Legal

    Privacy Policy

    Last updated: June 28, 2026

    This document is provided for informational purposes and is not legal advice. Consult a licensed attorney before relying on it for your business.

    This page is maintained by NorcalAI ("NorcalAI," "we," "us," or "our") to explain how we collect, use, share, and protect personal information when you visit norcalai.ai (the "Site") or use our services. NorcalAI is a digital agency based in Northern California that builds custom-coded websites and provides AI-powered SEO (GEO/AEO), Google Business Profile management, Google Ads, AI customer support, and related digital marketing services to businesses across California, Oregon, Washington, and Nevada.

    1. Information We Collect

    Information you provide

    • Free Audit / Contact Form: name, email, business name, website URL, business challenges, and any message you submit.
    • Client Onboarding Form: business details, branding preferences, target customers, goals, content, credentials you choose to share, and other intake information.
    • Squatch AI Chat: messages you type to our AI assistant, which we store for quality assurance, abuse prevention, and product improvement.
    • Email & Communications: messages you send to hello@norcalai.ai or to our team.

    Information collected automatically

    • IP address, device type, browser, operating system, referring URL, pages viewed, time on page, and approximate location (derived from IP).
    • Analytics events via Google Analytics 4 and search performance data via Google Search Console.
    • Anonymous interaction events (e.g., contact-button clicks) used for conversion measurement.

    Cookies & similar technologies

    We use first-party and third-party cookies and similar technologies (e.g., local storage) for essential site functionality, analytics, and to remember your preferences. You can control cookies through your browser settings; disabling them may affect Site functionality.

    2. How We Use Information

    • Deliver, maintain, and improve our websites and services.
    • Prepare and send free website audits and proposals you request.
    • Communicate with you about projects, billing, and support.
    • Operate and improve the Squatch AI assistant, including content moderation and abuse prevention.
    • Measure site performance, marketing effectiveness, and conversion rates.
    • Secure our systems and detect, prevent, or respond to fraud and abuse.
    • Comply with legal obligations and enforce our Terms of Service.

    3. How We Share Information

    We do not sell your personal information and we do not "share" it for cross-context behavioral advertising as defined under the California Consumer Privacy Act (CCPA/CPRA). We disclose information only to:

    • Service providers that help us operate the Site and deliver services, including: our backend/hosting provider, Resend (transactional email), Google (Analytics, Search Console, Business Profile, Ads), and the AI model providers that power the Squatch assistant.
    • Professional advisors such as accountants and attorneys, under confidentiality.
    • Authorities when required by law, subpoena, or to protect rights, safety, or property.
    • Business transfers in connection with a merger, acquisition, or sale of assets, subject to this Policy.

    4. Data Retention

    We retain personal information only as long as needed for the purposes described above, to comply with our legal obligations, resolve disputes, and enforce our agreements. Audit and contact submissions are typically retained for up to 24 months unless you become a client, in which case we retain records for the duration of our engagement plus a reasonable period afterward. Squatch chat logs are typically retained for up to 12 months.

    5. Security

    We use industry-standard administrative, technical, and physical safeguards to protect personal information, including encryption in transit (HTTPS/TLS), access controls, row-level security on our backend, and limited employee access on a need-to-know basis. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

    6. Your California Privacy Rights (CCPA / CPRA)

    If you are a California resident, you have the following rights regarding your personal information:

    • Right to know what categories and specific pieces of personal information we have collected about you, the sources, the business purpose, and the categories of third parties with whom we share it.
    • Right to delete personal information we have collected from you, subject to certain exceptions.
    • Right to correct inaccurate personal information.
    • Right to limit the use and disclosure of sensitive personal information.
    • Right to opt out of the sale or sharing of personal information. NorcalAI does not sell or share personal information.
    • Right to non-discrimination for exercising any of these rights.

    Categories of personal information we collect

    In the past 12 months, we have collected the following CCPA-defined categories:

    • Category A — Identifiers: name, email, IP address, business URL.
    • Category B — Customer records: contact and business information you provide.
    • Category F — Internet activity: pages viewed, click events, referring URLs, interactions with Squatch.
    • Category K — Inferences: insights about your business needs derived from audits and chat conversations.

    How to exercise your rights

    Email hello@norcalai.ai with the subject line "California Privacy Request." We will verify your identity using information we already have (such as the email you submitted) and respond within 45 days. Authorized agents may submit requests on your behalf with written, signed permission and proof of identity.

    7. Children's Privacy

    Our Site and services are intended for businesses and adults. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, contact us and we will delete it.

    8. International Users

    NorcalAI is based in the United States and our services are intended for U.S. businesses. If you access the Site from outside the U.S., your information will be transferred to and processed in the United States.

    9. Changes to This Policy

    We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when it was last revised. Material changes will be highlighted on the Site.

    10. Contact Us

    Questions, requests, or concerns? Email us at hello@norcalai.ai.