Privacy policy (draft)

Who we are

The Tulsa AI Readiness Index and related services are provided by Tulsa Applied AI LLC, based in Tulsa, Oklahoma (“we,” “us”). This page describes what we collect when you use the public assessment and how we use it. It is a working draft: do not rely on it as final legal notice until counsel signs off.

What we collect

• Assessment responses — your answers to readiness questions, including free-text and structured choices (for example, Microsoft 365 configuration and process maturity items).
• Firmographic information — industry, employee count, revenue band, and similar fields used to contextualize your score and ROI model.
• Contact information — name, email, phone, and company you provide at the contact gate, when applicable.
• Technical data — basic request metadata (for example, IP and user agent) as typically logged by our hosting and email providers, used for security and deliverability (retention to be set by final policy).

Why we use it

We process this information to: generate and deliver your results and PDF report; send transactional email (e.g. results link, optional follow-up sequence you can unsubscribe from); run internal operations (e.g. notifications to our team in Slack, stored in the United States where supported); and improve the product. We do not sell your personal information as a standalone commercial product. Marketing use should be limited to the purposes described in your final terms.

Service providers (sub-processors, United States–hosted where stated)

• Supabase (database) — data stored in US region per project settings.
• Resend (transactional email).
• Calendly (scheduling, when you book through our offering).
• Cloudflare (web hosting, Workers, DNS, logs as configured).
• Slack (internal operational notifications, not a customer database).

Final privacy disclosure must name each sub-processor, link to their DPAs, and document transfer mechanisms as needed.

Retention

Retention windows for completed assessments, partial sessions, and logs are not finalized here. Counsel should set explicit retention and deletion rules aligned with the minimum necessary for services, accounting, and legal hold needs.

Your rights

Depending on applicable law, you may have rights to access, delete, correct, or port your data, and to object to certain processing. The mechanism for requests is not final in this draft.

Privacy requests (draft): privacy@tulsaappliedai.com — update to a monitored inbox and add verification + SLA in the final version.

Children

The assessment is not directed to children. Do not use it if you are under 16 (or the age required in your jurisdiction).

Changes

We will post an updated version when this policy changes.