Privacy Policy — Gulf Coast Tech & AI Services (GCTAI)

Effective Date: December 2025

Gulf Coast Tech & AI Services (“GCTAI,” “we,” “us,” or “our”) provides AI-powered automation, data workflows, and software integrations for small businesses. This Privacy Policy explains how we collect, use, store, and protect information when you use our website, services, automations, integrations, or connected applications.

1. Information We Collect

a. Information You Provide

We may collect information you voluntarily provide, including:

Name and business name
Email address and phone number
Account configuration details
Files, messages, or data submitted through forms, workflows, or automations

b. Information From Connected Services

When you authorize integrations with third-party platforms (such as QuickBooks Online, Airtable, Microsoft 365, Twilio, or other business systems), we may access and process data required to deliver the requested services. Access is limited to the scope you authorize and can be revoked at any time.

c. Automatically Collected Information

We may automatically collect technical and usage information, including:

Log files and timestamps
Browser and device information
Usage analytics
Error and performance metrics

This data is used to maintain reliability, security, and performance.

2. How We Use Your Information

We use collected information to:

Deliver and maintain automation and integration services
Configure, monitor, and improve workflows
Provide customer support and troubleshooting
Maintain platform security and integrity
Comply with legal, regulatory, and contractual obligations

We do not sell personal or business data.

Mobile Information No-Sharing Clause No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

3. Communications & Messaging

If you provide a phone number and explicitly consent via a checkbox on our website contact form, you may receive one-to-one SMS messages from Gulf Coast Tech & AI Services in direct response to your inquiry or support request.

If a user initiates contact with us by calling or texting our business phone number, they may receive a one-to-one SMS response related solely to their inquiry or request.

Messages are sent only in direct response to user-initiated communication.
No unsolicited, bulk, or marketing messages are sent.

Message frequency varies.
Consent is not a condition of purchase.
Message and data rates may apply.
Users may opt out at any time by replying STOP.
Help is supported.

We do not send marketing text messages without explicit consent.

SMS Disclosure: Mobile information will not be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

4. Disclosure Information

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service is permitted; however, this does not include SMS opt-in data, which will not be shared under any circumstances. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

5. Data Storage & Security

We use industry-standard security practices and may store or process data using trusted platforms such as Vercel, n8n Cloud, Airtable, Microsoft 365, OpenAI, and other secure infrastructure providers.

Security measures include:

TLS encryption
Multi-factor authentication (MFA)
Role-based access controls
Audit logging and monitoring

No system is completely secure, but we take reasonable measures to protect your data.

6. Data Retention

We retain information only as long as necessary to deliver services, meet legal obligations, or resolve disputes. Clients may request deletion of workflow data, logs, or access tokens at any time, subject to contractual or legal requirements.