PrivacyPolicy.
What we collect, why we collect it, how long we keep it, who else sees it, and the rights you can exercise over your data.
Effective May 2026
Data We Collect
We collect personal information only when you voluntarily provide it: typically your name, email address, company, and message content when you submit our contact form, request a lead-magnet download, or chat with our AI agent. Our servers also record standard log data (IP address, browser user-agent, pages visited, timestamps) for security, abuse prevention, and operations. We do not sell, rent, or trade your personal information.
How We Use It
We use the information you provide to:
- Respond to your inquiry or fulfill a request you made.
- Send the lead-magnet content you asked for.
- Operate, secure, and improve the site and its tools.
- Comply with legal obligations.
We do not use your data for advertising, profiling, or to train AI models. The legal basis for processing under GDPR is either your consent, performance of a request you initiated, or our legitimate interest in running a secure website.
Cookies & Analytics
We use Google Tag Manager and Google Analytics to collect aggregated usage data (page views, traffic patterns, anonymized device and browser info). We do not use advertising cookies or cross-site tracking.
EEA visitors: We implement Google Consent Mode v2. A consent banner appears on your first visit and no analytics cookies are set until you accept. You may decline and analytics will remain disabled; the site will continue to function.
All other visitors: Analytics cookies are enabled by default, consistent with applicable local regulations.
Data Retention
We keep personal data only as long as it serves the purpose for which it was collected, unless a longer period is required by law. Typical retention windows:
- Contact-form submissions and lead-magnet leads: up to 24 months, then deleted, unless you request earlier deletion.
- AI-agent conversations: held only for the active session; discarded when the session ends.
- Analytics data: follows Google Analytics retention defaults (currently 14 months).
- Server access logs and CDN logs: up to 30 days, retained for security and abuse prevention.
Sharing & Sub-processors
We share personal data with third-party service providers only where necessary to operate the site, for example, our hosting provider, analytics provider, and the database that backs the public Pricing Index. A current list of these processors, including their purpose and region, is published at /legal/sub-processors.
We may also disclose information if required by law, to respond to lawful requests from public authorities, or to protect our rights, property, or safety.
International Transfers
Suan Digital LLC is based in the United States, and several of our sub-processors operate globally or are based in the US. If you are located in the European Economic Area, the United Kingdom, or Switzerland, your data may be transferred to and processed in countries outside your jurisdiction. We rely on each sub-processor's published safeguards (typically Standard Contractual Clauses or the EU-US Data Privacy Framework) for those transfers.
Your Rights (GDPR)
If you are in the EEA, the UK, or Switzerland, you have the following rights over the personal data we hold about you:
- Access: request a copy of your data.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request deletion ("right to be forgotten").
- Restriction: limit how we process your data.
- Portability: receive your data in a machine-readable form.
- Objection: object to processing based on legitimate interest.
- Withdraw consent: at any time, without affecting prior processing.
- Lodge a complaint with your local data protection supervisory authority.
To exercise any of these rights, email [email protected]. We will respond within 30 days.
Your Rights (CCPA)
If you are a California resident, the California Consumer Privacy Act gives you the right to:
- Know what personal information we collect and how we use it.
- Request deletion of your personal information.
- Opt out of the sale of your personal information; we do not sell personal information.
- Non-discrimination for exercising any of these rights.
Submit a verifiable consumer request to [email protected].
Children, Changes & Contact
This site is not directed to children under 16; we do not knowingly collect personal information from them. We may update this policy as the site evolves; material changes will be reflected in the effective date above. For privacy questions or rights requests: [email protected].