Privacy Policy

Overview

Sumtek Solutions ("we," "us," or "our") operates sumtek.ai — our business website and the client portal we use to deliver web design and development services. This policy describes what information we collect across both, how we use it, and the choices you have.

We are a B2B consulting business. We collect the information needed to respond to inquiries, deliver projects, bill for our work, and keep the service secure. We do not sell personal information, and we do not use it for third-party advertising.

Information We Collect

Inquiries and Project Requests

When you submit our contact form, request an estimate or design mockup, or start a project through our website, we collect the details you provide: your name, email address, company name, phone number (optional), your U.S. business state, your message or project description, and any design preferences you select. These submissions are stored in our systems and delivered to our inbox so we can respond.

Client Portal Accounts

If you use our client portal, we collect your email address, name, and sign-in records. You can sign in with an emailed magic link, with Google or Apple (we receive only your name and email address from them and do not store their access tokens), or with a passkey. For passkeys we store only the public key and a device label you choose — biometric data never leaves your device.

Client and Billing Records

For active engagements we keep client records (company details, phone, mailing address) and billing records (invoices, payments, refunds). Card and bank details are entered directly with our payment processors and are never stored on our servers — we keep only payment references issued by the processor.

Messages and Project Content

Messages you exchange with us in the portal, project feedback, milestone approvals, and content you share for your project are stored as part of your engagement record.

Service and Security Records

We keep account-activity logs for security, support, and record-keeping — including the IP address recorded when you approve a proposal electronically. Short-lived rate-limiting records (IP addresses and email addresses used to throttle abuse) are kept for roughly one hour.

Automatically Collected Information

Our website is hosted on Cloudflare. We use Cloudflare Web Analytics, a cookieless, privacy-first service that collects anonymized performance and usage data and does not share data with advertisers. Cloudflare also collects standard server logs (IP address, browser type, pages visited) as part of hosting and security services, and Cloudflare Turnstile verifies that you are not a bot on our forms. We use Sentry for error monitoring: if a page error occurs, diagnostic data — which may include a replay of your interaction with the affected page — is captured so we can diagnose and fix the problem.

AI-Assisted Features

Project descriptions you submit for instant estimates or design mockups are processed by Anthropic (our AI provider) to generate the estimate or design. This processing happens through Anthropic's business API, and we do not use your information to train AI models.

How We Use Your Information

• To provide and operate our services — the portal, your projects, mockups and prototypes you request
• To bill for our work: invoices, receipts, payment reminders, and retainer billing
• To respond to inquiries and provide support
• To send service communications, including follow-ups about mockups or prototypes you requested — you can opt out of follow-ups any time by replying or emailing hello@sumtek.ai
• To secure the service: fraud prevention, abuse protection, and audit logging

We do not sell or rent personal information, and we do not use it for third-party advertising.

Administrative Access

Authorized Sumtek Solutions personnel may access account data as needed to provide support, operate, and secure the service. Administrative access to a client's portal view is logged, and viewing a client's account in this way is read-only.

Data Sharing

We share personal information only with the service providers that make the service work:

• Cloudflare — hosting, data storage, analytics, and bot protection
• Stripe — card and bank (ACH) payment processing; Stripe may also email you hosted invoices and receipts directly
• Strike — Bitcoin (Lightning) payment processing, where offered
• Resend — email delivery
• Google and Apple — only if you choose to sign in with them
• Anthropic — AI generation of estimates and design mockups from descriptions you submit
• Sentry — error monitoring and diagnostics

Data Retention

Account, project, and message records are retained while your account or engagement is active and for a reasonable period afterward. Invoice and payment records are retained as business and tax records for as long as the law requires. Inquiry submissions are retained until no longer needed for follow-up and record-keeping.

Your Rights

You can view and update your profile information directly in the portal. You may request a copy of your information, a correction, or deletion by emailing hello@sumtek.ai. We will respond within 30 days. Deletion requests are honored except for records we are required to keep (such as tax and accounting records).

Children's Privacy

Our website and portal are B2B business services and are not directed at children. We do not knowingly collect information from anyone under the age of 18.

Cookies

We use a small set of first-party cookies that are strictly necessary for sign-in and security — no advertising or cross-site tracking cookies. See our Cookie Policy for the full list.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "last updated" date.

Contact

If you have questions about this privacy policy, contact us at: hello@sumtek.ai