Privacy Policy
Last updated: August 7, 2026
Sunstone ("Sunstone", "we", "us") is a marketing platform: an assistant that learns a business, then generates and governs marketing work — pages, ad creatives, video, reports, and code changes — with human approval required before anything ships. This policy explains what information we collect, how we use it, and the choices you have. Questions any time: hello@wearesunstone.com.
What this policy covers
It covers this website (wearesunstone.com) and the Sunstone product, which is currently in private preview. If we materially change how the product handles data, we will update this policy and note the new date above.
Information we collect on this website
- Early-access requests. If you join the waitlist, we collect the email address you submit, and we use it only to talk to you about Sunstone.
- Server logs. Like nearly every website, our server records basic technical data with each request (IP address, browser type, timestamp, requested page) for security and reliability. Logs are kept briefly and are not used for profiling.
This website sets no cookies, loads no third-party scripts, fonts, or trackers, and contains no advertising pixels.
Information we collect in the product
- Account information — name, email address, and workspace membership.
- Business profile and content — information about your business that you provide or approve, and the marketing work created in your workspace (pages, creatives, reports, and the approvals around them).
- Public information about your business — with your direction, Sunstone reads publicly available material (such as your own website) to build your business profile.
- Connected services — data from third-party services you explicitly connect (see the next section).
- Audit records — the product keeps a record of significant actions (what was proposed, who approved it, and from where). This is a core safety feature of Sunstone.
Connected services
Sunstone can connect to services you already use — for example analytics, advertising, CRM, email, SEO, billing, file storage, and code-hosting tools. Connections are made only when you (or an authorized member of your workspace) explicitly authorize them, typically via OAuth. We access only the data needed to provide the features you use, we use it only inside your workspace to provide the service, and you can disconnect a service at any time, after which we stop accessing it. Actions that write to a connected service are staged for human approval before anything is sent.
Google user data
Where you connect Google services (such as Google Analytics, Search Console, Google Ads, Google Drive, or Gmail), Sunstone's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular: we use Google user data only to provide features you have requested inside your workspace; we do not use it for advertising; we do not sell it; and humans do not read it except with your permission, where necessary for security or debugging, or where required by law.
Meta platform data
Where you connect Meta services (such as Meta ads), we access and use platform data only to provide the features you have requested, in accordance with Meta's Platform Terms. We do not sell platform data, and we do not use it for purposes outside your workspace.
How we use information
- To provide, secure, and improve Sunstone.
- To generate the marketing work you ask for, grounded in your business's real data — Sunstone is designed not to invent facts, numbers, or prices.
- To communicate with you about the service.
- To comply with legal obligations.
Content in your workspace may be processed by the third-party AI model providers we use to power the product, solely to provide the service. We share data with service providers (such as cloud hosting and AI model providers) only as needed to run Sunstone, under terms that restrict their use of it to providing services to us.
What we don't do
- We do not sell your personal information, your business data, or data from connected services.
- We do not use your data to advertise to you or anyone else.
- We do not let Sunstone publish, send, spend, or merge anything on your behalf without a human approval in your workspace.
Retention and deletion
We keep workspace data while your account is active. You can ask us to delete your account and associated data, or to remove you from the waitlist, by emailing hello@wearesunstone.com. Some records (for example, legally required audit or billing records) may be retained where the law requires it.
Security
All traffic to Sunstone is encrypted in transit. Access to production systems is restricted, credentials for connected services are stored server-side and never exposed to your browser or to generated content, and the product's approval and audit architecture means changes are traceable to the person who authorized them.
International transfers
We may process data in countries other than your own. Where we do, we take steps to ensure it receives an adequate level of protection.
Children
Sunstone is a business tool and is not directed at children. We do not knowingly collect personal information from anyone under 16.
Changes to this policy
If we change this policy, we'll post the new version here and update the date at the top. If a change is significant, we'll tell account holders directly.
Contact
Sunstone · hello@wearesunstone.com