Privacy Policy

Effective date: May 9, 2026

SR Tech LLC (“SR Tech,” “we,” “our,” “us”) provides AI-assisted business assessments and an AI-driven business operations product (Riley) to small business owners. This Privacy Policy explains what we collect, how we use it, and the rights you have under U.S. state privacy laws.

1. Who we are

SR Tech LLC, [BUSINESS ADDRESS — fill before publish], United States.

For privacy questions, contact: legal@srtech.io.

2. What we collect

Information you provide:

• Email address
• Business owner name
• Business name and vertical (e.g., dance studio, law firm)
• Business intelligence you submit during the assessment: revenue ranges, staff and customer counts, billing software, churn signals, and other operational data
• Payment details (processed by Stripe — we do not store card numbers)
• Riley chat messages and uploaded documents (when applicable)

Information collected automatically:

• Usage analytics via Vercel Analytics (page views, referrers, device type)
• Email engagement (opens, clicks) via Resend
• Error reports via Sentry, which may include limited request and stack-trace data
• Rate-limit identifiers (IP addresses, customer IDs) via Upstash

AI-generated content: When you use Riley, we generate AI-driven content tailored to your business. The AI processes your inputs to generate outputs (emails, plans, recommendations). We retain both inputs and outputs to deliver service continuity.

3. How we use information

• Deliver and improve the assessment, Riley, and related services
• Generate AI-assisted recommendations, drafts, and operational plans
• Send transactional and product communications (receipts, account notices, weekly reports)
• Detect abuse, prevent fraud, secure the service
• Comply with legal obligations

We do not sell or share your information for cross-context behavioral advertising. We do not use your data to train third-party AI models.

4. Sub-processors

We rely on the following third-party processors to provide the service:

Each sub-processor is bound by their own data-processing terms. By using SR Tech, you consent to data processing by these sub-processors as necessary to deliver the service.

5. Cookies and tracking

We use minimal first-party cookies and Vercel Analytics for aggregate usage analytics. We do not use third-party advertising cookies. You can control cookies through your browser settings.

6. Your rights under U.S. state privacy laws

Residents of California, Virginia, Connecticut, Colorado, Texas, and other states with applicable privacy laws have the following rights:

• Right to know / access — request a copy of personal information we hold about you
• Right to delete — request deletion of your information
• Right to correct — request correction of inaccurate information
• Right to opt-out of sale or sharing— we don’t sell or share your information for cross-context behavioral advertising; this right is not applicable
• Right to opt-out of profiling for significant decisions — we do not use your data for legally significant automated decisions
• Right to non-discrimination — we will not discriminate against you for exercising these rights

To exercise any of these rights, email legal@srtech.io. We will respond within 45 days as required by law. We may verify your identity before fulfilling the request.

7. AI processing disclosure

Riley uses Anthropic’s Claude language models to generate content tailored to your business. Inputs you provide (assessment answers, chat messages, business data) are sent to Anthropic for inference and returned to you as AI-generated content. Anthropic does not use your data to train its models per its Commercial Terms.

You retain ownership of your inputs. AI-generated outputs are licensed to you for use in your business. You are responsible for reviewing AI-generated content before sending it to your customers or relying on it for business decisions.

8. Data retention

We retain personal information as long as your account is active or as needed to provide the service. Upon account closure, we delete personal information within 90 days, except where retention is required for legal, tax, or fraud-prevention purposes.

Anonymized aggregate data may be retained indefinitely for analytics.

9. Security

We implement reasonable technical and organizational measures to protect your information, including encryption in transit (TLS), encryption at rest (Supabase), access controls, and audit logging. No system is perfectly secure; we cannot guarantee absolute security.

10. Children

SR Tech is intended for business owners aged 18 and older. We do not knowingly collect information from children under 13. If you believe a child has submitted information to us, contact legal@srtech.io and we will delete it.

If you operate a business that serves children (such as a dance studio), you remain the data controller for any information about your customers’ children that you submit to SR Tech, and you are responsible for compliance with applicable laws (COPPA, FERPA).

11. Changes to this policy

We may update this Privacy Policy from time to time. The effective date at the top reflects the latest revision. Material changes will be communicated via email or in-app notice at least 30 days before taking effect.

12. Contact

legal@srtech.io

SR Tech LLC
[BUSINESS ADDRESS — fill before publish]