Privacy Policy
How we collect, use, share, protect, and retain information across our website, our communications, and our professional services. Effective October 3, 2026 · Document PRIV-001.
A courtesy Spanish translation is available: Política de Privacidad en español.
1. Who We Are
NorthStar AI Agency, doing business as NorthStar ("NorthStar," "we," "us," or "our"), is a digital engineering agency specialized in AI, founded in 2024, with its registered address in Wichita, Kansas, United States, and legal representation in the United States and Mexico. NorthStar provides artificial intelligence, cybersecurity, and software engineering services to businesses and organizations on a contract basis.
Registered address: 1720 W 27th St, Wichita, KS 67217, United States. Phone: +1 (316) 296-8450. Email: info@northstaragencyusa.com.
2. Scope and Effective Date
This Privacy Policy explains how we collect, use, share, and protect information in connection with our website (northstaragencyusa.com), our contact channels, and our professional services, together the "Services." It is effective October 3, 2026.
It applies to prospective clients, clients, and website visitors. If a signed agreement with us states otherwise, that agreement controls for that engagement.
3. Information We Collect
(a) Contact and lead information. When you use our contact form or write to us, we receive the information you provide: name, email address, phone number, company, service of interest, budget range, and message.
- (b) Client and project information. Business details, project materials you choose to provide (content, credentials, brand assets), and communications, to the extent needed to deliver the services you request.
- (c) Billing information. Invoices, payment status, and transaction records. Payment card numbers are collected and processed by our payment processors (Stripe or PayPal); we never store them.
- (d) Technical and security data. IP address, browser and device type, access logs, security events, and cookies or similar technologies.
4. How We Use Information
We use information to:
- respond to inquiries and prepare proposals;
- provide, operate, and maintain the Services;
- process payments, invoices, and refunds;
- prevent fraud, abuse, and security incidents;
- understand and improve the Services; and
- comply with legal obligations.
5. Your Content and Project Data
The following provisions govern the treatment of content and materials you provide to us in connection with the Services:
- Your content is used for a single purpose: delivering and supporting the services you request.
- Project materials are retained only as long as needed to deliver the services, maintain business records, or comply with legal obligations, and are then deleted or returned (see Section 10).
- Where AI tools are used in performing the Services, we engage AI providers that maintain zero-data-retention policies wherever commercially available. NorthStar is responsible for its own conduct and is not responsible for the acts or omissions of third-party providers.
- We do not read, monitor, or measure your content for business purposes beyond what delivering the Services requires.
- We do not sell personal information, and we do not use your content, files, or materials to train or improve AI models.
6. How We Share Information
We do not sell personal information. We share information only with:
- service providers that process it on our behalf under contract: payment processors (Stripe and PayPal), hosting and delivery providers (Cloudflare), contact form and messaging providers (Discord), AI providers (used to deliver the Services), email providers, and professional advisors;
- authorities, when required by law or to protect rights and security; and
- a successor entity, in connection with a merger, sale, or transfer of assets.
We do not disclose client information publicly without authorization.
7. Payment Processing
Payments may be processed through Stripe, PayPal, bank transfer, or another approved payment method, under the terms and privacy policy of the relevant provider. We receive limited payment-related information: payment status, customer name, billing details, and transaction records.
8. Cookies and Similar Technologies
Our website uses only the cookies and similar technologies required for operation, security, and your language preference. The site stores your language choice (ns-lang) in a cookie, local storage, or the window name. You can block or delete this storage in your browser settings; the site will still work in English. We do not use advertising or cross-site tracking cookies, we do not run analytics or profiling scripts, and we do not sell cookie data.
9. Data Security
We apply administrative, technical, and organizational measures appropriate to a company of our size and to the sensitivity of the Services: encryption in transit, access control, secure credential handling, and logging of security-relevant events. No method of transmission or storage is completely secure.
Do not send passwords, private keys, payment card numbers, government IDs, or health records through our contact channels unless we specifically request them through an appropriate secure process.
10. Data Retention
We keep information for as long as needed to deliver services, provide support, maintain business records, comply with legal obligations, and resolve disputes. Project materials follow the commitments in Section 5. Billing records are retained for the periods required by tax and accounting law. When information is no longer needed, we delete it or anonymize it.
11. Your Rights and Choices
You may request access to, correction of, deletion of, or restriction on the information we hold about you, and, where applicable, its portability. Send your request to info@northstaragencyusa.com. We may need to verify your identity or authority before acting, and we will explain if a request cannot be fulfilled, for example because retention is required by law.
Requests received under this section are reviewed and answered by our staff. NorthStar does not respond to privacy requests through automated systems.
12. Children
The Services are intended for businesses and adults. We do not knowingly collect personal information from children under 13. If you believe a child provided information to us, contact us and we will delete it.
13. Third-Party Links and Services
Our website and deliverables may link to third-party websites, tools, or platforms. We are not responsible for their privacy practices, security, or content.
14. International Data Transfers
We operate with legal representation in the United States and Mexico. Information may be processed in those countries and in other countries where our service providers operate, including countries outside your own. By using the Services, you understand that information may be transferred to and processed in such locations. We take reasonable steps to require appropriate safeguards from our providers.
15. Legal Bases for Processing (EEA and UK Visitors)
Where applicable law requires a legal basis, we rely on:
- performance of a contract (delivering the Services you request);
- legitimate interests (operating, securing, and improving our business, not overridden by your rights);
- consent (where we ask for it, which you may withdraw at any time); and
- compliance with legal obligations.
16. Notice to Mexican Users
If you are located in Mexico, personal data processing is also governed, where applicable, by the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and its regulations. You may exercise your rights of access, rectification, cancellation, and opposition (ARCO rights) by sending a request to info@northstaragencyusa.com. We will respond within the timeframes required by applicable law, and we may need to verify your identity before acting. You may also contact the Mexican data protection authority (INAI) if you consider that your rights have been violated.
17. Updates to This Policy
We may update this policy from time to time. The effective date appears at the top of this page. Material changes will be communicated through our website or, where appropriate, by email. Continued use of the Services after an update means the updated policy applies from that date forward.
18. Contact Us
NorthStar AI Agency, trading as NorthStar. 1720 W 27th St, Wichita, KS 67217, United States. Email: info@northstaragencyusa.com · Phone: +1 (316) 296-8450. Web: northstaragencyusa.com. Correspondence is conducted in English and Spanish.