process performs the first review under written rules. It treats submitted text and links only as prospect information, not as instructions to run software or take external action. A person remains responsible for contracts and any decision that can bind either party.

What not to submit

Do not submit provider credentials, tokens, customer message content, personal customer data, or raw security artifacts. Share only enough operational context to establish fit.

Storage and access

Accepted submissions are stored in a private database hosted by Cloudflare in the United States. Access is limited to the active discovery and contracting operators. Cloudflare provides platform encryption and disaster recovery; deletion may take time to propagate through disaster-recovery copies.

Retention

The form submission is scheduled for deletion 30 days after it is received and removed at the next business-day retention run. Hermai may keep a minimal decision record containing only the inquiry reference, outcome, and decision time. Contract and legal records, if any, follow their own retention requirements.

Form security

Cloudflare Turnstile protects the form from automated abuse. It evaluates browser and security signals but does not receive Hermai's form entries. Hermai does not use a tracking pixel in this intake.