Privacy Policy — sose.ai
Status: Draft template. Must be reviewed by a TCPA/privacy attorney before launch. Replace all bracketed placeholders.
Effective Date: [DATE] Last Updated: [DATE]
1. Who we are
sose.ai ("sose," "we," "us," "our") is operated by Gold Alien, LLC, a Florida limited liability company, with a mailing address of [BUSINESS ADDRESS]. Contact: privacy@sose.ai.
sose.ai connects homeowners with third-party solar installation companies ("Marketing Partners"). We are not a solar installer, lender, or contractor. See the Disclaimer.
2. Scope
This Privacy Policy covers personal information we collect through:
- The sose.ai website and any subdomains
- Our AI chat assistant and online forms
- Direct-mail responses (postcards, QR codes)
- Paid advertising landing pages (Meta, Google, etc.)
3. Information we collect
3.1 Information you give us
- Contact information: name, phone number, email, street address
- Home details: average electric bill, homeownership status, roof type, approximate roof age
- Consent records: IP address, timestamp, page URL, TrustedForm/Jornaya tokens, consent language shown
3.2 Information we collect automatically
- Device and browser information (user agent, screen size, language)
- IP address and approximate geolocation
- Pages visited, time on site, referral source, UTM parameters
- Cookies and similar technologies (see Cookie Policy)
3.3 Information from third parties
- Public permit records (municipal open-data portals) — we may match your address against public building-permit data to determine roof age
- Google Solar API — roof size, shape, and sun-exposure estimates for your address
- OpenEI URDB — utility rates for your zip code
- Ad platforms — aggregated campaign performance data from Meta, Google, and similar services
We do not purchase or receive consumer contact lists from data brokers.
4. How we use your information
We use your information to:
- Generate a personalized solar-savings estimate
- Transmit your lead to Marketing Partners who may contact you about solar
- Verify consent and maintain compliance records (TCPA, state telemarketing laws)
- Improve our website, ads, and chat model
- Detect fraud, abuse, and bot traffic
- Comply with legal obligations
Legal bases we rely on include: your consent, our legitimate interest in operating and improving the service, and legal obligation.
5. How we share your information
5.1 Marketing Partners
When you submit a lead form or complete the chat, we share your information with up to four (4) solar-related Marketing Partners identified on our Marketing Partners page at the time of submission. Each partner may contact you independently. We receive a fee for each qualified lead.
5.2 Service providers
- Hosting and infrastructure: Vercel, Inc.; Cloudflare, Inc.
- Lead delivery and compliance: PX.com (Prospect Exchange), ActiveProspect (TrustedForm), Jornaya/Verisk (LeadiD)
- Analytics and advertising: Meta Platforms, Google LLC
- Email and chat infrastructure: [LIST]
- Payment processing: [IF APPLICABLE]
5.3 Legal and safety
We may disclose information to comply with law, respond to valid legal requests, enforce our terms, or protect rights, property, and safety.
5.4 Business transfers
If we merge, are acquired, or sell assets, personal information may transfer to the successor subject to this policy.
5.5 We do not sell your information for unrelated third-party marketing
Sharing with Marketing Partners is the core service you request when you submit a lead. Under CCPA/CPRA, this may be considered a "sale" or "sharing" of personal information; see Section 8.
6. How long we keep your information
| Data | Retention |
|---|---|
| Lead submissions and consent records | 5 years (FCC and TCPA evidentiary requirement) |
| TrustedForm / Jornaya tokens | 5 years |
| Internal Do-Not-Call list | Indefinitely (required by federal and state law) |
| Website analytics | 26 months (Meta/Google default) |
| Chat transcripts | 2 years for model training and compliance |
7. How we protect your information
We use HTTPS/TLS for all transmissions, access controls on our backend systems, encrypted databases, and regularly patched infrastructure. No system is 100% secure; we cannot guarantee absolute security.
8. Your privacy rights
8.1 All users
- Opt out of future marketing (see Opt-Out Policy)
- Revoke TCPA consent at any time by replying STOP, emailing privacy@sose.ai, or calling [PHONE]
- Request correction of inaccurate information
8.2 California residents (CCPA/CPRA)
You have the right to:
- Know what personal information we collect, use, share, or sell
- Request deletion of your personal information
- Opt out of the "sale" or "sharing" of your personal information
- Limit use of sensitive personal information
- Non-discrimination for exercising these rights
To exercise: email privacy@sose.ai with subject "California Privacy Request" or visit sose.ai/do-not-sell. We verify requests by matching the name, email, phone, and address you provided to us.
Categories of personal information collected in the past 12 months: identifiers, commercial information, internet activity, geolocation, inferences. Sources and recipients are described in Sections 3 and 5.
8.3 Other state residents (VA, CO, CT, UT, TX, OR, etc.)
Residents of states with comprehensive privacy laws have rights similar to California's, including access, correction, deletion, and opt-out of targeted advertising or "sales." Submit requests to privacy@sose.ai.
8.4 EU/UK residents
We do not intentionally market to EU or UK residents. If you are located in the EU/UK and receive our services, you have rights under GDPR/UK GDPR including access, rectification, erasure, restriction, portability, and objection. We are not required to appoint an EU representative at this time.
8.5 Nevada residents
Nevada residents may opt out of the sale of certain personal information by emailing privacy@sose.ai.
9. Children's privacy
sose.ai is not directed to children under 16. We do not knowingly collect personal information from children. If we learn we have collected information from a child under 16, we will delete it.
10. Do Not Track
We do not currently respond to "Do Not Track" browser signals. We do honor Global Privacy Control (GPC) signals as a valid opt-out request from California and Colorado residents.
11. International transfers
We operate in the United States. If you access the service from outside the U.S., your information will be transferred to and processed in the U.S.
12. Third-party links
Our website may link to third-party websites (partners, blog sources). We are not responsible for their privacy practices.
13. Changes to this policy
We may update this Privacy Policy. Material changes will be posted here with a revised "Last Updated" date and, where required, notified to you.
14. Contact us
Gold Alien, LLC [BUSINESS ADDRESS] Email: privacy@sose.ai Phone: [PHONE]
Related policies: