Effective Date: May 7, 2026
Last Updated: May 7, 2026
Last Reviewed: May 7, 2026
Next Review Due: November 7, 2026

This Privacy Policy describes how Stonesystems LLC ("Stone Systems," "we," "us," or "our") collects, uses, and discloses your information when you respond to our advertisements, visit our websites - including stonesystems.io, grow.stonesystems.io, and app.stonesystems.io (collectively, the "Sites") - contact us, or use our products and services (the "Services"). It also tells you about your privacy rights and how the law protects you. By using the Services, you agree to the collection and use of information in accordance with this Privacy Policy.

This Policy includes specific disclosures required by the laws of California, Colorado, Connecticut, Oregon, Texas, Virginia, and other states with comprehensive consumer privacy laws.

If you have questions, contact us at [email protected] or (808) 645-4509.

1. Quick Summary

• We collect contact information, business information, payment information, and online activity data.
• We use it to deliver our Services, market to prospective customers, and run our business.
• We share it with service providers, advertising partners, and as required by law.
• We do not sell personal information for money. We do share certain information with advertising partners for cross-context behavioral advertising - you can opt out at any time.
• We record sales, onboarding, and support calls.
• You have rights to access, delete, correct, and limit how we use your information. See Section 12 to exercise them.

2. Mobile Communication Policy

We value your privacy and are committed to protecting your personal information. When you provide your mobile number, you consent to receive SMS messages related to our services, including notifications, account communications, and (if you opt in) marketing offers. Your mobile opt-in will not be shared with third parties for marketing purposes.

• Opt-Out: Reply STOP to any message to opt out at any time.
• Help: Reply HELP for support.
• Frequency: Message frequency varies based on your interactions with us.
• Cost: Standard message and data rates apply per your carrier's terms.

Phone numbers may be processed by service providers (such as our SMS sender and CRM, GoHighLevel) only to deliver the messages you have consented to receive.

3. Information We Collect

We collect the following categories of personal information:

We do not knowingly collect: precise geolocation, racial or ethnic origin, religious beliefs, sexual orientation, immigration status, genetic data, biometric data, health information, or information about children under 16.

4. Where We Get Your Information

• Directly from you - when you fill out a form, book a call, sign up, or contact us.
• From your device - through cookies, pixels, and similar technologies on our Sites.
• From advertising partners - Meta, Google, and other ad platforms that deliver our advertising.
• From service providers - including our CRM (GoHighLevel), payment processor (Stripe), and analytics providers.
• From publicly available sources - business directories, public records, and similar.

5. How We Use Your Information

We use personal information for these business and commercial purposes:

1. Provide and operate the Services - account creation, billing, customer support, communications about your account.
2. Sales and marketing - respond to inquiries, follow up on leads, send promotional emails and SMS messages (where consented), retarget on advertising platforms.
3. Analytics and improvement - understand how the Sites and Services are used, diagnose problems, develop new features.
4. Advertising - measure ad performance, build lookalike audiences, retarget visitors. This is "sharing" under California law - see Section 7.
5. Quality assurance and training - review and use call recordings to train our team and improve service.
6. Security and fraud prevention - detect, investigate, and prevent fraudulent or unauthorized activity.
7. Legal compliance - comply with applicable laws, court orders, and regulatory requirements.
8. Business operations - accounting, recordkeeping, audits, corporate transactions.

We will not use your sensitive personal information for purposes other than those permitted by California law without first offering you a right to limit such use.

6. How We Share Your Information

We share personal information with the following categories of recipients:

We require service providers to use personal information only for the purposes we authorize and under contractual obligations of confidentiality and security.

7. Sale and Sharing of Personal Information

We do not sell personal information for money.

We do share the following categories of personal information with advertising partners for cross-context behavioral advertising (which is treated as a "sale" or "sharing" under California, Colorado, Connecticut, and other state laws):

• Identifiers (e.g., online identifiers, IP address)
• Internet activity (e.g., pages visited, ads clicked)
• Inferences

You have the right to opt out of this sharing at any time.

1. Use the Do Not Sell or Share My Personal Information link in our website footer (or visit stonesystems.io/do-not-sell).
2. Email [email protected] with subject line "Opt Out of Sale/Sharing."
3. Enable a Global Privacy Control (GPC) signal in your browser - we automatically honor GPC for visitors from California, Colorado, Connecticut, and other states recognizing universal opt-out signals.

We do not knowingly sell or share personal information of consumers under 16 years of age.

8. Cookies, Pixels, and Tracking Technologies

We use cookies, pixels, software development kits, and similar technologies on our Sites to:

• Keep you logged in and remember your preferences (essential).
• Measure traffic and performance (analytics - PostHog, Google Analytics).
• Deliver and measure advertising (Meta Pixel, Google Ads, and similar).

Managing cookies:

• Cookie preference center: click the "Cookie Settings" link in our footer to accept, reject, or customize cookies.
• Browser settings: most browsers let you block or delete cookies.
• Global Privacy Control: enabling GPC in your browser tells us to opt you out of sharing for advertising - we honor this automatically.
• Industry opt-outs: optout.aboutads.info and optout.networkadvertising.org.

We do not use session replay technology on our Sites.

9. Call Recording

We record sales, onboarding, and support calls for quality assurance, training, recordkeeping, and dispute resolution. At the start of each call, we provide a verbal notice that the call is being recorded. By continuing the call after this notice, you consent to being recorded. If you do not wish to be recorded, please tell us at the start of the call and we will end or pause the recording.

Recordings are stored securely, accessible only to authorized personnel and our service providers, and retained as described in Section 10.

10. Data Retention

We retain personal information for as long as is necessary to provide the Services, fulfill the purposes described in this Policy, comply with our legal and accounting obligations, resolve disputes, and enforce our agreements.

Specifically:

You may request deletion at any time as described in Section 12. After deletion is processed, we may retain limited information necessary to comply with legal obligations, resolve disputes, prevent fraud, and enforce our agreements.

11. Your Privacy Rights

Depending on the state where you reside, you have some or all of the following rights:

12. How to Exercise Your Rights

You can submit a request in any of the following ways:

1. Web form: stonesystems.io/privacy-request
2. Email: [email protected]
3. Phone: (808) 645-4509

We will:

• Acknowledge your request within 10 business days.
• Respond within 45 days. If we need more time, we will notify you and may extend by an additional 45 days.
• Provide the first request in any 12-month period at no charge.

Verification. To protect your information, we will ask you to confirm details we already have on file (such as your email address and the last interaction we had with you). We may ask for additional verification if the request involves sensitive information.

Authorized agents. You may designate an authorized agent to make a request on your behalf. We will require written, signed authorization, and we will verify the identity of the consumer.

Appeals. If we deny your request and you reside in Virginia, Colorado, Connecticut, Texas, or Oregon, you may appeal by emailing [email protected] with subject line "Appeal." We will respond within 45 days (Virginia, Connecticut, Oregon) or 60 days (Colorado, Texas).

13. State-Specific Disclosures

13.1 California (CCPA / CPRA)

In the past 12 months, we have:

• Collected the categories of personal information listed in Section 3.
• Disclosed for a business purpose to service providers and professional advisors.
• Shared for cross-context behavioral advertising with advertising partners (see Section 7).
• Not sold personal information for monetary consideration.
• Not knowingly collected or sold personal information of consumers under 16.

California residents may also designate an authorized agent. We do not offer financial incentives in exchange for personal information.

You may also request information about disclosures we have made for direct marketing purposes under California's "Shine the Light" law by emailing [email protected].

13.2 Colorado (CPA), Connecticut (CTDPA), and Oregon (OCPA)

Residents of Colorado, Connecticut, and Oregon have the rights described in Section 11, including the right to opt out of targeted advertising, sale, and certain profiling. We honor Global Privacy Control as a universal opt-out signal.

13.3 Virginia (VCDPA)

Virginia residents have the rights described in Section 11. We do not engage in profiling that produces legal or similarly significant effects.

13.4 Texas (TDPSA)

Texas residents have the rights described in Section 11. As required by Texas law: We do NOT sell sensitive personal data. We do NOT collect or sell biometric personal data.

13.5 Other States

Residents of other states with comprehensive privacy laws (including Utah, Iowa, Montana, Tennessee, Indiana, Florida, Delaware, New Jersey, New Hampshire, Kentucky, Maryland, Minnesota, and Rhode Island) have the rights granted by the laws of their state. Contact us as described in Section 12 to exercise them.

14. Children's Privacy

The Sites and Services are not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, contact [email protected] and we will delete it.

15. Data Security

The security of your personal information is important to us. We use reasonable administrative, technical, and physical safeguards to protect personal information, including encryption in transit, access controls, and vendor due diligence. However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

16. International Users

The Sites are operated from the United States. If you access them from outside the United States, your information will be transferred to and processed in the United States. By using the Sites, you consent to that transfer.

17. Third-Party Links

The Sites may contain links to third-party websites and services. This Policy does not apply to those third parties. We encourage you to read their privacy policies.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top reflects the most recent change. If we make material changes, we will notify you by posting a notice on the Sites or by email. We will update this Privacy Policy at least once every 12 months.

19. Contact Us

Stonesystems LLC
Email: [email protected]
Phone: (808) 645-4509
Web: stonesystems.io/privacy-request

For privacy-specific questions, please use [email protected] rather than general support channels.