Privacy policy.
What we collect, why, where it lives, and how to ask us to delete it — written in plain English for the people who actually read these.
Who we are
Gulf Stream Automation, LLC ("Gulf Stream," "we," "us") is a Florida limited liability company headquartered at 9587 Tower Ridge Road, Pensacola, FL 32526. We design and install AI automation systems for service businesses — reactivation chains, voice receptionists, quote engines, onboarding flows, and the underlying integrations that make them run. Our consumer-facing sub-brand, Summit Intake Solutions, operates under its own privacy policy for its dedicated audience; the policy you are reading governs gulfstreamautomation.com and direct engagements with Gulf Stream Automation.
What we collect
Information you provide
When you book an audit, fill out a contact form, send us email, or sign an engagement, you provide information directly. That commonly includes your name, business name, role, email address, phone number, the message you wrote, and any contextual selections you made on the form (industry, system stack, budget range, time zone). For active engagements, you may also share access credentials, configuration data, sample transcripts, and operational records necessary for us to deliver work. We collect only what we need for the next step.
Information collected automatically
Our hosting provider (Cloudflare) and our analytics tool (Cloudflare Web Analytics, which is privacy-preserving and cookie-less) record technical request information: IP address, browser and operating system, referring URL, device characteristics, and approximate geographic region inferred from IP. We do not use Google Analytics, Meta Pixel, LinkedIn Insight, or any third-party advertising tracker. We do not fingerprint visitors. We do not build behavioral profiles for ad targeting.
Source and intent metadata
Every form submission is tagged with the URL it came from and a coded intent (e.g. src:website-audit, intent:partnership) so that the right person receives it quickly. This metadata is not shared outside Gulf Stream.
How we use it
- To respond. If you contact us, we use your information to reply, schedule, or send what you asked for.
- To deliver work. For active engagements, we use the information you share to design, build, integrate, and tune the systems we agreed to deliver.
- To send communications you opted into. Subscribers and active clients may receive email or SMS at a reasonable cadence. You can opt out at any time.
- To improve. Aggregate, non-identifying analytics help us tighten the website and the offer.
- To meet legal obligations. Tax, contract, and applicable consumer-protection regulation require us to keep certain records.
We do not sell your information. We do not rent your information. We do not give your information to advertising networks.
Cookies and analytics
Cloudflare Web Analytics is cookieless and does not fingerprint visitors. We use a small number of strictly-necessary cookies for site function (e.g., remembering whether the mobile menu is open) and we do not deploy any advertising or cross-site tracking cookie. Because we do not track across sites, the browser "Do Not Track" signal is functionally a no-op — we behave the same either way.
Who we share information with
We share information only with vendors who help us run the business, and only to the extent needed:
- GoHighLevel — our CRM. Form submissions and active-client records live here.
- Cloudflare — hosting and privacy-preserving analytics.
- Google Workspace — email and document collaboration under our administrative control.
- Twilio — carrier-facing SMS provider for our opt-in SMS program. See SMS opt-in disclosure.
- Service-delivery partners and sub-contractors — engaged under written confidentiality for specific scoped work on your engagement.
- Summit Intake Solutions — our sub-brand and operating partner for service-business intake delivery. We may route an inquiry to Summit Intake if your need is squarely in their lane, and we will only do so with information you provided for that purpose.
We will disclose information when legally compelled — subpoena, court order, lawful government request — and will resist overbroad demands and narrow the disclosure to what is required. We will not voluntarily share your information with third parties for their own marketing.
Data retention
If you contact us but never become a client, we keep your inquiry for up to 24 months and then delete it. If you become a client, we retain records for the duration of the engagement plus three years afterward, which is the defensible standard for tax, contract, and warranty obligations under Florida law. Aggregate analytics — which has no personal identifiers — is kept indefinitely.
Your rights
You can email hello@gulfstreamautomation.com with a clear request and we will, within 30 days:
- Tell you what information we hold about you.
- Correct anything inaccurate.
- Delete your records, unless we are legally required to retain them.
- Remove you from all marketing communications.
- Export your data in a portable format.
If you are in California
The CCPA gives California residents the right to know, delete, correct, and not be discriminated against for exercising those rights. We do not "sell" or "share" personal information for cross-context behavioral advertising as defined under CCPA. Send your request to hello@gulfstreamautomation.com.
If you are in the EU, UK, or EEA
Under GDPR you have rights of access, rectification, erasure, restriction, portability, and objection. Our lawful bases are: contract (when delivering work), legitimate interest (when responding to your inquiry), and consent (when sending marketing communications you opted into). You may withdraw consent at any time and may also lodge a complaint with your local supervisory authority — though we would appreciate the chance to resolve any concern directly first.
Security
We protect information with the standard practices of a serious software business: HTTPS everywhere, encryption at rest with our vendors, SSO and MFA on all administrative accounts, principle-of-least-privilege access, and quarterly access reviews. No system is perfectly secure; if we ever experience an incident affecting your data we will notify you in accordance with applicable law.
Children
Our services are sold business-to-business. We do not knowingly collect information from anyone under 13. If you believe a child has shared information with us, contact us and we will delete it.
Changes to this policy
We update this policy as the business or the law changes. The "Last updated" date reflects the most recent revision. Material changes will be highlighted on this page and, for active clients, communicated by email.
Contact
For questions, corrections, deletions, or any other privacy request:
Gulf Stream Automation, LLC
9587 Tower Ridge Road, Pensacola, FL 32526
hello@gulfstreamautomation.com
This is a template. We recommend having a qualified attorney review before relying on it for material legal protection.