Privacy Policy

This Policy applies when ShellCraft LLC determines the purposes and means of processing personal information. A customer may act as the controller or business for information processed through a contracted service, with ShellCraft LLC acting as its processor or service provider. In that situation, the customer's privacy notice and instructions govern requests concerning that information.

Our website may link to third-party sites or services. Their privacy practices are governed by their own notices, and we are not responsible for their content or practices.

Personal information means information that identifies, relates to, describes, or can reasonably be linked to an individual or household. Depending on how you interact with us, we may collect:

We do not seek sensitive personal information through this informational website. Where sensitive information is required for a specific lawful business purpose, we will provide appropriate notice and safeguards.

We collect information directly from you, automatically through website and security technologies, from organizations you represent, and from authorized service providers, partners, public sources, or professional directories. We collect only information reasonably necessary for the disclosed business or legal purpose.

• Respond to inquiries and communicate about products, services, projects, events, and business relationships.
• Prepare proposals, perform contracts, deliver and support services, process transactions, and maintain business records.
• Operate, secure, diagnose, measure, and improve our website, infrastructure, AI workflows, and customer experience.
• Personalize content and remember preferences where you have enabled optional cookies.
• Conduct analytics, research, product planning, quality assurance, and responsible innovation.
• Detect fraud, abuse, security incidents, unlawful activity, and threats to people, systems, or property.
• Comply with law, sanctions, export controls, tax, accounting, regulatory requests, and enforceable legal process.
• Establish, exercise, or defend legal claims and enforce agreements and policies.

Where required, our legal basis is consent, performance of a contract, compliance with legal obligations, protection of vital interests, or our legitimate interests balanced against individual rights.

We may use AI-assisted tools to support inquiry routing, document analysis, software development, security, analytics, and service delivery. Human review remains part of material business decisions where appropriate. We do not use website inquiry data to make solely automated decisions that produce legal or similarly significant effects unless separately disclosed and permitted by law.

Customer data submitted to an AI-enabled service is handled according to the applicable agreement, service configuration, provider terms, and legal requirements. We do not represent that personal information submitted through ordinary website inquiries will be used to train a public foundation model. Where data is used for product improvement or model development, we will use an appropriate legal basis, notice, contractual controls, and safeguards such as aggregation or de-identification where feasible.

Necessary cookies support security, routing, and core website operation. Analytics and personalization cookies are optional and are enabled only according to your saved choices. You may manage these choices through the Cookie settings presented on the website and through your browser. For details, review our Cookie Policy.

We may disclose personal information to hosting, cloud, cybersecurity, analytics, communications, payment, logistics, professional, and other service providers that process it for authorized purposes under appropriate obligations. We may also disclose information to a customer or organization you represent, authorized business partners, advisers, auditors, insurers, regulators, courts, law enforcement, or other parties when legally required.

Information may be transferred in connection with financing, investment, reorganization, merger, acquisition, sale of assets, or a similar corporate transaction, subject to confidentiality and applicable law. We do not sell personal information for money. We do not knowingly share personal information for cross-context behavioral advertising. If our practices change, we will provide required notices and opt-out mechanisms before doing so.

As a United States-based company serving international business, we and authorized providers may process information in countries other than where it was collected. Privacy laws may differ. Where required, we use recognized safeguards such as contractual protections, transfer assessments, data minimization, access controls, and other lawful transfer mechanisms.

We retain personal information only as long as reasonably necessary for the purpose collected, contractual and operational requirements, security, dispute resolution, and applicable legal or regulatory obligations. Retention depends on the type of information, sensitivity, relationship, and legal requirements.

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including access restrictions, secure infrastructure, monitoring, and vendor controls where appropriate. No transmission or storage system is completely secure. De-identified or aggregated information that cannot reasonably identify an individual may be used for lawful business, research, security, and innovation purposes, and we will not attempt to re-identify it except as permitted by law.

Your rights depend on your location and applicable law. Subject to verification and lawful exceptions, they may include:

• Request access to personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion, subject to legal, security, contractual, and record-retention exceptions.
• Request restriction of, or object to, certain processing.
• Withdraw consent where processing is based on consent, without affecting prior lawful processing.
• Request a portable copy where applicable.
• Opt out of marketing communications at any time.
• Appeal a denied privacy request where applicable law provides that right.
• Lodge a complaint with a competent privacy or data-protection authority.

Authorized agents may submit requests where allowed. We may verify identity, authority, residency, and the scope of a request. We will not unlawfully discriminate against you for exercising a privacy right.

Residents of states with comprehensive privacy laws may have rights to know or access categories and specific pieces of personal information, delete, correct, obtain portability, opt out of sale, targeted advertising, or certain profiling, and limit certain uses of sensitive information. During the preceding 12 months, the categories we may have collected correspond to the information described in Section 2 and were used and disclosed for the purposes in Sections 4 and 7.

We do not offer financial incentives for personal information. Because this website does not currently sell personal information or use it for cross-context behavioral advertising, an opt-out link for those activities is not presently required. Browser-based preference signals will be honored where legally required and technically applicable.

Our website and business services are not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided information, contact us so we can investigate and delete it where required. Do not submit personal information to public areas unless you intend it to be publicly available.

You may unsubscribe from promotional email using the instructions in the message or by contacting us. We may still send non-promotional communications concerning an active inquiry, contract, transaction, security issue, or legal obligation.

We may update this Policy to reflect changes in our services, technology, legal requirements, or business practices. The updated version will be posted here with a revised effective date. We will provide additional notice or obtain consent when required by law.

For privacy questions or requests, contact hi@shellcraft-ai.com. Please describe your request and the jurisdiction that applies to you.