Draft — a lawyer must review this document before launch.
Privacy Policy
Draft dated November 3, 2026
Who we are
stuson is a service of STUSON LLC, a Wyoming company. We build and maintain website assistants for small businesses. Contact us at contact@stuson.com about this policy or your information.
Information we collect
When you request a demo, we collect your website URL, name, email, business type, questions and consent. If you ask for a human reply, we collect the contact details and question you provide, plus the chat transcript. We use these details to prepare your demo, answer you and provide the service. Please do not send medical records, financial records, passwords or payment card details.
Chats and service providers
In this preview, scripted demo chats run in your browser. In live mode, chat messages and a random visitor identifier are sent through our server to Dify and the configured AI provider, OpenAI. Dify may keep conversation logs. A handoff sends the transcript to our team through Resend. Cloudflare Turnstile checks submissions for abuse, and Upstash stores short-lived rate-limit counters. Providers process information under their own terms and our service settings. Information may be processed in the United States and other countries, including where we work in Asia.
Browser storage and analytics
We store the current conversation in session storage and a random visitor identifier in local storage. You can reset the chat or clear your browser storage. When enabled, Plausible provides aggregate, cookieless traffic and event analytics. We do not send form values, contact details or chat text as analytics properties. We do not use advertising cookies.
Retention — draft settings to confirm before launch
The proposed retention is 12 months after the last contact for demo requests and handoff emails, 90 days for live demo conversation logs, and 30 days for technical request logs. Rate-limit counters expire within 24 hours. Chat session storage lasts until you close the browser tab or reset the chat; the local visitor identifier lasts until you clear site storage. These retention settings must be configured and confirmed in each provider before launch. Contract, invoice and legally required records may be retained longer. We do not save message text in our own application request logs.
Sharing and security
We do not sell your personal information or share it for targeted advertising. We share it with the service providers needed to run this service, or when required by law. Access is limited to people who need it. No system can promise perfect security.
Your privacy choices
Depending on your location and applicable law, you may ask to access, correct, delete or receive a copy of your personal information, or appeal a decision about a request. California residents may have rights to know, delete, correct, opt out of sale or sharing, limit certain uses of sensitive information and receive equal treatment. The availability of these rights depends on whether the relevant law applies. Email contact@stuson.com to make a request or withdraw consent to demo emails. We may need to verify your identity and will respond within the period required by applicable law.
Children and updates
This service is intended for business owners, not children under 13. If you believe a child has sent us information, contact us so we can address it. We will post changes to this policy here with a revised date.