Privacy Policy

Last updated: March 10, 2026

1. Overview

STL Agent ("we", "our", "the Service") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.

2. Information We Collect

From Contractors (Account Holders)

  • Account data: name, email, password (encrypted), phone number
  • Business data: business name, service type, location, service area, bio, logo
  • Integration data: Telegram chat ID (for notifications)
  • Usage data: login times, feature usage, IP address

From Leads (End Customers)

  • Contact data: name, phone number, email (optional), address (optional)
  • Service data: service needed, urgency level, free-text message
  • Communication data: messages exchanged with the contractor through the platform

3. How We Use Your Data

  • Service delivery: matching leads with contractors, sending notifications, generating AI responses
  • Communication: Telegram notifications, email confirmations, account alerts
  • AI processing: lead data is sent to Anthropic's Claude API to generate auto-responses. Anthropic does not use this data for training.
  • Analytics: aggregated, non-identifying metrics for service improvement

4. Data Storage and Security

  • Data is stored on secured servers with encrypted connections (TLS/SSL).
  • Passwords are encrypted using bcrypt and never stored in plain text.
  • API keys are generated using cryptographically secure random functions.
  • We implement rate limiting to prevent abuse.

5. Third-Party Services

We share data with the following services only as necessary to operate:

  • Anthropic (Claude AI): lead details for generating auto-responses
  • Telegram Bot API: contractor chat ID and notification content
  • SMTP provider: email addresses for transactional emails (confirmations, password resets)

We do not sell, rent, or trade your personal data to any third party.

6. Data Retention

  • Active accounts: data retained for the life of the account.
  • Deleted accounts: data deleted within 30 days of account closure.
  • Lead data: retained as long as the contractor's account is active. Contractors may delete individual leads.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Export your data in a portable format
  • Withdraw consent for data processing

To exercise these rights, contact us at ahmed@ahmednadar.com.

8. Cookies

We use essential cookies for authentication and session management. We do not use tracking cookies or third-party analytics cookies.

9. Canadian Privacy Law (PIPEDA)

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA). We collect only the minimum data necessary, obtain consent, and provide access to your data upon request.

10. Children

The Service is not intended for individuals under 18 years of age. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this policy from time to time. We will notify registered users of material changes via email. Continued use after changes constitutes acceptance.

12. Contact

For privacy questions or data requests: ahmed@ahmednadar.com