Privacy Policy

Unpromptable Assets builds private AI systems and business assets for coaches, consultants, and service businesses. This policy explains what we collect through this website, how we use it, and what choices you have.

This policy covers this website and initial inquiries. Client engagements may include additional data terms in a separate written agreement.

Information we collect

When you contact us, we collect information you choose to send: name, email address, business type, business stage, budget range, service interest, message, and any project context you include.

We may also receive basic technical data from your browser or device, such as IP address, user agent, referring page, pages viewed, timestamps, and approximate location derived from technical data. We use this for security, analytics, spam prevention, and site operation.

How we use information

We use contact information to read your inquiry, respond, assess fit, scope possible work, schedule calls, send transactional follow-ups, and keep basic business records.

We use technical information to operate the site, understand aggregate site performance, prevent abuse, debug problems, rate-limit requests, and protect forms.

If you become a client, project data, source material, credentials, documents, workflows, and AI-system inputs are handled under the separate written agreement for that engagement.

AI and automation use

We may use internal automation to route, summarize, tag, or prioritize inquiries. We do not use contact-form submissions to train public AI models for Unpromptable Assets.

Do not send confidential, regulated, highly sensitive, or third-party personal information through public forms. Use forms for initial scoping only.

For paid work, we may process client-provided material through selected AI, automation, hosting, storage, and development tools as needed to perform the work. Access, permissions, data handling, and approved tools should be documented in the project agreement or implementation notes.

Service providers

We may share information with vendors that help us run the website and business, such as website hosting, analytics, form handling, email delivery, rate limiting, scheduling, document storage, security, and professional-advisor tools.

Current or expected providers include Vercel for hosting and analytics, Resend for transactional email, Upstash for rate limiting, and scheduling tools if you book a call. These providers process information for us or under their own policies where applicable.

Analytics, cookies, and tracking

We may use privacy-respecting analytics to understand traffic and improve the site. Analytics may collect pages visited, browser, device, referral source, approximate location, and event data.

We do not use this site to sell personal information. We do not currently run behaviorally targeted ads. If this changes, this policy should be updated before that activity starts.

Some browsers send Do Not Track signals. There is no common industry standard for responding to them, so this site does not currently respond to those signals.

How we share information

We do not sell your contact-form submissions.

We may share information with service providers, professional advisors, legal authorities when required, or a successor if the business is reorganized, merged, or transferred.

We may publish testimonials, case studies, logos, names, screenshots, or project details only when we have permission or when material is anonymized, aggregated, public, or representative rather than client-identifying.

Email communications

We may send transactional emails about inquiries, scheduling, proposals, and project conversations. We send marketing emails only where allowed and will provide opt-out instructions for non-transactional email.

You can ask us to stop non-transactional messages at any time.

Retention

We keep inquiry records while useful to respond, manage relationships, maintain business records, resolve disputes, and comply with legal obligations. Lead records are generally kept no longer than needed for those purposes.

Spam, rate-limit, and security logs are kept for shorter periods where practical. You can ask us to delete contact-form information, but we may keep limited records where needed for security, legal, tax, accounting, or legitimate business reasons.

Security

We use reasonable technical and organizational measures to protect information, including limited access and vendor controls where appropriate. No website, email system, AI tool, or internet transmission is perfectly secure.

For client projects, security expectations should be set in the project scope, including access controls, credential handling, approved tools, human review points, and handoff practices.

Your choices and privacy rights

You may ask to access, correct, delete, or receive a copy of personal information you have provided to us. You may also ask us to stop contacting you.

Depending on where you live, privacy laws may give you additional rights, including rights to know what we collect, delete data, correct data, opt out of certain sharing or targeted advertising, limit sensitive-data use, withdraw consent, or appeal a denied request. We will respond to valid requests as required by applicable law and may need information to verify your identity.

International visitors

We are based in the United States. If you contact us from outside the United States, your information may be processed in the United States and other places where our service providers operate.

Where laws such as the GDPR apply, we rely on appropriate legal bases such as consent, contract steps requested by you, legitimate interests in operating and securing the site, and compliance with legal obligations.

Children

This site is for business audiences. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

If you believe a child sent us personal information, contact us and we will take appropriate steps to delete it.

Changes

We may update this policy as our site, services, vendors, or legal obligations change. The updated date shows when the current version took effect. For material changes, we may add additional notice where appropriate.

Contact

Privacy requests and questions can be sent to james@unpromptable.dev.

For project inquiries, use the contact page.