LEGAL // PRIVACY
Privacy Policy
EFFECTIVE 2026-06-21 · SUREEL AI (A BRAND OF SUREEL VENTURES LLC)
What this policy covers
This policy describes how Sureel AI — a brand of Sureel Ventures LLC (“Sureel,” “we,” or “us”) — handles information collected through this website at sureel.com. This site is a showcase: there is no intake form and no account to create. The only way visitors share information with us is by emailing us directly. This policy does not govern data handling under any signed consulting engagement, NDA, or master services agreement — those relationships are governed by their own terms.
What we collect
- Direct email. The site has no form — visitors reach us by emailing hello@sureel.com directly, and we receive whatever you choose to send (your email address and the contents of your message). Inbound mail is processed through Microsoft 365.
- Vercel Analytics.We use Vercel's built-in analytics, which records cookieless page-view counts, geographic region (country-level), referrer, and approximate device class. No cross-site tracking, no third-party advertising cookies.
- Server access logs. Our host (Vercel) records standard request metadata for every page view — IP address, user-agent, requested URL, timestamp, HTTP status — for diagnostics and abuse prevention.
How we use it
- To read and respond to any email you send us.
- To operate and secure the site (access logs, abuse prevention).
- To understand aggregate visitor patterns (Vercel Analytics — no individual visitor profiles).
We don't sell, rent, or share your information with anyone outside the third-party processors named below.
Sub-processors
We rely on the following third-party service providers (“sub-processors”) to operate this website. Each one has a published security attestation, and we maintain a Data Processing Agreement (DPA) where applicable.
| Sub-processor | Service | Location | Attestation |
|---|---|---|---|
| Vercel Inc. | Hosting + CDN + analytics | USA | SOC 2 Type II |
| Microsoft 365 | Inbound + business email | USA | SOC 1/2/3, ISO 27001 |
| Cloudflare / GoDaddy | DNS | USA | SOC 2 Type II |
Specific notes
- Microsoft 365. Email you send us is delivered and stored through Microsoft 365. See microsoft.com/trust-center/privacy.
- Vercel. See vercel.com/legal/privacy-policy.
We notify clients of any new sub-processor with access to client data at least 30 days before the change takes effect, per standard DPA terms.
How long we keep it
Email correspondence is retained in our email system for as long as an active or recent relationship justifies, then archived or deleted per our internal retention schedule. Vercel Analytics + access logs follow Vercel's default retention windows.
Engagement data (consulting clients)
For active consulting engagements, all client data, source materials, code, and deliverables are handled under the signed MSA / NDA / engagement letter — not under this site privacy policy. Client information stays inside client-specific workspaces and never gets cross-pollinated across engagements.
Children
This site is not directed to children under 13. We don't knowingly collect information from children.
Your rights
You can request a copy of, correction to, or deletion of information we hold about you by emailing hello@sureel.com. We respond within 30 days (or 45 if the request is complex, with notice).
Depending on where you live, the following rights apply:
- California (CCPA / CPRA). Right to know what we've collected, right to delete, right to correct, right to limit use of sensitive personal information, right to non-discrimination, and right to opt out of “sale” or “sharing” (see the next section).
- European Union / United Kingdom (GDPR + UK GDPR). Article 15 (access), Article 16 (rectification), Article 17 (erasure), Article 20 (data portability), Article 21 (object to processing).
- Other US states. Virginia, Colorado, Connecticut, Utah, and other state laws extend similar rights; email us and we'll apply the appropriate framework.
Do Not Sell or Share (CCPA)
Sureel AI does not sell personal information for money. We do not “share” personal information for cross-context behavioral advertising as those terms are defined by CCPA / CPRA. We use only first-party analytics (Vercel) and never broker visitor or client data to third-party ad networks.
California residents can confirm this in writing, or request changes, by emailing hello@sureel.com with subject line “Do Not Sell or Share — CCPA Request.” We respond within 15 business days.
Changes
We may update this policy as our practices change. The “Effective” date at the top reflects the most recent revision.
Contact
Questions about this policy: hello@sureel.com.