Privacy Policy

What we collect on this site, and what we do not.

This page describes the personal data the CascadiaAI public website collects, how long it is retained, and which subprocessors handle it. The platform product itself follows a separate tenant-scoped data policy that is shared with customers during activation.

Last updated: 2026-07-24

Scope

What this policy covers

This policy applies to the public CascadiaAI marketing and contact site at cascadiaai.cloud (deployed to Firebase Hosting). It does not cover the authenticated platform control plane, demo preview, or any customer-deployed CascadiaAI tenant; those environments are governed by the Data Processing Addendum signed during activation.

Data we collect

What you give us when you submit a form

  • Email address (contact and early-access forms)
  • Name and company (optional, on the contact form)
  • Workflow context, free text (optional, on the contact form)
  • Stripe customer data (only when you start a paid plan)
  • Server log metadata (IP address, user agent) emitted by the hosting edge

What we do not collect

Out-of-scope on the public site

  • Tracking pixels, advertising cookies, or third-party analytics
  • Biometric data, government identifiers, or payment-card data on this site
  • Cross-site browsing history for retargeting
  • Customer tenant data (handled under the platform DPA, not this policy)

Subprocessors

Who handles the data we collect

The public site is hosted on Firebase Hosting (Google Cloud). Form submissions are delivered through a Firebase HTTPS endpoint and forwarded to CascadiaAI internal operations tooling. Payment processing runs through Stripe. The full subprocess list with roles and data scopes is maintained on the Trust Center.

Retention

How long we keep public-site data

  • Contact and early-access submissions: 365 days, then deleted or fully anonymized
  • Edge server logs: 30 days, then truncated
  • Stripe billing records: 7 years (per commercial record-keeping requirements)
  • Aggregate form analytics: retained in fully anonymized form indefinitely

Your rights

Access, correction, and deletion

You can request access, correction, or deletion of any personal data we hold from this site. Send the request to the address below; we acknowledge within five business days and complete full action within thirty days.