Privacy Policy

---

Who we are: Custom Systems AI, LLC (“Company,” “we,” “us”). 

Contact for privacy requests: legal@customsystems.ai; 

Mailing: PO Box: 10124, Marina Del Rey, CA 90295.

Effective: Oct 10, 2025

This Notice explains how we handle personal information for (a) the 90-minute Session, (b) website contact/intake forms, and (c) related communications. It does not cover third-party sites or services (including Stripe). For payments, Stripe is the controller/processor of card data; we receive only limited payment metadata from Stripe.

When you submit the intake form, you acknowledge this Privacy Notice and our Notice at Collection summarizing categories of data collected, purposes, retention, and how to exercise your rights.

• Identifiers & contact: name, email, phone, company, role.
• Commercial: session selection, price, transaction timestamps.
• Payment: processed by Stripe. We receive limited metadata only (e.g., last4, card brand, transaction status, risk signals). We do not receive or store full card numbers.
• Intake content: questionnaire responses and materials you upload or share.
• Technical: IP, device/browser, referral/UTM, basic analytics (no cross-site tracking).
• Support records: emails, meeting notes, limited call metadata.

You provide data directly or via your organization. We also receive limited information from processors (e.g., Stripe) and standard analytics tools.

• Provide and schedule the Session; send confirmations and recap.
• Process payments and prevent fraud/abuse.
• Operate, secure, and improve our site and services.
• Maintain records, comply with law, and enforce terms.
• Marketing to business contacts who opt in or where permitted (you can opt out).

• Payments: We use Stripe as our payment processor. Your payment data is sent directly to Stripe and handled under Stripe’s Privacy Policy. Checkout will display and hyperlink Stripe’s Privacy Policy and our Privacy Notice.
• Service providers: We use vetted vendors (hosting, email, calendar, analytics) under written contracts. They may only process data for us and must protect it.

We do not sell personal information and do not share it for cross-context behavioral advertising. We do not use or disclose sensitive personal information to infer characteristics.

• Intake and recap: retain for up to 24 months after the Session, unless you ask us to delete sooner (subject to legal holds). We retain information only as long as necessary for the purposes described above, to comply with legal, accounting, or reporting requirements, or to resolve disputes.
• Transaction records: retain 7 years for tax, accounting, and compliance.
• Security logs and backups: short, rotating cycles and longer Secure Archives for disaster recovery.

• Access/Deletion/Correction/Portability: Request via email: legal@customsystems.ai.
• Opt-out of marketing: Use the link in our emails or email us.
• Rights for California residents: You may request (a) categories/specific pieces we collected, (b) deletion, (c) correction, and (d) information about disclosures for a business purpose. We will verify requests and respond within legal timeframes. Authorized agents may submit requests with proof of authority. We do not discriminate for exercising rights.

We use commercially reasonable administrative, technical, and physical safeguards, including encryption in transit, hardened cloud infrastructure, least-privilege access, and audit logging. No method is 100% secure.

Our services are for business users. We do not knowingly collect data from children under 16. Do not use the Site or book the Session if you are under 16.