Draft for owner and legal review. This is not an effective privacy notice. Do not publish it or collect new pilot inquiries under this draft until the proposed terms and operational facts are confirmed.
Privacy notice - draft
Who this draft names
ConeReplay is a project of Persoon.ai Inc. Public business address: 525 Randall Ave Ste 100 PMB 228, Cheyenne, WY 82001, Laramie County. Business phone: +1 650-930-0559. Roger supplied this public business address and phone. Proposed privacy contact: r@persooninc.com, also the interim pilot inquiry inbox Roger chose. Confirm that this email handles privacy requests before publication.
Information collected and why
If you choose to email us about a pilot, the message may include your email address, name, company, project details and anything else you write. The separate beta form may collect your email, company, agent stack, message and interest. Proposed use: respond to your inquiry, assess whether a pilot is a fit, and keep a record of that conversation. Do not send API keys, customer traces, credentials or sensitive personal data in an initial inquiry.
Where it goes
Pilot links currently open your email app with r@persooninc.com as the recipient; clicking a link alone does not send anything. The existing beta form posts to the site and may forward to a configured webhook, or show an email fallback. Confirm its actual production destination and recipient receipt before treating that form as reliable. Proposed service providers to list in a final notice: the email host for r@persooninc.com, Vercel for site hosting and logs, any configured webhook provider, and Google Analytics if enabled. Confirm each actual provider, its role, storage region and access before publication. Do not assume those listed as conditional are active.
Analytics and cookies
The site code loads Google Analytics in production if its measurement ID is configured. It has no consent control in this repository. Proposed approach: describe the analytics provider, events and cookies accurately, offer any required choice before analytics runs, and explain how to opt out. Check the live Vercel setting and browser behavior first; do not claim analytics is off, consented or cookieless without that check.
Retention, access and deletion - proposed
Proposed default: keep inquiry emails and lead records for up to 12 months after the last contact, then delete them unless a contract or legal obligation requires longer. Proposed process: send access, correction or deletion requests to r@persooninc.com; verify the requester before changing or releasing data and respond within the applicable legal period. Confirm who owns mailbox/webhook deletion, backup retention, any legal exceptions and the actual operating procedure before making this a promise.
Sharing and security - proposed
Proposed default: do not sell inquiry details or use them for unrelated advertising. Limit access to the people working on the inquiry and necessary service providers. Use reasonable access controls and transport protection. Confirm vendor contracts, actual access controls and any cross-border processing before publishing these commitments. Customer traces would require a separate written data-handling agreement before transfer.
Location and applicable rights - proposed
Proposed starting point: this is a U.S.-operated business-to-business inquiry route. Privacy rights can vary by visitor location, including state and international laws. The final notice needs a jurisdiction review for the visitors actually targeted and clear rights and contact instructions where applicable. Do not assert a blanket exemption or one-size-fits-all deadline.
Owner review needed: effective date, operator/address, live providers and destinations, analytics consent behavior, retention and deletion operations, jurisdiction and legal text. This draft is unindexed and not a live privacy policy.
Back to the proposed pilot