Privacy Policy

Last Updated: November 10, 2026

This Privacy Policy explains what Caruso Tech Services LLC ("CTS," "we," "us," or "our") collects when you visit www.CarusoTechServices.com, contact us, request a free website mockup or email security scan, apply for a role, or become a client, and what we do with it. We wrote it to describe what actually happens, not what a template says should happen. If anything here is unclear, email us at Info@CarusoTechServices.com.

1. Who We Are

Caruso Tech Services LLC is a Pennsylvania limited liability company based in Pittsburgh, Pennsylvania. We provide AI and automation services, managed IT, cloud, and web services to small businesses. We are the "controller" of the personal information described in this policy, meaning we decide how and why it is used.

2. Information We Collect

Website visitors (collected automatically): IP address, browser type and version, device and operating system, pages visited and time on page, referring website, and approximate region. This comes from our analytics tools described in Section 4. We do not combine it with the information you give us on a form.

Contact and chat forms: name, email address, phone number, company, the service you are interested in, your message, any file you choose to attach, and whether you ticked the box to receive email updates.

Free website mockup requests: your name, business name, trade, email address, optional phone number, the address of your current website, and what you tell us bugs you about it. To build the preview we also review the publicly available content of the website you submit.

Free email security scans: your name, optional business name, the domain you ask us to scan, and an email address at that domain. The scan reads only that domain's public DNS records and public website; we never log in to, send to, or test your mailboxes. The report is emailed only to the address you give, and a copy comes to us.

Blog digest subscribers: your email address, and when you confirmed your subscription. You are added only after you press the button in the confirmation email we send to that address.

Job applicants: name, email address, phone number, the role you are interested in, optional city and state, optional resume, optional LinkedIn profile address, and the pitch you write. We do not ask for, and ask you not to include, Social Security numbers, dates of birth, or salary history.

Calculators: the numbers you enter into our calculators stay in your browser. If you choose "Send me these numbers," they are placed into the contact form so you can review them before you submit.

Clients: when you become a paying client we also collect business name and billing address, billing contact name and email, invoice line items, service agreements, payment history, and the technical details needed to deliver the service you hired us for. Payment method details are collected and stored by our payment processor; CTS does not store full card numbers, security codes, or expiration dates on its own systems.

3. How We Use Your Information

To respond to your inquiry, call or text you back about it, and schedule a conversation
To build and deliver a free website mockup you requested
To consider your job application and contact you about it
To deliver, invoice, and support the services you have engaged us for
To send email updates and promotions, only if you ticked the box asking for them (Section 6)
To send the weekly blog digest, only if you subscribed and confirmed (Section 6)
To understand how the website is used and improve it
To detect spam, abuse, and security incidents
To meet legal, tax, and accounting obligations

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not use your information to train AI models.

4. Cookies, Analytics, and Similar Technologies

The website sets a small number of cookies and browser-storage items. There are no advertising or marketing cookies.

Google Analytics 4 (cookies named _ga and _ga_*, up to two years): aggregate traffic and page-usage statistics. We use it for statistics, not advertising.
Umami (no cookies): privacy-focused analytics that counts page views and button clicks without identifying individual visitors.
Accessibility widget preferences (first-party cookie): remembers the contrast, text-size, and other display choices you make in the accessibility menu. Set only if you use the widget.
Theme and form helpers (browser storage, never sent to us): your light or dark mode choice, and the service you pre-selected before reaching the contact form.

You can block or delete cookies in your browser settings, and Google offers a browser add-on that disables Google Analytics. The website works without cookies.

5. Phone Calls and Text Messages

If you give us a phone number on a form, we may call or text that number to respond to the specific request you made, such as answering your question, scheduling a call, following up on an application, or sending the link to a mockup you asked for. These are one-to-one messages about your request. We do not send marketing or promotional text messages. Message and data rates from your carrier may apply, and you can reply STOP to any text to end further texts from us.

6. Marketing Email

We send email updates and promotions only to people who ticked the "Sign up for email updates" box on our contact form or otherwise asked to receive them. Every marketing email includes an unsubscribe link and our mailing address. You can also opt out at any time by emailing Info@CarusoTechServices.com. The weekly blog digest goes only to people who signed up for it on our blog and then confirmed from the email we sent them; it contains only our blog posts. Opting out of marketing does not affect emails we send to respond to your request or to administer an active client account.

7. Service Providers We Share Information With

We use a small set of providers to run the website and deliver services. Each one processes information only on our instructions and under its own privacy and security terms.

Vercel (Vercel Inc., United States): hosts the website and its serverless functions, and logs requests for security and performance.
Web3Forms (Web3Creative, India): delivers our contact, chat, mockup, and careers form submissions to our mailbox and holds a copy in its dashboard for up to three years under its data processing agreement.
Google: Google Analytics (Section 4), Google Fonts (loads our typefaces, so Google receives your IP address when fonts load), Google Maps Platform (displays our Google Business Profile reviews), and Google Workspace (our email).
Umami Software: cookieless analytics (Section 4).
Cloudflare cdnjs: serves the icon library used on the site.
GitHub and Anthropic: when you request a free website mockup, your business name, trade, website address, and notes are sent to an automated build process that runs on GitHub and uses Anthropic's Claude models to draft the preview. Anthropic does not use data sent through its commercial API to train its models.
GitHub and Resend: when you request an email security scan, your name, business name, domain and email address are sent to an automated process that runs on GitHub, and the report is emailed to you through Resend (Resend Inc., United States), which keeps delivery records under its own terms. If you subscribe to the blog digest, your email address is sent through the same GitHub process, and Resend holds the subscriber list and sends the digest.
Intuit QuickBooks Online and Stripe: invoicing, payment processing, and financial records for clients. Payment card details are handled by these processors and are not stored by CTS. See Intuit's Privacy Statement and Stripe's Privacy Policy.
Remote monitoring, security, and backup tooling: for managed-services clients only, under the client agreement. A complete list of the tools used on your account is available on request.

We may also disclose information when required by law, subpoena, or court order, to protect our rights or the safety of others, or as part of a merger, acquisition, or sale of assets, in which case this policy will continue to apply to the transferred information.

8. How Long We Keep Information

Form submissions and inquiries: kept in our mailbox for up to two years after our last contact with you, then deleted. Web3Forms retains its copy for up to three years.
Job applications: up to 12 months after we receive them, unless you are hired or you ask us to delete them sooner.
Free website mockups: preview sites are removed at your request at any time.
Marketing list and blog digest list: until you unsubscribe.
Client records: for the length of the engagement, then as long as required for tax, accounting, and legal purposes (generally seven years for financial records).
Analytics: Google Analytics event data for up to 14 months; Umami keeps aggregate statistics only.

9. Your Choices and Rights

Whatever state or country you live in, you can ask us to:

Tell you what personal information we hold about you
Correct information that is inaccurate
Delete your information, including a job application or a mockup preview
Stop sending you marketing email
Withdraw consent you previously gave

To make a request, email Info@CarusoTechServices.com with the subject line "Privacy Request." We will respond within 30 days. We may ask you to confirm your identity so we do not act on someone else's request. We will not treat you differently for exercising these rights. Because we do not sell personal information or share it for targeted advertising, there is nothing to opt out of in that respect, and browser "Global Privacy Control" signals do not change how we handle your data.

10. Data Security

The website is served over HTTPS only, form submissions are protected against automated abuse, and access to the systems that hold your information is limited to the people who need it and protected by multi-factor authentication. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we learn of a breach affecting your personal information, we will notify you as required by the Pennsylvania Breach of Personal Information Notification Act and any other applicable law.

11. Children's Privacy

Our website and services are for businesses and are not directed to anyone under 18. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

12. Changes to This Policy

When we change this policy we will post the new version here and update the "Last Updated" date. If a change materially affects how we use information you have already given us, we will also tell active clients and marketing subscribers by email.

13. Contact Us

Email: Info@CarusoTechServices.com
Phone: (412) 307-8313
Mail: Caruso Tech Services LLC, Pittsburgh, PA (street address provided on request)
Hours: Monday – Friday, 9:00 AM – 5:00 PM ET; Saturday, 8:00 AM – 12:00 PM ET