Privacy notice

Legal Entity

• Systemstead is the public brand operated by Systemstead LLC, an Arizona Domestic Limited Liability Company formed effective August 20, 2026.
• This notice does not publish private formation details, tax identification numbers, owner addresses, statutory-agent addresses, personal email, or personal phone numbers.

Information We Collect

• Information you submit through contact forms, booking pages, email, or the client workspace.
• Account information such as name, email, role/title, timezone, preferences, invitation status, and authentication activity.
• Business information such as industry, service area, business website, current tools, goals, priorities, contacts, and working preferences.
• Limited public business information may be collected from company websites or licensed business-research sources for internal business-to-business prospect research; public-source research does not itself authorize outreach.
• Client portal information such as services, meetings, support/contact requests, team access, activity, logo, and style preferences.

Information You Provide

• You may provide business profile details, service goals, contact preferences, optional secondary contacts, and project context.
• Please avoid submitting sensitive personal information unless Systemstead specifically requests it for an approved business purpose.

Contact / Request Information

• Contact and support messages may include your name, email, business, request type, message, reference ID, status, and delivery metadata.
• Logged-in client contact requests are associated with the authorized business account.

Booking Information

• Consultation and meeting scheduling may include name, email, meeting time, calendar details, and video-meeting information needed to schedule and conduct the meeting.

Authentication Data

• Systemstead uses managed authentication services for login, password setup, password reset, invitations, and session management.
• Authentication emails are sent through Systemstead-controlled sender configuration.

Account Security

• Users are responsible for keeping login credentials secure and reporting suspected unauthorized access.
• Systemstead may send required account, authentication, password reset, invitation, and security communications that cannot be disabled while an account is active.

Technical / Device Information

• Systemstead may process technical data needed for security, session handling, spam prevention, hosting, performance, and troubleshooting.
• If enabled, Google Analytics 4 receives limited public-site measurement such as page paths and interaction categories. Systemstead does not intentionally send form contents, names, email addresses, authentication data, client-workspace data, or Owner AI conversations to Google Analytics.
• Necessary cookies and similar technologies support login sessions and site operation. Optional analytics cookies are not required to use the client workspace.

How We Use Information

• Respond to inquiries and support requests.
• Provide portal access, invitations, password resets, account security notices, and client workspace features.
• Plan, deliver, support, and improve approved website, automation, and business-system services.
• Protect Systemstead, clients, and the website from abuse, unauthorized access, and reliability issues.

How We Share Information

• Systemstead does not sell personal information.
• Information may be shared with service providers only as needed to run the website, workspace, email, booking, security, hosting, and approved client services.
• Information may be disclosed if required by law, to protect rights and security, or with your direction.

Public Assistant and AI

• The public assistant may process the message and limited technical context needed to respond. Do not submit passwords, payment information, confidential client records, or other sensitive personal information through the assistant.
• Assistant output is informational and may be incomplete or incorrect. It does not make commitments, send communications, publish content, sign documents, or take action for you.

Service Providers

• Supabase for authentication, database, authorization, and portal infrastructure.
• Vercel for website and application hosting.
• Resend for transactional website and authentication email.
• Google Workspace for business email, calendar, and Google Meet.
• Cloudflare Turnstile for spam and abuse protection.
• Cal.com for consultation booking and scheduling.
• Approved eSignature, payment, analytics, and AI providers only where an agreed service requires them; their terms and the documented service scope apply.

Data Retention

• Operational client data may remain available for export for approximately 30 calendar days after an applicable service ends and may be retained for up to 100 days for operational transition, security, and support purposes.
• Systemstead may retain contracts, invoices, payment, accounting, tax, security, fraud-prevention, dispute, litigation, and other lawful compliance records for as long as reasonably necessary.

Data Security

• Systemstead uses HTTPS, server-side secrets, role-based authorization, row-level access controls, secure email configuration, and spam protection.
• No system can guarantee absolute security. Systemstead does not claim HIPAA, SOC 2, GDPR, CCPA, PCI, or other certification compliance unless separately established.

Client Business Users

• Client owners may invite authorized users into their business workspace where supported.
• Client-side users should only receive access appropriate to their role and business.

Client Portal Use

• Portal content is based on the authenticated user, business membership, role, permissions, and authorized business records.
• Clients should not attempt to access another business workspace, bypass permissions, or submit information they are not authorized to provide.

Email Preferences

• Required account, authentication, security, and critical service notices cannot be disabled while an account is active.
• Optional company, product, early-access, or marketing updates should provide preference management or unsubscribe options when used.

Early Access Requests

• Requests for in-development or coming-soon services may be used to evaluate interest and follow up with authorized client contacts.
• Requesting early access does not guarantee availability, timing, acceptance, pricing, or final features.

Payment Information

• Systemstead does not currently collect raw card or bank credentials in the application.
• Future payment processing should use approved hosted processor components. Payment credentials should not be stored directly by Systemstead.

Support and Contact Records

• Support, contact, and quote requests may be retained so Systemstead can respond, understand context, troubleshoot issues, and maintain reasonable business records.
• Do not include passwords, payment credentials, government IDs, or sensitive personal information in general contact forms.

Your Choices

• You may request access, correction, or deletion where appropriate by contacting Systemstead.
• Optional communication preferences may be adjusted when available.

Account Deletion Requests

• Deletion or access-removal requests may be subject to security checks, business recordkeeping, legal obligations, fraud prevention, backup retention, and active service requirements.
• Some historical records may be retained where reasonably necessary for legitimate business, security, legal, or operational purposes.

Children and Minors

• Systemstead is intended for businesses and is not directed to children.
• Do not submit information for minors unless legally appropriate and necessary for an approved business purpose.

International Considerations

• Systemstead is currently operated for business use in the United States unless otherwise agreed.
• International privacy obligations may require additional review before serving users in other jurisdictions.

Policy Changes

Systemstead may update this notice as services, providers, business operations, or legal requirements change.

Contact Systemstead

Privacy questions can be sent through the contact page or to support@systemstead.com. Systemstead is operated by Systemstead LLC.