Effective date: [DATE OF PUBLICATION]. Last updated: [DATE].
This Privacy Policy explains how Cuco's House LLC, d/b/a WolfIT (“WolfIT,” “we,” “us”) collects, uses, and shares personal information in connection with the WolfIT platform (the “Service”).
Scope. This Policy covers information about you as our customer, about your authorized users, and about visitors to our website. It does NOT govern the WolfIT Corpus — the collection of publicly available information about third-party organizations and the individuals associated with them. That is addressed in our Data Sources & Accuracy Statement (wolfit.ai/data-sources), which also explains how to request correction or removal.
Account and billing information: name, business name, email address, phone number (optional), billing address, and payment details. Payments are processed by Stripe; WolfIT does not receive or store full payment card numbers.
Customer Data: information you or your users enter into the Service about your own business operations — CRM notes, tasks, territory selections, uploaded documents, campaign settings, and content you submit to the Wolf assistant.
Connected Account data: where you choose to connect a third-party account, the content and metadata the Service needs to provide the features you enabled. See Section 4.
Usage and device data: log data, browser and device information, IP address, pages and features used, and records of AI-feature usage (for billing, capacity, and abuse prevention).
Communications: support requests, emails, and other communications with us.
We do not ask for, and you should not enter into the Service: Social Security or other government identification numbers, payment card numbers (outside Stripe’s hosted checkout), financial account numbers, health or medical information, biometric identifiers, precise geolocation of individuals, or consumer credit information. Our Acceptable Use Policy prohibits uploading these categories.
We use the information above to: (a) provide, maintain, secure, and improve the Service; (b) process payments and manage your subscription; (c) send transactional communications and, where you have not opted out, product updates; (d) provide support; (e) enforce our Terms and Acceptable Use Policy and prevent fraud or abuse; (f) comply with legal obligations; and (g) produce aggregated, de-identified analytics and product insights as described in Section 5.3 of the Terms of Service.
We do not use Customer Data or Connected Account data for behavioral advertising, and we do not sell personal information.
Content you submit to AI features — questions you ask Wolf, documents you ask the Service to summarize, drafts you ask it to write — is transmitted to our AI providers solely to generate a response for you.
Our commercial agreements with our AI providers do not permit them to use content submitted through our account to train their models.
We do not use Customer Data or Connected Account data to train artificial-intelligence models in a form that identifies you, your users, or your customers, without your separate written consent.
We retain a log of AI usage (timestamps, model used, token counts, estimated cost) for billing, capacity planning, and abuse prevention. Where we retain prompt or response content for troubleshooting, we do so for a limited period and restrict access to personnel who need it.
The Service may let you connect a third-party account — for example an email or calendar account, an advertising account, a social media account, or an accounting system — so that it can help you work: reading a conversation to propose a reply, or reading campaign metrics to evaluate performance.
We request the narrowest access that supports the features you enable, and we access a Connected Account only to provide those features to you.
Our use of information received from a Connected Account adheres to that provider’s user-data policies, including the Google API Services User Data Policy and its Limited Use requirements. Specifically, we do not: use that data for advertising; sell it or transfer it except as necessary to provide or improve the connected features, to comply with law, or as part of a merger or acquisition; allow humans to read it, except with your affirmative consent for specific messages, for security purposes or to comply with law, or where the data has been aggregated and de-identified; or use it to train generalized artificial-intelligence or machine-learning models.
A mailbox contains messages written by people who are not our customers. We process that content solely to provide the Service to the customer who connected the account, retain it no longer than needed, and do not use it to build the WolfIT Corpus or any product offered to other customers.
You may disconnect an account at any time, in the Service or through the provider. On disconnection we stop accessing it and delete cached content within thirty (30) days, except where retention is required by law.
We do not sell personal information and we do not share it for cross-context behavioral advertising. We share with:
Service providers (subprocessors) who process it on our behalf under contractual confidentiality and security obligations. A current list is maintained at wolfit.ai/subprocessors. We will give notice of material changes.
Professional advisors (lawyers, accountants, auditors, insurers) under confidentiality obligations.
Successors in a merger, acquisition, financing, or asset sale, subject to this Policy.
Government authorities or other parties where required by law or legal process, or to protect rights, property, or safety. Where legally permitted, we will make reasonable efforts to notify you before disclosing your Customer Data in response to legal process.
We use strictly necessary cookies to operate the Service (authentication, session management, security) and, where enabled, analytics cookies to understand product usage. You can control cookies through your browser; disabling strictly necessary cookies may prevent the Service from functioning.
Global Privacy Control. Where required by applicable law, we honor opt-out preference signals such as Global Privacy Control (GPC). Because we do not sell or share personal information, this signal does not change how we handle your data, but we recognize it.
Do Not Track. We do not currently respond to browser “Do Not Track” signals, as no common standard has been adopted.
Customer Data: retained while your account is active; after closure, up to thirty (30) days for export and recovery, then deleted from production systems, subject to a limited encrypted-backup window not exceeding thirty (30) additional days and any legally required retention.
Connected Account content: retained only as long as needed to provide the enabled feature; deleted within thirty (30) days of disconnection.
Account and billing records: retained as required for tax, accounting, and audit purposes (generally at least four (4) years in Texas).
Usage and security logs: up to [12] months, then deleted or de-identified.
Support communications: up to [24] months.
Aggregated and de-identified data: retained indefinitely, as it no longer identifies any individual.
Depending on your state of residence, you may have the right to confirm whether we process personal information about you and access it; correct inaccurate information; delete it; obtain a portable copy; and opt out of targeted advertising, sale, or certain profiling. To exercise these rights, contact privacy@wolfit.ai.
Verification. We will take reasonable steps to verify your identity before acting on a request, generally by confirming control of the email address associated with the account or record. We may decline a request we cannot reasonably verify, and will explain why.
Authorized agents. You may use an authorized agent. We may require written proof of the agent’s authority and may separately verify your identity.
Timing. We will respond within the time required by applicable law, generally forty-five (45) days, extendable once by an additional forty-five (45) days where permitted, with notice.
Appeals. If we decline, you may appeal by replying to our decision or writing to privacy@wolfit.ai with “Appeal” in the subject line. We will respond within the period required by law and provide information about contacting the relevant state attorney general if the appeal is denied.
Non-discrimination. We will not deny service, charge different prices, or provide a different level of service because you exercised a privacy right.
WolfIT currently qualifies as a “small business” under the U.S. Small Business Administration size standards referenced by the Texas Data Privacy and Security Act, and is therefore exempt from many of that Act’s obligations. We nonetheless honor the access, correction, deletion, portability, and appeal rights described in Section 8. Independent of that exemption, we do not sell sensitive personal data. [Counsel: confirm the analysis and whether it should be asserted publicly.]
If you are a California resident and WolfIT meets the applicability thresholds, you have the rights in Section 8, plus the right to opt out of “sale” or “sharing” and to limit use of sensitive personal information. We do not sell or share personal information for cross-context behavioral advertising. California law also covers personal information about individuals acting in a business-to-business capacity.
Residents of Virginia, Colorado, Connecticut, Utah, Oregon, Montana, and other states with comprehensive privacy laws have similar rights, including the right to appeal a denied request.
Nevada residents may request that we not sell certain covered information. We do not sell covered information as defined under Nevada law.
We use commercially reasonable administrative, technical, and physical safeguards, including encryption in transit (TLS), encryption at rest for sensitive fields, hashed credentials, role-based access controls, tenant isolation, and logging of administrative access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Breach notification. If we become aware of a security incident affecting your personal information, we will notify you and, where required, the appropriate authorities, without undue delay and within the timeframe required by applicable law.
The Service is intended for business use by adults and is not directed to individuals under 18. We do not knowingly collect personal information from children. If we learn that we have, we will delete it.
The Service is hosted in the United States and intended for businesses operating in the United States. If you access it from outside the United States, your information will be transferred to and processed in the United States. We do not currently offer the Service to individuals in the European Economic Area, the United Kingdom, or Switzerland, and this Policy is not intended to satisfy the GDPR or UK GDPR. [Counsel: confirm whether to state this limitation.]
We may update this Policy. We will post the updated Policy with a new “Last updated” date and, for material changes, provide notice as described in Section 25 of our Terms of Service.
Cuco's House LLC, d/b/a WolfIT — 289 Cumberland Forest Dr, Magnolia, TX 77354
Privacy requests: privacy@wolfit.ai · General support: support@wolfit.ai
[Counsel: the address above is the member’s residential address and also the registered agent address. Please advise whether a different address should appear in published policies.]
