Privacy Policy
Last updated: March 1, 2026
Stonegate Labs LLC ("Stonegate Labs," "we," "us," "our") operates SimpleWorkOrders, SiteVoz, Bump Reviews, and Sitecito (collectively, the "Services"). This Privacy Policy explains how we collect, use, share, and protect your information when you use our Services.
By using the Services, you agree to the collection and use of information as described in this Privacy Policy.
1. Information We Collect
Information You Provide
- Account information: Name, email address, and password when you register
- Business information: Company name, phone number, address, and logo (for business profiles)
- User content: Work orders, estimates, voice recordings, photos, review requests, website content, and other data you submit through the Services
- Voice recordings: Audio recordings you create through SiteVoz for transcription and estimate generation
- Photos and images: Images you upload for AI analysis, logos, or website content
- Communications: Messages you send us via email, contact forms, or support requests
Information Collected Automatically
- Usage data: Pages visited, features used, actions taken, timestamps, and session duration
- Device information: Browser type, operating system, IP address, device identifiers, and screen resolution
- Log data: Server logs, error reports, and performance data
Payment Information
When you subscribe to a paid plan, payment information (credit card number, billing address) is collected and processed directly by Stripe, our payment processor. We do not store your full credit card number on our servers. We receive limited payment details from Stripe (such as the last four digits of your card and billing address) for record-keeping and support purposes.
2. How We Use Your Information
We use the information we collect to:
- Provide the Services: Operate, maintain, and deliver the features you use
- AI processing: Send voice recordings to OpenAI for transcription; send photos and text to OpenAI for analysis and content generation
- Improve the Services: Analyze usage patterns to improve features and user experience
- Communicate: Send you account notifications, billing information, security alerts, and support messages
- Security: Detect, prevent, and respond to fraud, abuse, and security incidents
- Legal compliance: Comply with applicable laws, regulations, and legal processes
We do not use your personal information for advertising purposes. We do not sell your data.
3. AI and Voice Data Processing
How AI Features Work
Certain Services use artificial intelligence provided by OpenAI to process your content:
- SiteVoz: Voice recordings you create are transmitted to OpenAI's Whisper API for speech-to-text transcription. The resulting text is then processed by OpenAI's GPT models to generate professional estimates.
- Photo analysis: Photos you upload may be sent to OpenAI's vision models for analysis and description generation.
- Text processing: Text content may be sent to OpenAI for summarization, translation, or generation tasks.
What Data Is Sent to OpenAI
When you use AI-powered features, the following data may be transmitted to OpenAI:
- Voice recordings (audio files)
- Photos and images
- Text content you provide as input
OpenAI's Data Handling
Data sent to OpenAI via their API is subject to OpenAI's privacy and data handling policies. As of the date of this policy, OpenAI states that API data is not used to train their models.
Your Consent
By using AI-powered features, you consent to the transmission of your content to OpenAI for processing. If you do not wish to have your data processed by AI, you may use the Services' manual features instead (such as creating estimates manually in SiteVoz).
4. Third-Party Service Providers
We share your information with the following categories of service providers, solely to operate and improve the Services:
| Provider | Purpose | Data Shared |
|---|---|---|
| OpenAI | AI transcription, text/photo analysis | Voice recordings, photos, text content |
| Stripe | Payment processing | Payment method details, billing address |
| DigitalOcean | Cloud hosting and infrastructure | All Service data (encrypted at rest) |
| Mailgun | Transactional email delivery | Email addresses, email content |
| Cloudflare | CDN, DNS, DDoS protection, SSL | IP addresses, request metadata |
| Sentry | Error monitoring and performance | Error logs, device info, anonymized usage data |
We require all service providers to maintain appropriate security measures and to use your data only for the purposes we specify.
5. Data Processor Role
Our customers (businesses) may input data about their own clients and customers into the Services (for example, customer names and emails on estimates, work orders, or review requests). In this context:
- You (our customer) are the data controller for your end customers' data
- We (Stonegate Labs) act as a data processor, handling that data on your behalf and according to your instructions
- You are responsible for obtaining any necessary consent from your end customers before inputting their data into the Services
- We will not use your end customers' data for any purpose other than providing the Services to you
6. Information Sharing
We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:
- With service providers listed in Section 4, subject to confidentiality obligations
- With your consent when you explicitly authorize sharing
- For legal reasons when required by law, regulation, legal process, or governmental request
- To protect rights when necessary to enforce our Terms, protect our rights, property, or safety, or the rights, property, or safety of others
- Business transfers in connection with a merger, acquisition, bankruptcy, or sale of assets, in which case your data would be transferred to the successor entity
7. Data Retention
- Active accounts: We retain your data for as long as your account is active or as needed to provide the Services
- After account deletion: We will delete your personal data within 45 days of receiving a verified deletion request. Some data may be retained longer if required by law or for legitimate business purposes (such as fraud prevention or financial record-keeping)
- Voice recordings: Transcribed voice recordings are stored only as long as needed to provide the Services. You may delete individual recordings at any time through your account
- Backups: Automated backups may retain copies of deleted data for up to 30 additional days before permanent deletion
8. Security
We implement industry-standard security measures to protect your information, including:
- Encryption of data in transit (TLS/SSL) and at rest
- Secure password hashing
- Access controls and authentication requirements
- Regular security monitoring and incident response procedures
- Firewalls and network security
However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security and are not responsible for unauthorized access resulting from factors outside our reasonable control.
9. Cookies and Similar Technologies
Our Services use the following cookies:
- Session cookies: Maintain your login session and CSRF protection. Essential for the Services to function. Expire when you close your browser.
- Authentication cookies: Remember your login between sessions ("Remember me" feature). Expire after a set period.
- Preference cookies: Store your language and display preferences (such as dark mode).
We do not use advertising cookies, tracking pixels, or third-party analytics cookies. We do not engage in cross-site tracking or behavioral advertising.
You can configure your browser to reject cookies, but this may affect the functionality of the Services.
10. Your Rights
You have the right to:
- Access your personal information — request a copy of the data we hold about you
- Correct inaccurate or incomplete information
- Delete your personal data — request deletion of your account and associated data
- Export your data in a portable format
- Withdraw consent for optional data processing (such as AI features)
To exercise any of these rights, contact us at [email protected]. We will respond within 45 days of receiving your verified request.
11. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
Categories of Personal Information Collected
- Identifiers (name, email, IP address)
- Commercial information (subscription and billing history)
- Internet or electronic network activity (usage data, log data)
- Audio information (voice recordings via SiteVoz)
- Professional or employment-related information (business name, trade)
Purpose of Collection
We collect personal information for the purposes described in Section 2 of this Privacy Policy.
Sale and Sharing
We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising purposes.
Your CCPA Rights
- Right to know: Request disclosure of the categories and specific pieces of personal information we have collected about you
- Right to delete: Request deletion of your personal information
- Right to correct: Request correction of inaccurate personal information
- Right to opt out of sale/sharing: Not applicable — we do not sell or share personal information
- Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights
How to Submit a Request
Submit a verifiable consumer request by emailing [email protected]. We will verify your identity before processing your request and respond within 45 days.
12. Children's Privacy
The Services are not directed to children under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe a child under 18 has provided us with personal information, please contact us at [email protected].
13. Do Not Track
Some web browsers transmit "Do Not Track" (DNT) signals. Because there is no industry standard for DNT compliance, we currently do not respond to DNT signals. However, as stated in Section 9, we do not engage in cross-site tracking or behavioral advertising.
14. Data Breach Notification
In the event of a data breach that affects your personal information, we will:
- Investigate the breach promptly
- Notify affected users within 72 hours of confirming the breach, where feasible
- Provide details about what information was affected and steps you can take to protect yourself
- Notify relevant authorities as required by applicable law
15. Data Location
All Service data is processed and stored in the United States on servers provided by DigitalOcean. AI processing through OpenAI also occurs in the United States. By using the Services, you consent to the processing of your data in the United States.
16. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by:
- Posting the updated policy on this page with a new "Last Updated" date
- Sending an email notification to the address associated with your account for material changes
Your continued use of the Services after changes are posted constitutes your acceptance of the updated Privacy Policy.
17. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:
Stonegate Labs LLC
2501 Chatham Rd Suite R
Springfield, IL 62604
Email: [email protected]
Política de Privacidad
Última actualización: 1 de marzo de 2026
Stonegate Labs LLC ("Stonegate Labs," "nosotros," "nos") opera SimpleWorkOrders, SiteVoz, Bump Reviews y Sitecito (colectivamente, los "Servicios"). Esta Política de Privacidad explica cómo recopilamos, usamos, compartimos y protegemos tu información cuando utilizas nuestros Servicios.
Al usar los Servicios, aceptas la recopilación y uso de información según lo descrito en esta Política de Privacidad.
1. Información que Recopilamos
Información que Tú Proporcionas
- Información de cuenta: Nombre, correo electrónico y contraseña al registrarte
- Información de negocio: Nombre de empresa, teléfono, dirección y logotipo (para perfiles de negocio)
- Contenido del usuario: Órdenes de trabajo, presupuestos, grabaciones de voz, fotos, solicitudes de reseñas, contenido de sitio web y otros datos que envíes a través de los Servicios
- Grabaciones de voz: Grabaciones de audio que creas a través de SiteVoz para transcripción y generación de presupuestos
- Fotos e imágenes: Imágenes que subes para análisis con IA, logotipos o contenido de sitio web
- Comunicaciones: Mensajes que nos envías por correo electrónico, formularios de contacto o solicitudes de soporte
Información Recopilada Automáticamente
- Datos de uso: Páginas visitadas, funciones usadas, acciones realizadas, marcas de tiempo y duración de sesión
- Información del dispositivo: Tipo de navegador, sistema operativo, dirección IP e identificadores de dispositivo
- Datos de registro: Registros del servidor, informes de errores y datos de rendimiento
Información de Pago
Cuando te suscribes a un plan de pago, la información de pago es recopilada y procesada directamente por Stripe. No almacenamos tu número de tarjeta de crédito completo.
2. Cómo Usamos tu Información
Usamos la información recopilada para:
- Proveer los Servicios: Operar, mantener y ofrecer las funciones que utilizas
- Procesamiento con IA: Enviar grabaciones de voz a OpenAI para transcripción; enviar fotos y texto a OpenAI para análisis y generación de contenido
- Mejorar los Servicios: Analizar patrones de uso para mejorar funciones y experiencia de usuario
- Comunicarnos: Enviar notificaciones de cuenta, información de facturación, alertas de seguridad y mensajes de soporte
- Seguridad: Detectar, prevenir y responder a fraudes, abusos e incidentes de seguridad
- Cumplimiento legal: Cumplir con las leyes, regulaciones y procesos legales aplicables
No usamos tu información personal con fines publicitarios. No vendemos tus datos.
3. Procesamiento de Datos de IA y Voz
Cómo Funcionan las Funciones de IA
Ciertos Servicios usan inteligencia artificial proporcionada por OpenAI:
- SiteVoz: Las grabaciones de voz se transmiten a la API Whisper de OpenAI para transcripción y luego se procesan con modelos GPT para generar presupuestos.
- Análisis de fotos: Las fotos pueden enviarse a los modelos de visión de OpenAI.
- Procesamiento de texto: El contenido de texto puede enviarse a OpenAI para resumen, traducción o generación.
Manejo de Datos por OpenAI
A la fecha de esta política, OpenAI declara que los datos de la API no se usan para entrenar sus modelos. Al usar funciones con IA, consientes la transmisión de tu contenido a OpenAI.
4. Proveedores de Servicios de Terceros
| Proveedor | Propósito | Datos Compartidos |
|---|---|---|
| OpenAI | Transcripción con IA, análisis de texto/fotos | Grabaciones de voz, fotos, contenido de texto |
| Stripe | Procesamiento de pagos | Datos del método de pago, dirección de facturación |
| DigitalOcean | Alojamiento en la nube e infraestructura | Todos los datos del Servicio (cifrados en reposo) |
| Mailgun | Envío de correos transaccionales | Direcciones de correo, contenido de correo |
| Cloudflare | CDN, DNS, protección DDoS, SSL | Direcciones IP, metadatos de solicitud |
| Sentry | Monitoreo de errores | Registros de errores, info del dispositivo, datos de uso anonimizados |
5. Rol como Procesador de Datos
Cuando los clientes ingresan datos de sus propios clientes finales, el cliente actúa como controlador de datos y Stonegate Labs actúa como procesador. Eres responsable de obtener el consentimiento necesario de tus clientes finales.
6. Compartir Información
No vendemos, arrendamos ni comercializamos tu información personal. Solo la compartimos con: proveedores de servicios listados en la Sección 4; con tu consentimiento; por razones legales; para proteger derechos; o en conexión con una transferencia de negocio.
7. Retención de Datos
- Cuentas activas: Los datos se retienen mientras tu cuenta esté activa
- Después de la eliminación: Los datos personales se eliminan dentro de los 45 días de una solicitud de eliminación verificada
- Copias de seguridad: Pueden retener copias por hasta 30 días adicionales
8. Seguridad
Implementamos medidas de seguridad estándar de la industria, incluyendo cifrado TLS/SSL, hash seguro de contraseñas, controles de acceso y monitoreo regular de seguridad. Ningún método es 100% seguro.
9. Cookies y Tecnologías Similares
Usamos solo las cookies esenciales: cookies de sesión, autenticación y preferencias. No usamos cookies publicitarias, píxeles de seguimiento ni cookies de analítica de terceros.
10. Tus Derechos
Tienes derecho a acceder, corregir, eliminar y exportar tus datos, y retirar el consentimiento para el procesamiento opcional. Contáctanos en [email protected]. Respondemos en 45 días.
11. Derechos de Privacidad en California (CCPA)
Los residentes de California tienen derechos adicionales bajo la CCPA, incluyendo el derecho a saber, eliminar, corregir y optar por no participar en la venta. No vendemos información personal. Envía solicitudes a [email protected].
12. Privacidad de Menores
Los Servicios no están dirigidos a menores de 18 años. No recopilamos conscientemente información de menores de 18 años.
13. Ubicación de los Datos
Todos los datos se procesan y almacenan en los Estados Unidos. Al usar los Servicios, consientes el procesamiento en los Estados Unidos.
14. Notificación de Violación de Datos
En caso de una violación, notificaremos a los usuarios afectados dentro de las 72 horas de confirmar la violación y reportaremos a las autoridades pertinentes según lo exija la ley.
15. Cambios a Esta Política
Te notificaremos los cambios significativos publicando la política actualizada y enviando notificación por correo electrónico para cambios materiales.
16. Contáctanos
Stonegate Labs LLC
2501 Chatham Rd Suite R
Springfield, IL 62704
Correo: [email protected]