This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

We use Your Personal data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

Account means a unique account created for You to access our Service or parts of our Service.
Company (referred to as either "the Company", "We", "Us" or "Our" in this Agreement) refers to StealthX LLC, 5540 Centerview Dr, Ste 204 PMB 315715, Raleigh, NC 27606.
Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses.
Country refers to: North Carolina, United States.
Device means any device that can access the Service such as a computer, a cellphone or a digital tablet.
Personal Data is any information that relates to an identified or identifiable individual.
Service refers to the Website.
Service Provider means any natural or legal person who processes the data on behalf of the Company.
Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself.
Website refers to StealthX, accessible from https://stealthx.co
You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:

Email address
First name and last name
Company name
Job title or role
Phone number
Messages and inquiry content
AI tool responses, quiz answers, and computed results
Usage Data

Data Collected Through Forms and Tools

We collect Personal Data when You voluntarily submit information through forms and interactive tools on Our Website, including:

Contact Form: first name, last name, email address, company name, phone number, and message content.
Newsletter Signup: email address and, optionally, first name.
AI Sanity Check: email address, first name, company name, role or title, quiz answers, and computed assessment results.
AI Impact Prioritizer: email address, first name, company name, role or title, industry, selected use cases, quiz answers, and computed prioritization results.
CX Revenue Impact Calculator: email address, first name, company name, role or title, industry, revenue, retention rate, NPS score, growth rate, and computed financial estimates.
StealthX Recon: email address, first name, company name, role or title, industry, revenue, churn rate, growth rate, and computed friction tax estimates.
AI Readiness Assessment: email address, full name, company name, quiz answers, and computed readiness profile.
Playbook Downloads: email address, first name, last name, company name, role, and marketing campaign parameters (UTM tags) from the link You followed. To avoid losing your request if the form is interrupted, entries are saved as a draft while you fill out the form once an email address has been entered.

Usage Data

Usage Data is collected automatically when using the Service. Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data.

Tracking Technologies and Cookies

We use Cookies and similar tracking technologies to track the activity on Our Service and store certain information. These tracking technologies load automatically when You visit Our Website. You can manage or disable Cookies through Your browser settings; however, doing so may affect the functionality of some parts of Our Service.

For more information about the cookies we use and your choices regarding cookies, please visit our Cookies Policy.

Where You Came From

When You arrive on the site, We note the campaign tags in the address (such as utm_source or an ad click ID) and the page that sent You, without its query string. We keep the first visit for 90 days in Your browser and the latest visit for the length of Your browser session. If You submit a playbook request form, We save this alongside the request so We know which article, post or ad led to it. Our other forms do not include it. Device identifiers from Google or Meta are added only when You have turned on the matching cookie category.

Third-Party Analytics and Tracking Services

We use the following third-party analytics and tracking services to help us understand how Our Website is used, to improve Our Service, and to support our marketing efforts:

Google Analytics 4 (GA4): We use Google Analytics to collect Usage Data including IP address (anonymized), browser type, pages visited, time spent on pages, and device information. We implement Google's Consent Mode v2 with two cookie categories, analytics and marketing, and both start off. Until You turn on analytics, GA4 receives only cookieless, identifier-less pings used to build aggregate traffic models: no cookies are set and no persistent identifier is assigned. Once You turn on analytics, Google Analytics sets cookies to distinguish unique users and track sessions. Google's advertising signals (ad_storage, ad_user_data, ad_personalization) stay denied unless You turn on marketing. You can change either choice at any time from "Cookie settings" in the site footer. For more information, see Google's Privacy Policy.
Google Tag Manager: We load Google Tag Manager to manage measurement tags. It follows the same two cookie choices and does not add a second Google Analytics page view.
PostHog: We use PostHog product analytics to understand which pages and features visitors use. Until You turn on analytics, PostHog is switched off and stores nothing in Your browser. After You turn on analytics, it records page views and interactions and sets an identifier in Your browser storage. For more information, see PostHog's Privacy Policy.
Wistia: We use Wistia to play videos on the site. When a video loads, Wistia receives Your IP address and browser details and may store a viewing identifier and playback progress in Your browser. For more information, see Wistia's Privacy Policy.
Sentry: We use Sentry to find and fix errors on the site. When an error happens, Sentry receives the page address, browser and device details, and the error itself. We do not record sessions or screens. For more information, see Sentry's Privacy Policy.
Meta Pixel and Conversions API: Only if You turn on marketing, we load the Meta Pixel to measure our ads on Facebook and Instagram. The Pixel sends page views, along with identifiers Meta sets in Your browser. We send a "Lead" event to Meta, from Your browser and from our server, only when You have turned on marketing and also check the box on the playbook form agreeing to ad measurement. The server copy includes a hashed copy of Your email address. Without both, no "Lead" event goes to Meta. We do not send Your role, company size, or any other answer from the form. For more information, see Meta's Privacy Policy.
Apollo.io: We use the Apollo.io website tracker for sales intelligence and visitor identification. Apollo collects Usage Data and browser identifiers to recognize returning visitors and associate website activity with company and contact profiles that support our sales outreach. Apollo is part of the marketing category: its tracking is only activated after You turn on marketing in the cookie banner. For more information, see Apollo.io's Privacy Policy.
Google reCAPTCHA v3: We use Google reCAPTCHA site-wide, including on the client intake form, to protect against spam and automated abuse. reCAPTCHA collects behavioral data including hardware and software information, mouse movements, and browsing activity. For more information, see Google's Privacy Policy and Terms of Service.
Cloudflare Turnstile: We use Cloudflare Turnstile on the client intake form and the playbook request forms in addition to reCAPTCHA to provide enhanced bot protection. Turnstile collects browser and device signals and Your IP address to verify that requests come from legitimate users. For more information, see Cloudflare's Privacy Policy.
Notion: We use Notion to store and organize feedback submissions from the intake form. Notion receives Your name, work email address, request description, relevant links, and any screenshots You attach. This helps our team triage and track Your feedback. For more information, see Notion's Privacy Policy.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

To provide and maintain our Service, including to monitor the usage of our Service.
To manage Your Account: to manage Your registration as a user of the Service.
For the performance of a contract: the development, compliance and undertaking of the purchase contract for the products, items or services You have purchased or of any other contract with Us through the Service.
To contact You: To contact You by email, telephone calls, SMS, or other equivalent forms of electronic communication regarding updates or informative communications related to the functionalities, products or contracted services.
To provide You with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless You have opted not to receive such information.
To manage Your requests: To attend and manage Your requests to Us.
For business transfers: We may use Your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Our assets.
For other purposes: We may use Your information for other purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our Service, products, services, marketing and your experience.

Sharing Your Personal Data

We may share Your personal information in the following situations:

With Service Providers: We may share Your personal information with Service Providers to monitor and analyze the use of our Service, to contact You, and to process Your data on Our behalf. Our current Service Providers include:
- Analytics providers: Google (Google Analytics 4, Google Tag Manager), PostHog, Wistia (video playback), Sentry (error monitoring), and, only with Your marketing consent, Meta (Pixel and Conversions API) and Apollo.io (website visitor tracking)
- Cloud data storage: Supabase (stores form submissions and user data, including the lead records in Our internal CRM: contact details, role, message, and which form You used)
- Email delivery: Resend (sends transactional emails such as contact form notifications and AI tool reports)
- Newsletter platform: Beehiiv (manages newsletter subscriptions and delivery, including optional subscriptions started from Our playbook download forms)
- Bot detection: Google reCAPTCHA v3 and Cloudflare Turnstile (protect forms from automated abuse)
- Team notifications: Slack (receives internal alerts containing the contact details You submit through forms including the intake form, so our team can respond)
- Feedback database: Notion (stores intake form submissions including name, email, request description, links, and attached screenshots for triage and tracking)
For business transfers: We may share or transfer Your personal information in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of Our business to another company.
With Affiliates: We may share Your information with Our affiliates, in which case we will require those affiliates to honor this Privacy Policy.
With business partners: We may share Your information with Our business partners to offer You certain products, services or promotions.
With other users: when You share personal information or otherwise interact in the public areas with other users, such information may be viewed by all users and may be publicly distributed outside.
With Your consent: We may disclose Your personal information for any other purpose with Your consent.

Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of Our Service, or We are legally obligated to retain this data for longer time periods.

Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to - and maintained on - computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from Your jurisdiction.

Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer.

The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of Your data and other personal information.

Delete Your Personal Data

You have the right to delete or request that We assist in deleting the Personal Data that We have collected about You.

Our Service may give You the ability to delete certain information about You from within the Service.

You may update, amend, or delete Your information at any time by signing in to Your Account, if you have one, and visiting the account settings section that allows you to manage Your personal information. You may also contact Us to request access to, correct, or delete any personal information that You have provided to Us.

Please note, however, that We may need to retain certain information when we have a legal obligation or lawful basis to do so.

Security of Your Personal Data

The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.

GDPR Privacy Rights (EEA Residents)

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. StealthX aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.

You have the following rights:

The right to access, update or delete the information we have on you
The right of rectification - the right to have your information corrected if inaccurate or incomplete
The right to object to our processing of your Personal Data
The right of restriction - the right to request that we restrict the processing of your personal information
The right to data portability - the right to receive a copy of your Personal Data in a structured, machine-readable format
The right to withdraw consent at any time

CCPA/CPRA Privacy Rights (California Residents)

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

The right to know what personal information is being collected about you
The right to know whether your personal information is sold or disclosed and to whom
The right to say no to the sale of personal information
The right to access your personal information
The right to request deletion of your personal information
The right to equal service and price, even if you exercise your privacy rights
The right to correct inaccurate personal information
The right to limit the use and disclosure of sensitive personal information

To exercise any of these rights, please contact us at hi@stealthx.co.

"Do Not Track" Policy

Our Service does not respond to Do Not Track signals. However, some third-party websites do keep track of Your browsing activities. If You are visiting such websites, You can set Your preferences in Your web browser to inform websites that You do not want to be tracked.

You can enable or disable DNT by visiting the preferences or settings page of Your web browser.

Children's Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us.

If We become aware that We have collected Personal Data from anyone under the age of 13 without verification of parental consent, We take steps to remove that information from Our servers.

Links to Other Websites

Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.

We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the "Last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, You can contact us:

By email: hi@stealthx.co
By mail: StealthX LLC, 5540 Centerview Dr, Ste 204 PMB 315715, Raleigh, NC 27606