Privacy Policy

Turn On AI Last updated: [DATE]

This page explains what we collect, why, and who helps us. [ENTITY NAME, a Texas limited liability company], doing business as Turn On AI, runs this site ("we," "us").

The short version

• We collect only what you give us, plus basic site logs.
• We use it to answer you and do the work you asked for.
• We don't sell your data. We don't share it for anyone else's ads.
• We never ask for your passwords.
• Texts from us are results only. Reply STOP anytime.

1. What we collect

When you visit the site

• Basic technical info our host (Vercel) logs automatically: your IP address, browser type, the pages you visit and when.
• Google Analytics. We use it to count visits and see which pages people read and where they came from. It sets cookies in your browser and sends Google your device and browser details, an approximate location and the pages you view. We don't send Google your name, email or phone number. You can block it with your browser's cookie settings or Google's opt-out add-on (tools.google.com/dlpage/gaoptout).

When you use the chat

• What you type, and what the assistant answers.
• If you leave your email or phone number in the chat, we email ourselves a copy of the whole chat so a person can follow up.
• Please don't type passwords, card numbers or private customer details in the chat.

When you fill out a form (free phone test, contact, checkup)

• Your name, business name, email, cell number, and your shop's phone number.
• Whether you said yes to emails about our services.
• Your OK for the phone test, with the date and time.

When you buy a checkup, Setup or the monthly plan

• Billing name, business name, email and billing address.
• Card details go straight to Stripe. We never see or store your full card number.
• Screenshots and notes you send us about your software and phone setup. These may show your customers' names, phone numbers or jobs. Please blur what we don't need.
• For Setup and monthly clients: what we see while working in your software account, with the user access you give us.

What we don't collect

• Passwords. We never need them.
• Recordings of the free test call. We don't record it.

2. How we use it

• To answer your questions and follow up when you ask us to.
• To run the free phone test and send you the results.
• To do the checkup, Setup or monthly work you paid for.
• To bill you, send receipts and handle refunds.
• To send you emails about our services, only if you said yes. Every email has an unsubscribe link.
• To keep the site safe and fix problems.
• To follow the law.

We don't use your customers' information for anything except your job. We never use one client's customer information for another client or for our own marketing.

3. Texts

• We text only the cell number you give us, only the results of the free phone test or updates about work you asked for.
• No sales pitches by text.
• Reply STOP to stop. Reply HELP for help. Msg & data rates may apply.
• We don't share your cell number or your texting OK with anyone for their marketing.
• [OPS: name the texting service here once picked. If texts are sent by hand from a business phone, say so.]

4. Who helps us run things

We use a few companies to run the site and the business. They get only what they need to do their job for us.

Anthropic says it does not use inputs and outputs from its commercial products to train its models by default. [OPS: re-check Anthropic's commercial terms before launch; it's the vendor's policy, not ours.]

We may also share information:

• If the law requires it, like a court order.
• To protect our rights or someone's safety.
• If our business is sold or merged. The new owner would have to follow this policy.

We don't sell personal information. We don't share it for targeted ads.

5. How long we keep it

[ATTY/CHRIS: confirm these periods.]

• Chat transcripts with no contact info: we don't store them ourselves. [OPS: confirm the site keeps no chat log, and check Vercel log retention.]
• Leads and form sign ups that don't become clients: up to [12 months] after our last contact.
• Checkup screenshots and notes: we delete them [90 days] after we send your report, unless you become a client.
• Client records: for as long as you're a client, then [3 years] for billing and legal records. Tax records as long as the law requires.
• Free phone test notes: [12 months], then deleted.

6. How we protect it

We use accounts with two factor sign in, give ourselves only the access we need, and keep client information off personal devices and personal AI chats. No system is perfect. If your information is involved in a breach, we'll tell you as the law requires.

7. Your choices

• Unsubscribe from emails with the link in any email.
• Stop texts by replying STOP.
• Ask us to see, fix or delete your information. Email [PRIVACY EMAIL]. We'll answer within [30] days. We may need to keep some records for billing or the law.
• Remove our access to your software account anytime.

8. Kids

This site is for businesses. It isn't meant for anyone under 18. We don't knowingly collect information from children.

9. Changes

If we change this policy, we'll update the date at the top. If it's a big change, we'll email clients first.

10. Contact

Turn On AI [ENTITY NAME, a Texas limited liability company] 6060 N. Central Expressway, Suite 770, Dallas, TX 75206 [PRIVACY EMAIL]

Lex note for the attorney (not for the website)

Does the Texas Data Privacy and Security Act (TDPSA) apply? Most likely no, with one small exception.

1. Small business exemption. TDPSA "applies only to a person that ... is not a small business as defined by the United States Small Business Administration," "except to the extent that Section 541.107 ... applies." Tex. Bus. & Com. Code § 541.002(a)(3) [V]. A one person Texas LLC is far under any SBA size standard for computer or consulting services [B; confirm NAICS code and current cap at sba.gov].
2. The one rule that still applies to small businesses: a small business "may not engage in the sale of personal data that is sensitive data without receiving prior consent from the consumer." § 541.107(a) [V]. We don't sell any data, and we don't collect sensitive data (health, race, religion, precise location, kids' data, etc. per § 541.001) [V]. So it isn't triggered. Keep it that way: decline health data, and never sell lists.
3. Most of our contacts aren't TDPSA "consumers" anyway. A consumer is a Texas resident "acting only in an individual or household context," and "does not include an individual acting in a commercial or employment context." § 541.001 [V]. Shop owners filling out a business form are acting in a commercial context. The exception: our clients' own customers (homeowners) whose names show up in screenshots or in the client's software. For that data, we're a "processor" for the client (§ 541.001; § 541.104), so the client agreement needs data processing terms. See msa-outline.md.
4. We're writing this policy anyway because (a) Stripe, ad platforms and carriers expect one, (b) texting registration (10DLC) expects a privacy policy with no sharing of mobile opt in data [B], and (c) FTC Act § 5 holds us to what this page says. Don't promise anything here we don't do.
5. Other states: California's CCPA and similar laws apply by revenue or data volume thresholds we won't hit [B, ATTY to confirm].
6. Breach notice: if we hold client data and it's breached, Texas requires us to notify the data owner (the client) promptly; the owner handles notice to individuals and the AG (Tex. Bus. & Com. Code § 521.053) [B, from 10/20 memo].

Sources: Scratchpad/Project-X/sources/lex-policies-2026-10-27/source-excerpts.md.