Privacy Policy

Information you give us:

• Free audit requests. Your name, business name, phone number, email address (optional), the service you’re interested in, and your message.
• Client portal accounts. Your account details, such as your name, email address, and business information, and the project information you add.
• Project files. Content, images, logos, and documents you upload or send to us.
• Payment information. Payments are handled by Stripe. We never store your card details; we receive records of your payments, such as amounts and dates.
• Communications. Emails, texts, calls, and other messages you exchange with us.

Information collected automatically:

• Usage data. Pages visited, time on the site, and the page that referred you.
• Device data. Browser type, operating system, and IP address.
• Cookies. Essential cookies keep you signed in to the client portal. When analytics is enabled, Google Analytics uses cookies to help us understand how visitors use the site. You can block or delete cookies in your browser settings, though some features, like signing in, may not work without them.

We use the information we collect to:

• Respond to your free audit request and contact you about it
• Set up, provide, and support the services you sign up for
• Run the client portal and store your project files
• Bill you and process payments
• Send transactional emails, such as receipts, project updates, and account notices
• Understand how the site is used and improve it
• Prevent fraud and abuse and comply with legal obligations

When a client uses our AI receptionist or automated follow-up, we process information about that client’s customers on the client’s behalf, including call and text content, names, and phone numbers. We use it only to provide the service to that client, such as answering calls, texting back missed callers, and booking appointments. This information is handled by third-party telephony, SMS, and AI model providers as needed to deliver the service.

The client is responsible for giving their own customers any notices or consents required where they operate, such as call-recording consent and SMS opt-in. If you are a customer of one of our clients and have a question about your information, please contact that business directly. We’ll help them respond.

When you submit the free audit form, you agree that we may contact you by phone, text, or email about your request. Message and data rates may apply.

• To stop texts, reply STOP to any message from us.
• To stop all contact, email contact@sulo.dev and we’ll remove you from phone, text, and email contact.

We don’t sell or share your mobile number or text-messaging consent with third parties for their marketing purposes.

We do not sell your personal information. We share it only with the service providers that help us run our business, and only as needed for them to do their job:

• Stripe for payments and billing (Stripe’s privacy policy)
• Resend for transactional email
• Supabase for client portal accounts, project data, and file storage
• Vercel for website hosting
• Google Analytics for site analytics, when enabled
• Telephony, SMS, and AI model providers to run the AI receptionist and text messaging features

We may also disclose information if required by law or court order, or when needed to protect our rights, property, or safety or that of others.

We use encrypted connections (HTTPS) for data in transit, rely on established providers for hosting, storage, and payments, and limit access to personal information to what’s needed to do the work. No method of transmission or storage is completely secure, so we can’t guarantee absolute security.

We keep personal information only as long as we need it for the purposes above or to meet legal obligations:

• Client and project data: for the length of your engagement plus 1 year
• Financial records: 7 years, for tax and legal requirements
• Marketing communications: until you unsubscribe
• Inactive portal accounts: may be deleted after 3 years of inactivity
• Information we process for clients (section 3): as long as needed to provide the service to that client, or as the client instructs

Depending on where you live, you may have the right to:

• Access a copy of the personal information we hold about you
• Correct information that is inaccurate
• Delete your information, subject to legal requirements
• Opt out of marketing messages and texts
• Receive your data in a portable format
• Object to certain uses of your information

To make a request, email contact@sulo.dev. We may need to verify your identity before acting on it, and we’ll respond within 30 days.

If you live in California, the California Consumer Privacy Act gives you the right to:

• Know what personal information we collect, use, and disclose
• Request deletion of your personal information
• Correct inaccurate personal information
• Opt out of the sale of your personal information (we don’t sell it)
• Not be discriminated against for exercising these rights

To exercise any of these rights, email contact@sulo.dev.

Our website and services are not intended for anyone under 18, and we don’t knowingly collect information from children. If you believe a child has given us information, please contact us and we’ll delete it.

Sulo.Dev is based in the United States and serves businesses in the United States. If you use our website from outside the U.S., your information will be transferred to, stored, and processed in the United States.

We may update this Privacy Policy from time to time. When we do, we’ll post the new version on this page with a new “Last updated” date, and we’ll email active clients about significant changes.

Questions or requests about your information? Get in touch: