Privacy Policy

This Privacy Policy explains how Stelt — a product of Shasha Technology (“Stelt,” “we,” “us,” “our”) — handles information across our products and website. Please read it alongside our Terms of Service and AI Disclaimer.

1. Introduction & scope

Stelt offers two products:

• STELT Business — an AI voice/chat assistant that a business embeds on its own website to answer visitor questions and collect enquiries.
• STELT Personal — a Windows desktop AI assistant (“Willow”) with voice conversation, personalization, and optional tools such as read-only browser awareness, web research, and local file features. STELT Personal is currently offered in a limited/alpha capacity.

This policy covers our website at stelt.ai, the STELT Business dashboard and website widget, and the STELT Personal desktop application. It does not cover third-party websites or services you connect to, which have their own privacy policies.

2. Information we collect

We collect only what we need to run the service. Depending on how you use Stelt, this may include:

• Account information — your email address and, if you register with a password, a securely hashed password (we never store passwords in plain text). If you sign in with Google, we receive and store only your email address, your Google account identifier, and your name; we do not store your Google password, and Google’s sign-in tokens are used only momentarily to complete sign-in and are not retained.
• Business configuration & knowledge (STELT Business) — the assistant’s settings and the knowledge you give it, such as text you enter, files you upload, and the text extracted from web pages you ask it to learn from.
• Assistant configuration & personalization (STELT Personal) — your assistant’s settings, an optional “About You” profile you fill in, and facts you ask the assistant to remember.
• Conversations — the text of your messages and the assistant’s replies, stored so you (or, for a business assistant, the business owner) can review the conversation history. See §3 for voice.
• Enquiries & leads (STELT Business) — details a website visitor submits through a form or the assistant, such as name, email, phone, message, any custom fields, and files the visitor chooses to attach.
• Waitlist — if you join a product waitlist, the email and any details you provide.
• Billing information — if you subscribe, a subscription identifier, plan and status from our payment processor (PayPal). Card/payment-card details are entered on the processor’s own secure pages and are never received or stored by Stelt.
• Provider API keys — Stelt uses a “bring your own key” model. Any AI/voice provider keys you add are encrypted at rest and are never shown back to you or sent to any client/browser.
• Approximate location & limited technical data — for the website widget we derive an approximate location (such as country/city) from the visitor’s IP address and store only that derived location; we do not store the IP address itself. A random visitor identifier is stored in the visitor’s browser to recognise repeat visits.

3. Voice & AI interactions

When you speak to a Stelt assistant, your speech is sent to our speech-to-text provider (Google Cloud Speech-to-Text) to be transcribed into text. We do not store your audio recordings — only the resulting text transcript is kept as part of your conversation history. When the assistant speaks back, the reply text is sent to a text-to-speech provider (Google Cloud Text-to-Speech) to generate audio, which is played to you and not stored on our servers.

Your messages, the relevant knowledge or context for that turn, and the assistant’s replies are processed by an AI model provider (see §10) to generate a response. This processing happens per request, to fulfil that request.

4. Files, browser awareness & local workspace (STELT Personal)

• Files & documents stay on your device. Files that Willow reads, creates, downloads, renames, or edits, and her local knowledge/memory store, live on your own computer, in a folder you choose. They are not uploaded to or stored on Stelt’s servers. There is intentionally no server-side document storage for STELT Personal.
• Browser awareness is read-only and used only in the moment. If you enable it and ask about the page you’re viewing, the desktop app sends a snapshot of that page’s text to help answer that single request. It is used for that turn and is not stored; obvious secrets (such as apparent passwords or card numbers) are scrubbed before it is used. Willow cannot click, type, or navigate in your browser.
• Image features. Image generation, background removal, and vision operate on image files on your device; when a provider is needed (for example to generate an image or remove a background), only the specific image or prompt required for that task is sent to the provider (see §10).

5. Memory & personalization

To make help more relevant, a Personal assistant can keep an “About You” profile you provide and a small set of facts you ask it to remember. You can turn learning off, and you can view, edit, or delete individual memories in the dashboard. Your profile and memories are private to your account.

6. STELT Business & website-visitor data

When a business runs STELT Business on its website, we process visitor interactions on that business’s behalf so the business can answer questions and receive enquiries. This includes the text of the visitor’s conversation, any enquiry/lead details the visitor submits, a random visitor identifier, and an approximate derived location. This information is made available to the business that operates the assistant. If you are a visitor to a business’s website, that business’s own privacy notice governs its use of your information; please contact that business with requests about it.

7. Connected services & OAuth

Some Stelt/Shasha Technology products let you connect a third-party account (for example, a social or productivity service) so the assistant can perform tasks you ask for. When you connect an account:

• Authentication happens on the provider’s own website. We do not receive or store your password for that provider.
• The provider gives us an authorization token and the specific account information needed for the integration you requested. Tokens are stored securely on the server side and are not exposed to browsers.
• Access is limited to the permissions (scopes) you grant, and you can disconnect the integration to revoke access, subject to how the integration is implemented.

Some connected-service integrations are still in development and may not be generally available.

8. Pinterest integration

Where a Shasha Technology product offers a Pinterest integration and you choose to connect your Pinterest account, you authorize us — through Pinterest’s own authorization screen — to access the account and board information you permit and to create and manage Pins on your own authorized Pinterest account according to the permissions you grant. We receive an authorization token from Pinterest; we do not receive your Pinterest password. We use this access only to perform the publishing actions you request.

We do not access other users’ Pinterest data, manage Pinterest advertising, or sell Pinterest data. You can revoke access at any time from your Pinterest account settings or by disconnecting the integration.

9. How information is used

• To provide, operate, and secure the service and generate AI responses to your requests.
• To store conversation history so you (or a business owner) can review it, and to provide continuity and personalization for Personal assistants.
• To deliver enquiries/leads to the business operating a STELT Business assistant.
• To process subscriptions and manage billing status through our payment processor.
• To respond to your support requests and to protect against fraud, abuse, and security issues.
• To maintain and improve the service. We do not use your conversations, files, or content to train our own AI models, and we do not build advertising profiles from your content.

10. AI & third-party service providers

Stelt relies on third-party providers to deliver core features. Under our “bring your own key” model, many AI calls use API keys you supply. The relevant content for a request is sent to the applicable provider only to perform that request; it is not sent for advertising or, from our side, to train models. Providers process data under their own terms and privacy policies.

The exact providers used depend on the features you enable and the keys you configure. Optional providers are only used if you turn them on.

11. Sharing & processing

We do not sell your personal information. We share information only:

• With service providers listed above, to deliver the features you use.
• With a business you interact with, when you submit an enquiry through that business’s STELT Business assistant.
• For legal reasons, if required by law or to protect the rights, safety, and security of users, the public, or Stelt.
• In a business transfer, such as a merger or acquisition, in which case we will require the recipient to honour this policy.

12. Data retention

We keep information for as long as needed to provide the service and for legitimate business or legal purposes:

• Account information is kept while your account is active.
• Conversation text is retained so it can be reviewed, and is not deleted on a fixed schedule by default. Deleting a Personal assistant removes its profile and learned memories; deleting a business removes its associated conversations, knowledge, and enquiries.
• Enquiries/leads are retained for the business that received them until that business deletes them or the business is deleted.
• Demo assistants and their conversation/knowledge data are automatically purged when the demo period ends.
• Provider keys and billing records are kept while relevant to your account and subscription.

We do not currently offer self-serve deletion of your entire account. To request access to, correction of, or deletion of your information, contact us (see §18) and we will act on your request within a reasonable time. Because provider API keys are encrypted and important content may live only on your own device, we encourage you to keep your own copies of anything important to you.

13. Security

We take reasonable measures to protect information, including: encrypting provider API keys at rest, hashing account passwords, serving the site and dashboard over HTTPS, and limiting access to data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials and any keys you configure confidential.

14. Your choices & rights

• Access, correct, or delete — contact us to request access to, correction of, or deletion of your information.
• Personalization — turn a Personal assistant’s learning on or off and edit or delete individual memories.
• Connected accounts — disconnect a connected third-party account at any time, and revoke access from that provider.
• Subscriptions — cancel a subscription from the dashboard or through PayPal.
• Marketing — where we send optional updates, you can opt out; we do not require marketing consent to use the service.

Depending on where you live, you may have additional rights over your personal information. Contact us to exercise them and we will respond consistent with applicable law.

15. Children’s privacy

Stelt is intended for adults and is not directed to children. You must be at least 18 years old to use Stelt. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact us and we will delete it.

16. International processing

Stelt is operated from Trinidad & Tobago, and information may be processed and stored on infrastructure and by service providers located in other countries, including the United States. By using Stelt, you understand that your information may be transferred to and processed in countries whose data-protection laws may differ from those in your country.

17. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above, and for material changes we will take reasonable steps to notify you. Your continued use of Stelt after an update means you accept the revised policy.

18. Contact us

For privacy questions or requests, contact:

Shasha Technology (Stelt)
Email: shashatechnologyai@gmail.com