Privacy Policy

Website and inquiry data. When you submit our contact form or otherwise reach out, we collect the information you provide: name, business name, email address, phone number, and a description of your operational pain points. We also collect standard technical data such as browser type and pages visited.

Client business data. During an engagement, we may access business records you authorize us to work with — for example, CRM entries, support tickets, call transcripts, meeting notes, scheduling data, and invoices — solely as needed to design, build, test, and maintain your automations.

System logs. Automations we build generate operational logs (timestamps, workflow execution records, error traces, and processing metadata). We use these logs to monitor reliability, debug failures, and improve the systems we maintain for you.

We use the information we collect to: (a) respond to inquiries and schedule automation audits; (b) scope, build, deliver, and support the services described in your Statement of Work; (c) monitor, secure, and troubleshoot deployed automations; (d) invoice and maintain business records; and (e) comply with legal obligations.

We do not sell your data. We do not use your business data or your customers' data for advertising, and we do not use client data to train machine-learning models.

Delivering AI automations requires routing certain data through vetted third-party infrastructure. Depending on your engagement, this may include:

Large language model providers (e.g., Anthropic, OpenAI). Where an automation calls an LLM API, the relevant data is transmitted to the provider for processing under commercial API terms that prohibit use of that data for model training. We minimize the data sent to what the automation requires.

Cloud hosting providers (e.g., Amazon Web Services, Google Cloud, Vercel). Automation code, configuration, and system logs are hosted on enterprise cloud infrastructure in United States data centers.

We enter engagements only with processors that maintain industry-standard security certifications and contractual confidentiality commitments. A current list of the processors specific to your engagement is available on request.

We apply administrative, technical, and physical safeguards proportionate to the sensitivity of the data we handle, including: encryption of data in transit (TLS) and at rest; role-based access controls limiting client data to personnel working on your engagement; unique credentials and multi-factor authentication on systems that store client data; and segregated storage of each client's materials.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a breach of security affecting personal information, we will notify affected clients and individuals as required by the Florida Information Protection Act (Fla. Stat. § 501.171) and other applicable law.

Website inquiry data is retained while we correspond with you and for up to two (2) years thereafter for business records. System logs are retained for ninety (90) days by default, unless a longer period is required for support commitments in your SOW. Client business data accessed during an engagement is deleted or returned within thirty (30) days after the engagement ends, except where retention is required by law or agreed in writing (for example, for ongoing maintenance).

When our automations process personal information belonging to your customers (for example, in a support-ticket automation), we act on your instructions as a service provider. You remain responsible for your own privacy notices and for obtaining any consents required from your customers. We process such data only to provide the contracted services and never for our own purposes.

Our website uses only the cookies necessary for it to function and, where enabled, privacy-respecting analytics to understand aggregate site usage. We do not use cross-site tracking or advertising cookies.

You may request access to, correction of, or deletion of the personal information we hold about you, subject to legal retention requirements. You may opt out of marketing communications at any time using the unsubscribe link in our emails or by contacting us directly. We will respond to verified requests within thirty (30) days.

Our website and services are directed to businesses and are not intended for individuals under 18. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised effective date, and active clients will be notified by email. Continued use of our website or services after changes take effect constitutes acceptance of the revised policy.

For privacy questions or to exercise your rights, contact: SSAI Solutions LLC d/b/a YourMainstreetAI, Orlando, Florida — contact@yourmainstreetai.com.