Privacy Policy
The short version
- We don't sell the information of people who contact us or who use the websites, chats, and ordering pages we run for our clients.
- WolfLeads is the one product where we provide data to others: business contact information from public sources. Anyone can ask to be removed (section 9).
- We don't store chat transcripts in our databases. Only the contact details a visitor chooses to share are saved, for the business they contacted.
- Your mobile number and text-message consent are never shared with third parties for their marketing.
- Privacy requests: contact@wolfstack.io.
This summary helps you read the policy; it doesn't replace it.
1. Who we are and what this policy covers
WolfStack LLC ("WolfStack", "we", "us") is a technology company based in Albuquerque, New Mexico, United States. This policy explains how we handle information on wolfstack.io and its subdomains, in all our products (listed in our Terms of Service), and on wolfstack.shop and tramitefacilusa.com.
We also run websites, AI assistants, catalogs, and ordering pages for businesses that hire us. When you use one of those, the business is responsible for your information and we process it on its behalf. Section 12 explains how to make requests in that case.
2. Information we collect
Information you give us
- Contact and business details when you request a demo, audit, or analysis, sign up, complete onboarding, or write to us: name, business name, email, phone, address, website, services, hours, and similar details.
- Verification codes: your phone number, to send you a one-time code.
- Billing information, processed by Stripe. We receive the payment status and the last digits of your card, never the full number.
- Domain registrant details for WolfDomains: name, organization, email, phone, and postal address in any country.
- Content you provide: text, logos, photos, menus, catalogs, and price lists.
- Messages you send to our support team.
Information collected automatically
- Device and usage data on our websites through Google Analytics: browser, device type, approximate location, pages visited, and the page that referred you.
- IP address and browser type, used briefly to limit abusive traffic and keep the Services secure.
Information from public sources
To build demos, audits, website analyses, and WolfLeads, we collect publicly available business information: business name, address, phone number, email, website content and images, business hours, reviews, and, when published, the names of owners or managers.
Information we process for our clients
When someone uses a website, assistant, catalog, or ordering page we run for a business, we process what they submit there: messages to the assistant, contact details they choose to share, the service they need, appointments, and pickup orders.
3. How we use information
- To provide, maintain, and support the Services.
- To create demos, audits, and analyses of businesses.
- To contact businesses about our Services by email, phone, text message (with consent), and WhatsApp, as described in section 6.
- To process payments and register domains.
- To keep the Services secure and prevent abuse.
- To understand, in aggregate, how our websites are used and improve them.
- To comply with the law and enforce our Terms.
4. The AI assistant on websites we run
- How it answers. Each message is sent in real time, together with the business's information, to an AI model provider to generate the reply.
- No transcripts in our databases. The conversation history lives in the visitor's browser tab and disappears when the tab closes. Our automation platform may keep technical logs that include message content; they're deleted automatically within 14 days.
- Contact details. If a visitor shares their name, phone, email, address, or the service they need, we save it as a lead in the account of the business they contacted. Only that business, and our support team when needed, can see it.
- Security. We use the visitor's IP address and browser type to limit abusive traffic.
5. Artificial intelligence providers
We use AI models from third-party providers, such as Google Gemini, to write website content, answer assistant messages, prepare audits and Google Business Profile posts, and analyze sales calls. We send them only what each task needs. We use their business and API offerings and configure them, where they allow it, so our data isn't used to train their models.
6. Text messages, calls, WhatsApp, and email
Text messages (SMS)
- We send text messages only to people who opt in by checking the consent box on our web forms.
- Messages are about the service you asked for: verification codes, delivery of the demo or audit you requested, technical follow-up, and scheduling.
- Message frequency varies. Message and data rates may apply.
- Reply STOP to stop receiving messages. Reply HELP for help, or write to support@wolfstack.io.
- Mobile numbers and SMS opt-in consent are never shared with or sold to third parties or affiliates for marketing or promotional purposes.
Calls
We may call businesses at their published phone numbers. Calls may be made or assisted by an AI voice agent, and may be recorded and analyzed to improve quality; we say so at the start of the call. Recordings are deleted from our phone provider once they've been analyzed. If you ask us not to call again, we add your number to our internal do-not-call list.
WhatsApp and email
We may write to businesses by WhatsApp or email about our Services. Reply asking us to stop and we will.
7. Google user data
WolfStack's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- Google Business Profile. For an audit, you can authorize read access with your Google account. For ongoing management, you invite gbp@wolfstack.io as a Manager of your profile. We use this access to read your profile's information and performance, publish posts, reply to reviews, and update your business information, as part of the service you hired.
- Google Calendar. With your authorization, we check your availability and create appointment events in a dedicated calendar. We don't read or change your personal events.
- What we don't do. We don't sell Google user data or use it for advertising. We don't transfer it except as needed to provide the service, to comply with the law, or with your consent. We don't use it to develop, improve, or train general AI or machine-learning models.
- Human access. Our team reads this data only with your agreement (for example, to review changes before applying them), for security, to comply with the law, or when it's aggregated and anonymized.
- Protection. Access tokens are encrypted at rest. You can revoke access at any time from your Google account's security settings or by removing our Manager access from your profile.
8. How we share information
We share information only in these cases:
- Service providers that help us run the Services, under confidentiality obligations: cloud hosting and databases (such as Google Cloud and Cloudflare), payments (Stripe), text messages and phone calls (such as Twilio), scheduling (such as Cal.com and Google Calendar), AI models, email delivery, and public-data search tools.
- The business you contacted, when you use a website, assistant, catalog, or ordering page we run for it.
- Domain registrars and registries, as required to register a domain. Where the registry doesn't allow redaction, some registrant data may appear in the public WHOIS directory.
- Sales representatives and affiliates. Prospect records may be linked to the representative or affiliate who referred them. Independent affiliates never see phone numbers or emails; our own sales representatives get audited access to follow up.
- Legal requirements: when the law requires it, or to protect the rights and safety of people or the Services.
- Business transfers: in a merger, acquisition, or sale of assets, subject to this policy.
- With your consent.
We don't sell or rent the information of people who contact us, who request a demo or audit, or who use the websites, chats, and ordering pages we run for our clients. We don't add them to WolfLeads.
9. WolfLeads: business data from public sources
- What it contains. Business contact information compiled with automated tools from public sources, such as business listings, websites, and public profiles: business name, category, address, phone, email, website, and, when published, the name of the owner or manager.
- Who receives it. Agencies and marketers who buy it, under terms that require them to follow telemarketing, anti-spam, and privacy laws.
- How to be removed. Write to contact@wolfstack.io with the subject "WolfLeads removal" and the business name, phone, or email to remove. We remove it within 30 days and keep a suppression record so it isn't added again.
Some state privacy laws may treat providing this data as a "sale." The removal request above is how to opt out.
10. How long we keep information
| Information | How long |
|---|---|
| Assistant conversations | Not stored in our databases. Technical logs that may include message content are deleted automatically within 14 days. |
| Leads, appointments, and orders collected for a client | While the client's account is active, and 30 days after it ends. |
| Client account and project data | During the subscription, and 30 days after it ends. |
| Demos | The link expires after 14 days. We delete a demo within 24 hours if asked. |
| Verification codes | Expire after 10 minutes. |
| Call recordings | Deleted from our phone provider after analysis. Notes from the call stay with the business's record. |
| Payment and tax records | As long as tax law requires, generally 7 years. |
| Domain registration data | For the life of the registration, and afterwards as long as ICANN rules require. |
| WolfLeads data | Updated periodically. Removed within 30 days of a removal request. |
11. Security
We protect information with encryption in transit, encryption of access tokens at rest, access controls, and limits on who on our team can see what. No system is completely secure; if a breach affects your personal information, we'll notify you as the law requires.
12. Your rights and choices
Depending on where you live, you may have the right to:
- know what personal information we have about you and get a copy;
- correct inaccurate information;
- ask us to delete it, subject to what the law requires us to keep;
- opt out of marketing messages at any time;
- opt out of the inclusion of your information in WolfLeads;
- appeal our answer to your request.
Write to contact@wolfstack.io. We may ask for information to verify your identity, and we reply within 45 days. You can use an authorized agent. We won't treat you differently for exercising these rights.
If you're a customer of a business that uses our platform (for example, you chatted with its assistant or placed an order), send your request to that business. If you write to us, we'll forward it to them and help them respond.
13. Cookies
Our Cookie Policy explains the cookies and similar technologies we use and how to control them.
14. Children
Our Services are meant for businesses and adults, not for people under 18. We don't knowingly collect information from children. If you believe we have, write to contact@wolfstack.io and we'll delete it.
15. Users outside the United States
We operate from the United States, and our providers may process information in the United States and other countries. If you use the Services from elsewhere, your information is transferred to and processed in the United States.
16. Changes to this policy
We'll update this policy when our practices change and show the new date at the top. If a change is significant, we'll also notify active clients by email.
If the English and Spanish versions of this policy differ, the English version controls.
17. Contact
WolfStack LLC · Albuquerque, New Mexico, United States
Privacy requests: contact@wolfstack.io
Support: support@wolfstack.io