Privacy Notice

Information you choose to provide

If you email SPA Consulting or otherwise provide contact information with an inquiry, we receive the information you submit, such as your name, email address, phone number, company information, and message.

SPA Intelligence

SPA Intelligence is an AI advisory assistant, not a human. When you use it, your message and limited recent conversation context are sent to OpenAI to generate a response. SPA Consulting configures these requests not to be stored as application state by OpenAI. OpenAI may still temporarily retain request and response data in abuse-monitoring logs under its applicable data controls, generally for up to 30 days.

SPA Consulting does not store the raw text of SPA Intelligence conversations in its server-side database. The current conversation is kept in your browser's session storage so it can remain available during that browser session. It is typically removed when the browser tab or session is closed. Do not submit confidential information, passwords, financial account details, government identifiers, private keys, or other highly sensitive information.

Security and usage information

To limit abuse and control operating costs, the site creates a salted hash derived from a visitor's network address. The raw address is not stored in SPA's rate-limit database. Rate-limit records are periodically removed after approximately two days.

SPA also keeps daily aggregate counts such as requests, token usage, blocked security events, and service errors. Those aggregate records do not contain raw conversation text or direct contact information.

How information is used

SPA uses information to operate and secure the website, provide AI-generated responses, respond to inquiries, evaluate potential consulting work, maintain business records, and comply with applicable law.

If you contact SPA or request a response, SPA may use the contact information you provide to reply and reasonably follow up about that inquiry. This does not enroll you in a newsletter or recurring marketing program. SPA does not currently use this website to collect consent for recurring promotional email or marketing text messages.

Service providers and business records

SPA relies on service providers to host and secure the website, operate the AI assistant, and handle business communications. These may include OpenAI, hosting and infrastructure providers, email providers, and a customer relationship management system. An inquiry may be retained in email or a CRM when reasonably necessary to respond and manage the business relationship.

No sale or targeted advertising

SPA does not sell personal information and does not share it for cross-context behavioral advertising. This website does not currently use advertising pixels or cross-site behavioral tracking. Because the site does not engage in those practices, browser-based opt-out signals do not change a sale, sharing, or targeted-advertising activity on this site.

Retention and choices

Business correspondence and CRM records are retained only as reasonably necessary for the inquiry, relationship management, recordkeeping, security, or legal obligations. Depending on where you live, you may have rights regarding your personal information. You may request access, correction, or deletion by emailing SPA. Some information may be retained when required for security, recordkeeping, or legal compliance.

Children

This website is intended for business audiences and is not directed to children under 13. SPA does not knowingly collect personal information from children under 13.

Changes and contact

SPA may update this notice when its practices or legal obligations change. The effective date above will be revised when a material update is published.

Privacy questions or requests may be sent to lee.w@spa-consultingllc.com.