Privacy Policy

What we collect, what we deliberately do not collect, who we share it with, and how to get it deleted. Short version: no cookies, no ad tracking, no selling anything.

Effective August 2, 2026

The short version

We do not use cookies on this site or on the sites we build. We do not run Google Analytics, advertising pixels, or third-party trackers. We do not sell, rent, or share personal information for anyone else's advertising. There is no consent banner on this site because there is nothing to consent to.

The long version below says the same thing with the detail a lawyer would want.

1. Who we are and what this covers

Alamo Digital Solutions LLC ("Alamo Digital", "we", "us") is a website design company based in San Antonio, Texas.

This policy covers alamo-digital.com, our client dashboard, and the websites we host for clients. Where we host a client's site, that client decides what appears on it and what they collect through it. They are responsible for their own site's privacy practices, and we act on their instructions.

2. What we collect when you contact us

When you fill in the quote form, email us, or reply to something we sent you, we collect what you give us:

Your name, email address, and (if you provide it) phone number and business name.
What you tell us about your business and the site you want, including anything you attach to an email.
The correspondence itself, so we can pick up a conversation where it left off.

We use that to reply to you, prepare a quote, and run your project if you become a client. We keep it because a business relationship has a history and that history is often the answer to a question a year later.

3. What we collect as a client

Project information: your requirements, content, images, brand materials, and the credentials you choose to share with us for third-party services.
Billing information: invoices, amounts, and payment status. Payments run through Stripe: card numbers reach Stripe, never us, and we could not produce your card number if you asked us to.
Dashboard account: your email address and a login managed by Amazon Cognito. We do not store your password.
Support and change requests you send us.

4. How we measure website traffic

We count visits to this site, and we count visits to each client site so that client can see their own traffic. This is built in-house specifically so it can be done without tracking anybody.

One row is recorded per page view, holding: the page path, the referring site, a coarse device type, an approximate city and its coordinates as resolved at our content delivery network's edge, the time, and a random identifier that separates one browsing session from another. We also record the same way when a visitor clicks certain things (which pricing plan or call-to-action was clicked) so we can tell which parts of a page are useful.

What is deliberately not recorded:

No cookies. Nothing is written to your device that survives closing the tab. The session identifier lives in sessionStorage and dies with the tab.
No IP addresses. The location is resolved at the edge and arrives as a city, so the address is never what we look at, and it is never stored, never logged, and never written to a record.
No fingerprinting, no cross-site tracking, no advertising identifiers, no third-party analytics of any kind.

We honour Do Not Track and Global Privacy Control: if your browser sends either signal, nothing is recorded at all.

We read it in aggregate ("eleven people from Austin read the pricing page on Tuesday"), and that is all the dashboards show. But the underlying rows are per-view rather than pre-summed, so we would rather say so than describe them as something tidier than they are. There is nothing in a row that identifies a person: no name, no address, no account, and nothing that survives the browser tab.

5. Marketing to businesses

We contact local businesses about our services, by postcard and by email, using contact details published by the business itself: the kind of information that appears on a shopfront, a business listing, or the business's own website.

We hold that outreach to the CAN-SPAM Act: every email identifies us and our postal address truthfully, does not disguise what it is, and carries a working way to opt out that we honour promptly.

If you opt out we stop, and we keep a record of the opt-out. That record is the only reason we can be sure not to contact you again. If you would rather we deleted the record entirely, ask, and we will.

We do not buy consumer data, and we do not market to individuals at personal addresses.

6. How AI fits in

Part of our onboarding is handled by an AI assistant, and we use AI to help draft requirements and site content.

To do that, the contents of your enquiry and your project conversation are sent to our AI provider, Anthropic, through its commercial API. Under Anthropic's commercial terms, API inputs and outputs are not used to train its models.

A person reviews every project. If you would prefer no AI involvement in your conversation, tell us and we will handle it directly.

7. Who else sees your information

We do not sell personal information and we do not share it for anyone else's marketing. We use a small number of service providers to run the business, each handling only what their job requires:

Amazon Web Services: hosting, storage, databases, and email delivery. Your data lives in the United States.
Stripe: payment processing and invoicing.
Anthropic: the AI assistant and drafting, as described above.
GitHub: where site code is stored and built.
The services that carry our outreach: a business-listing data provider, an email sending platform, and a printer and mailing house for postcards. These handle business contact details, as described in the section above, and nothing a client sends us.

We will also disclose information where the law requires it, in response to valid legal process, or where necessary to protect our rights, our clients, or someone's safety. If we are ever compelled to hand over a client's data, we will tell that client unless we are legally barred from doing so.

8. How long we keep things

Enquiries that do not become projects: up to two years, then deleted.
Client project records, contracts, and content: for the life of the relationship and then as long as we need them for legal, tax, and accounting purposes, generally seven years.
Billing records: as required by tax law.
Traffic measurement: retained in aggregate. It contains nothing identifying a person to begin with.
Opt-out records: kept indefinitely, because their entire purpose is not contacting you again.

9. Your choices and rights

Whatever state you are in, you can ask us to show you what we hold about you, correct it, delete it, or stop marketing to you. Email us and we will do it. We will not charge you for it and we will not make you jump through hoops.

Texas residents have rights under the Texas Data Privacy and Security Act, and residents of other states have similar rights under their own laws: to know, to correct, to delete, to a portable copy, and to opt out of sale or targeted advertising. We do not sell personal data or engage in targeted advertising at all, so that last one is already the case for everybody.

To make a request, email support@alamo-digital.com. We may need to confirm who you are before acting, and we will respond within 45 days.

If we ever decline a request, we will tell you why and how to appeal it.

10. Security

We keep things behind the protections you would expect: encryption in transit, access limited to the people who need it, managed cloud infrastructure, and no storage of card numbers or passwords.

No system is perfectly secure, and we are not going to claim otherwise. If a breach ever affects your personal information, we will tell you and any regulator we are required to tell, without unreasonable delay.