This policy describes information handled through the Custom Outdoor Solutions website and the choices available when you contact us online.
Information you provide
Contact and estimate forms may collect your name, email address, US phone number, ZIP code, optional project address, preferred contact method, service interest, project type, project description, budget range, desired start date, attachments, and contact or SMS consent choices. Chat messages are stored with an opaque browser session so the assistant can maintain context.
Technical and attribution information
The service may process an IP address for rate limiting and human verification. Consent records retain a keyed one-way hash rather than the raw IP. The service may also retain a limited user-agent string, referral URL, landing page, UTM fields, timestamps, correlation identifiers, and operational metrics.
How information is used
Information is used to review and respond to project requests, operate the virtual assistant, maintain security, prevent abuse, preserve consent records, troubleshoot the service, and meet legal obligations. A form submission is not a confirmed appointment or final estimate.
Service providers
The system is designed to use infrastructure providers for hosting, PostgreSQL, Redis, private object storage, Cloudflare Turnstile, and an artificial-intelligence provider. Additional email, messaging, analytics, or advertising providers may be used as website features evolve, and this policy may be updated to reflect those changes.
Artificial intelligence
Chat questions and retrieved company context may be processed by the configured AI provider to generate a response. Do not submit sensitive personal, financial, medical, identity, or access information in chat. The assistant may be incomplete and does not provide legal, financial, engineering, or safety guarantees.
Attachments
Image and PDF attachments are uploaded directly to non-public object storage using short-lived, constrained upload authorization. Random object names are used instead of customer filenames for storage. Do not upload sensitive or unrelated documents.
Retention and deletion
Information should be retained only as long as reasonably necessary for the request, security, consent evidence, legal obligations, and business records. To request access, correction, or deletion, use the contact form; identity may need to be verified.
Cookies and browser storage
The chat uses session storage for an opaque session token and conversation identifier. Marketing analytics are not loaded by this implementation before recorded analytics consent. Future cookie or tracking integrations may require an updated notice and consent controls.
Security and choices
Reasonable technical safeguards reduce risk but no online system is perfectly secure. You may choose email or phone instead of SMS, and you may withdraw SMS consent by replying STOP when messaging is active. See the SMS Terms.
Contact
Use the contact page for privacy questions or requests related to your information.