Privacy · last reviewed September 10, 2026
What we collect, and why.
Carlsbad Web & AI serves Carlsbad businesses online. This page describes what actually happens to information you give this website. It is deliberately specific and deliberately short. If something here is unclear, email hello@carlsbadwebai.com and ask.
Everything this site does with your information
| Where | What | Why | Who processes it | How long |
|---|---|---|---|---|
| Public website check | The website URL and goal you enter, the page HTML our server fetches, and a hashed IP counter used to limit abuse. No email is required. | To show findings about the public page and keep the checker available. | Our server reads the page. No LLM processes this check. Results are emailed only if you submit the optional audit form. | There is no scan database. Page data is held for the request and shown in your browser. Abuse counters expire after 10 minutes; expired entries are cleared on a later request. Hosting logs follow the separate policy below. |
| Contact form and audit form | Name, email, website URL, and whatever you type in the message field. | To reply to you and, for an audit, to run and send the report. | Emailed to the studio inbox through Resend (resend.com), our email provider. | In the studio email account for as long as we are in contact, then deleted on request. |
| Ada, the AI assistant | The messages you type into the chat, and nothing else — no account, no identifier. | To generate a reply. | Sent to Anthropic's API to produce the answer. We do not write conversations to a database, and we do not keep transcripts of chats on this site. | Not stored by us. Anthropic's own retention applies to the API request. |
| Payments | Card and billing details, entered on Stripe's checkout page. | To take payment for a plan you chose. | Stripe. Card numbers never touch our servers and we never see them. | By Stripe, under their terms. We see only the plan, the amount, and your email. |
| Booking a call | Whatever you enter into the Calendly form. | To put the call in both calendars. | Calendly, on their infrastructure. | In the calendar entry, and in Calendly, until removed. |
| Hosting logs | Standard server request logs, including IP address, kept automatically by our host. | To keep the site running and to spot abuse. | Vercel, our hosting provider. | Under Vercel's retention policy. We do not read them routinely. |
| Analytics | We count page visits, button use and enquiries with a cookie ID. Form text stays out. Page links keep only known pages and our Google listing tags. | To learn which parts of the site help people and which do not. | Google Analytics 4, after you allow it. Ad features stay off. Use the control at the bottom of the page to change your choice. | Your choice lasts 180 days in this browser. Analytics cookies last up to 180 days. Google keeps event data for 2 months. It keeps user data for 14 months, renewed on new use. Summary reports can last longer. |
What we do not do
- We do not sell or rent your information to anyone.
- We do not add you to a marketing list because you asked for an audit.
- We keep Google ad features off.
- We do not put your email address, name, or message text into analytics.
- We do not publish your site's audit findings anywhere.
Deleting what we hold
Email hello@carlsbadwebai.com from the address you contacted us with, or call (858) 771-4439, and ask us to delete your information. We will delete the messages and any audit we produced, and confirm when it is done.
Records tied to a paid engagement — invoices and the Stripe subscription record — we keep for as long as tax and accounting rules require, because we are not permitted to delete those on request.
California residents may also make requests under the CCPA. The same email address handles those.
This page describes our practices. It is not legal advice, and it does not create rights beyond those the law already gives you.
Questions about any of this? Contact us. Changes to this page are dated at the top; we do not make quiet edits.