Privacy · last reviewed July 26, 2026
What we collect, and why.
Carlsbad Web & AI is a small studio in Carlsbad, California. This page describes what actually happens to information you give this website. It is deliberately specific and deliberately short. If something here is unclear, email hello@carlsbadwebai.com and ask.
Everything this site does with your information
| Where | What | Why | Who processes it | How long |
|---|---|---|---|---|
| Contact form and audit form | Name, email, website URL, and whatever you type in the message field. | To reply to you and, for an audit, to run and send the report. | Emailed to the studio inbox through Resend (resend.com), our email provider. | In the studio email account for as long as we are in contact, then deleted on request. |
| Ada, the AI assistant | The messages you type into the chat, and nothing else — no account, no identifier. | To generate a reply. | Sent to Anthropic's API to produce the answer. We do not write conversations to a database, and we do not keep transcripts of chats on this site. | Not stored by us. Anthropic's own retention applies to the API request. |
| Payments | Card and billing details, entered on Stripe's checkout page. | To take payment for a plan you chose. | Stripe. Card numbers never touch our servers and we never see them. | By Stripe, under their terms. We see only the plan, the amount, and your email. |
| Booking a call | Whatever you enter into the Calendly form. | To put the call in both calendars. | Calendly, on their infrastructure. | In the calendar entry, and in Calendly, until removed. |
| Hosting logs | Standard server request logs, including IP address, kept automatically by our host. | To keep the site running and to spot abuse. | Vercel, our hosting provider. | Under Vercel's retention policy. We do not read them routinely. |
| Analytics | Which pages are viewed and which buttons are clicked, as counts. | To learn which parts of the site help people and which do not. | No third-party analytics product is installed on this site today. Interaction events are collected in the page only, and the code that handles them strips anything resembling an email address, a phone number, or free text before it is recorded. | Not persisted anywhere off the page while no provider is connected. If one is added, this row is updated first. |
What we do not do
- We do not sell or rent your information to anyone.
- We do not add you to a marketing list because you asked for an audit.
- We do not run advertising pixels or cross-site trackers on this site.
- We do not put your email address, name, or message text into analytics.
- We do not publish your site's audit findings anywhere.
Deleting what we hold
Email hello@carlsbadwebai.com from the address you contacted us with, or call (858) 771-4439, and ask us to delete your information. We will delete the messages and any audit we produced, and confirm when it is done.
Records tied to a paid engagement — invoices and the Stripe subscription record — we keep for as long as tax and accounting rules require, because we are not permitted to delete those on request.
California residents may also make requests under the CCPA. The same email address handles those.
This page describes our practices. It is not legal advice, and it does not create rights beyond those the law already gives you.
Questions about any of this? Contact us. Changes to this page are dated at the top; we do not make quiet edits.