Privacy Policy
This explains what data Startup to Sold touches, why, where it is kept, who else can see it, and how to have it removed. It covers both this website and the AI Operating System we install for clients.
The short version. We do not sell your data. We do not use it to train AI models. When we install an AI Operating System, it runs on a server the client owns, with the client's own accounts, and the client can revoke our access or shut the whole thing down at any time.
Who we are
Startup to Sold is the consulting practice of Chuck Temple, based in Albany, California, United States. We are the data controller for the information described here.
- Email: chuck@startuptosold.com
This website
When you visit startuptosold.com we collect very little.
- Analytics. We use Google Analytics to count visits and see which pages are read. This records things like approximate location, browser, and which pages you viewed. We do not use it to identify you personally.
- Things you send us. If you fill in a form, book a call, or email us, we keep what you send so we can reply and do the work.
We do not run advertising trackers on this site.
The AI Operating System
This is the part that matters most, because it touches real business data. What the product is and every permission it requests is explained on the application page.
Where it runs
Each installation runs on a private server that the client owns, under the client's own hosting account, using the client's own AI subscription. We are not a shared cloud service. One client's information is not stored alongside another's, because they are separate machines.
What it can access
When a client connects a Google account, the assistant is granted access to that account's Gmail, Google Calendar, Google Drive, Google Docs and Google Sheets. It uses that access to triage and draft email, manage the calendar, and read and write the documents, spreadsheets and files the client asks it to work on.
It also handles whatever else the client connects during onboarding, which varies by business and may include messaging, payments, or scheduling tools.
What it does with that data
Data is used only to do the work the client asked for, inside that client's own system. Specifically:
- We do not sell, rent or trade it. Not to advertisers, not to data brokers, not to anyone.
- We do not use it to train AI models. Not ours, and we do not supply it to anyone else for that purpose.
- We do not combine it with other clients' data. Separate servers, separate accounts.
- We do not use it for advertising or profiling.
Where the data goes when the assistant thinks
The assistant is powered by a large language model. To answer a question or draft a reply, the relevant text is sent to the AI provider for processing under the client's own subscription. It travels encrypted, is used to produce that answer, and is not used to train the provider's models under the business terms that apply to these accounts.
We name this plainly because it is the part people most want to know: the AI reads what you ask it to work on. That is how it works, and it is the reason we install it on a server you own rather than one we control.
Who else can see it
- The client and anyone they authorize. It is their server and their data.
- Chuck Temple, while engaged. Maintaining the system means being able to see what it did and why, including its logs. This access exists to keep the system running and is not used for anything else. It ends when the engagement ends.
- The infrastructure providers that host the server and provide the AI model, in the ordinary course of running those services.
We do not otherwise disclose client data, except where the law requires it.
How long it is kept
The assistant keeps working files, notes and logs on the client's own server for as long as the client keeps them. There is no separate copy held by Startup to Sold. When an engagement ends, the client keeps the server and everything on it, and our access is removed.
How to revoke access or have data deleted
To disconnect Google access: go to your Google account permissions page, find Startup to Sold, and choose Remove access. This takes effect immediately and needs nothing from us.
To have data deleted, or to ask what we hold: email chuck@startuptosold.com. We will respond within 30 days. Depending on where you live you may have the right to see, correct, export, or delete your personal information, and to object to how it is used. We honour these requests regardless of where you live.
Security
Access to a client's system is protected by passwords and, where the service offers it, two factor authentication. Credentials are stored with file permissions that restrict them to the account that needs them, and are not written into documents or shared in plain text. Traffic to and from the system is encrypted.
No system is perfectly secure, and we will not claim otherwise. If a breach affects a client's data, we will tell them promptly and plainly.
Children
Our services are for businesses. We do not knowingly collect personal information from anyone under 16.
Changes to this policy
If this policy changes in a way that affects how client data is handled, we will update this page and change the date below. Material changes affecting an active client will also be told to them directly.
Last updated 28 August 2026.