This Privacy Policy explains how Sully ("we," "us," or "our") collects, uses, discloses, and protects information when you visit sull.ai (the "Site"), subscribe to our newsletter, apply for beta access, or use the applications linked from our dashboard (together, the "Services"). By using the Services you agree to the practices described here.
1. Who we are
Sully is an independent publisher of automation recipes, guides, and software for home service contractors. For questions about this policy or to exercise any of the rights described below, contact us at hello@sull.ai.
2. Information we collect
We collect the following categories of information:
- Information you give us. Email address, name, business name, trade, role, and any free-text you enter when you subscribe, apply for the beta, fill out a form, or send us a message. If you sign in, we also receive the magic-link token your email client returns.
- Usage data. Pages visited, referring URL, device type, browser, IP address, approximate geographic region, and timestamps. Collected automatically when you load the Site.
- Cookies and similar technologies. Session cookies, preference cookies, and advertising pixels.
- Content you submit or connect. When you connect a source (for example Jobber or Gmail), we temporarily process the data the source returns so the knowledge graph can be built. We do not sell this content.
3. How we use information
- Operate, secure, and improve the Services, including debugging and analytics.
- Personalize content (for example, showing a logged-in CTA instead of a subscribe pitch).
- Deliver the newsletter and respond to you.
- Measure the effectiveness of our advertising and marketing, including campaigns we run on Meta (Facebook and Instagram) and other platforms.
- Comply with legal obligations and enforce our Terms.
Legal bases (EEA/UK visitors). We rely on your consent for marketing cookies and the newsletter; on contract performance to operate the Services you request; and on our legitimate interest in running and securing a viable business for the remainder.
4. Meta advertising, Pixel, and Custom Audiences
We advertise on Meta platforms (Facebook and Instagram) and use the Meta Pixel and Conversions API to measure results. When you visit the Site, Meta may receive event data such as the pages you view, whether you subscribed, and a hashed version of identifiers like your email address if you choose to provide one. Meta uses this to:
- Attribute conversions to our ads.
- Build Custom Audiences and Lookalike Audiences we can target in future campaigns.
- Serve you more relevant advertising across Facebook, Instagram, Messenger, and the Meta Audience Network.
We do not upload identifiable customer lists that we have not collected lawfully, and we hash personal identifiers before sending them through the Conversions API. Meta acts as an independent controller for the data it receives. You can review and adjust what Meta knows about you at facebook.com/settings?tab=ads and opt out of interest-based advertising at youradchoices.com or aboutads.info/choices.
5. Newsletter delivery (Beehiiv)
Our newsletter is delivered by Beehiiv, Inc. When you subscribe we share your email address, the date you signed up, the IP address at the time of signup, and any preferences you give us so Beehiiv can deliver the emails, measure opens and clicks, and handle unsubscribes. Beehiiv processes this data as our subprocessor under its own privacy policy. Every email we send contains a one-click unsubscribe link, and you can email us to be removed.
6. Other service providers we share data with
We share limited information with vendors that help us run the Services, under written agreements that require them to protect your data and use it only for the purposes we authorize:
- Supabase (authentication, database hosting)
- Vercel (application hosting)
- Resend (transactional email)
- Anthropic and OpenAI (AI model inference)
- Cloudflare and similar infrastructure providers
- Privacy-friendly analytics providers
We do not sell your personal information, and we do not share it with third parties for their own independent marketing.
7. How long we keep information
We keep subscriber records for as long as you remain subscribed and for a reasonable period afterward to honor suppression lists and legal obligations. Application logs and analytics are typically retained for twelve months. Content you connect to the knowledge graph is kept for the life of your tenant and deleted on request.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, or port your personal information; to object to or restrict certain processing; to withdraw consent; and to lodge a complaint with a supervisory authority. California residents have additional rights under the CCPA/CPRA, including the right to know what personal information we have collected and the right to opt out of "sharing" for cross-context behavioral advertising. To exercise any of these rights, email hello@sull.ai. We will verify your request and respond within the timeframes required by law.
9. Children
The Services are intended for adult business operators and are not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
10. International transfers
We are based in the United States and our service providers may be located in the United States and other countries. If you access the Services from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those of your country.
11. Security
We use reasonable technical and organizational measures to protect information, including encryption in transit, row-level isolation per tenant, limited internal access, and hardened hosting. No system is perfectly secure, so we cannot guarantee absolute security.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we do we will update the "Last updated" date at the top of this page. Material changes will be communicated by email or a prominent notice on the Site.
13. SMS communications
This section applies to account holders who have opted in to receive SMS messages from Sully. Opt-in is always a separate, unchecked-by-default checkbox on the settings screen; we never bundle SMS consent with any other agreement.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Mobile information includes your phone number, SMS opt-in status, and the content of messages you send to or receive from us. We do not sell, rent, or otherwise transfer this information to third parties for their own marketing.
What we use your mobile number for. We use it to deliver the messages you asked for — typically a daily morning brief, account alerts, and drafts awaiting your approval — and to route any replies you send back to the assistant. We also use it for transactional account security messages (for example, to confirm an opt-in or honor a STOP request).
How we collect consent. You provide your phone number and tick a dedicated opt-in checkbox on the settings page. The exact label you saw at the time of consent is stored with your record, along with the date, your IP address, and the user-agent of the browser used. You can request a copy of that record at any time by emailing hello@sull.ai.
Message frequency and costs. Message frequency varies. Message and data rates may apply. Reply STOP to any message to opt out. Reply HELP for help and support.
How long we keep SMS data. Opt-in and opt-out records are retained for as long as you have an account plus seven years after (to meet record-keeping obligations under the TCPA). Message content is retained for eighteen months for delivery auditing, then deleted.
Your rights. You can opt out at any time by replying STOP to any message, un-ticking the SMS box on the settings page, or emailing us. Opt-out is honored immediately across every channel. You can also request deletion of your phone number and message history; we will remove it subject to any legal retention obligation.
Service providers.Twilio delivers our SMS messages as our subprocessor under a written agreement. Twilio processes your phone number, the message body, and delivery metadata strictly for delivery purposes. Twilio's privacy practices are described at twilio.com/legal/privacy.
14. Contact
Sully
Email: hello@sull.ai