Privacy Policy
Last updated: July 18, 2026
This policy explains what personal information Stasis AI Consulting collects when you use this website, how we use and share it, and the choices and rights you have. Our whole model is private, local-first AI — protecting your data is the point, not an afterthought.
1. Who we are
Stasis AI Consulting ("Stasis", "we", "us") is an AI consulting practice based in the Commonwealth of Massachusetts, United States. For the personal information collected through this website, Stasis AI Consulting is the data controller.
The fastest way to reach us about privacy — including to exercise any right described below — is our contact form.
2. Information we collect
Information you give us
When you submit our audit request / contact form, we collect the name, work email address, and (optionally) company name and message you provide.
Information collected automatically
- Network and location data: your IP address and the country it resolves to, used to rate-limit and secure the form.
- Referral data: the page or campaign that referred you (referrer and any
utm_*parameters), recorded with your submission as its source. - Security cookie: Cloudflare Turnstile sets a strictly-necessary cookie to tell humans from bots. We use no analytics or advertising cookies.
3. How we use your information
- To respond to your inquiry and arrange your free AI audit.
- To contact you about the services you asked about.
- To secure the website and prevent abuse of the form.
- To keep ordinary business records of who we have spoken with.
We do not use your information for advertising, and we do not make automated decisions that produce legal or similarly significant effects about you.
4. Legal bases (GDPR / UK GDPR)
Where the EU or UK GDPR applies, we rely on: your consent (given when you tick the consent box and submit the form), and our legitimate interests in responding to inquiries, running our business, and keeping the site secure. You can withdraw consent at any time (see Section 8); doing so does not affect processing already carried out.
5. How we share your information
We never sell or rent your personal information. We share it only with the service providers ("sub-processors") that operate this site on our behalf:
- Cloudflare — website hosting, the Turnstile anti-bot check, and the database that stores your submission.
- Resend — sends us the notification email that tells us you got in touch.
We may also disclose information if required by law or to protect our legal rights.
6. Cookies
We use a single, strictly-necessary security cookie set by Cloudflare Turnstile to protect the form from automated abuse. Because we use no analytics, advertising, or tracking cookies, we do not show a cookie consent banner — strictly-necessary cookies do not require consent.
7. Data retention
We keep your submission for as long as needed to respond to you and to maintain reasonable business records. You may ask us to delete your information at any time (see Section 8), and we will do so unless we are legally required to keep it.
8. Your rights
Depending on where you live, you have some or all of the rights below. To exercise any of them, contact us through our contact form. We will not discriminate against you for exercising your rights, and we will respond within the time required by applicable law.
EU / UK (GDPR & UK GDPR)
You have the right to access, correct, erase, restrict, or object to our processing of your data; to data portability; and to withdraw consent. You also have the right to lodge a complaint with your local data protection supervisory authority.
California (CCPA / CPRA)
You have the right to know what personal information we hold about you, to have it deleted, and to correct it. We do not sell or share your personal information as those terms are defined under California law, so there is no "Do Not Sell or Share" action needed — but you may still contact us with any request, and we will not discriminate against you for it.
Canada (PIPEDA)
You have the right to access the personal information we hold about you and to challenge its accuracy. We handle your information on the basis of your consent and only for the purposes described here.
9. International transfers
We are based in the United States and our service providers process data in the United States. If you contact us from outside the U.S., your information will be transferred to and processed there.
10. Security
We protect your information with encryption in transit (TLS/HSTS), bot protection (Turnstile), rate limiting, and restricted access to submissions. No method of transmission or storage is perfectly secure, but private, local-first handling is central to how we work.
11. Children's privacy
This website and our services are directed to businesses, not to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be reflected on this page.
13. Contact us
Questions about this policy or your personal information? Reach us through our contact form.