Privacy Policy

DamWorks LLC ("DamWorks," "we," "us," or "our") respects your privacy. This policy explains what information we collect through our website at damworksllc.com, how we use and store it, who processes it on our behalf, and the choices you have. We keep this short and plain-spoken on purpose.

1. Information We Collect

We only collect information that you give us directly. When you submit our contact form, you provide some or all of the following fields:

• Business name — the name of your business or organization
• Contact name — your first and last name (or the name of the person making the inquiry)
• Email address — required; used to reply to your inquiry and send a confirmation
• Phone number — optional
• Message / notes — a free-text field describing your business and what you are trying to solve (up to approximately 2,000 characters)

We do not ask for and do not want sensitive information (such as financial account numbers, government IDs, Social Security numbers, or health information) through the contact form. Please do not send it.

We also collect standard web-server technical data automatically when you visit the site — such as your IP address, browser type, and the page you requested — through our hosting provider's infrastructure logs. This data is not linked to your form submission and is not used to identify individual visitors.

2. How Your Information Is Stored

Contact form submissions travel through the following path before reaching DamWorks:

1. Your browser sends the form data over HTTPS to a Google Apps Script endpoint hosted on DamWorks' Google Workspace account.
2. The script validates the submission, then writes the data to a private Google Sheets spreadsheet on DamWorks-controlled Google Drive. This is our primary data store for lead inquiries.
3. The script sends your email address and name to Postmark (our transactional email provider) to deliver an automatic confirmation email to you.
4. The script sends your full submission (business name, contact name, email, phone, and notes) to the Anthropic API (Claude AI) for initial lead review. See Section 3 (How We Use Your Information) and Section 5 (AI Processing) for details on this step.
5. The script sends a notification email to DamWorks' internal address (hello@damworksllc.com) containing your full submission and the AI output.

Website hosting. Our website is hosted on Netlify. Netlify sees your IP address and browser data through its server logs when you visit any page. Netlify does not receive the content of your contact-form submission — that submission is sent directly from your browser to the Google Apps Script endpoint described in step 1 above. See Section 4 (Third Parties Who Process Your Data) for Netlify's data-handling terms.

3. How We Use Your Information

We use the information you submit for the following purposes:

• To respond to your inquiry — by email or phone, typically within one business day.
• To schedule a discovery call — if you request one.
• To prepare a proposal or scope document — related to the work you have asked about, if your inquiry leads to a potential engagement.
• For initial AI-assisted lead review — your submission is processed by an AI tool to help us understand your inquiry and prepare an initial response. A person at DamWorks reviews the AI output before any reply is sent to you. See Section 5 (AI Processing) for full details.

We will not add you to a marketing list or newsletter unless you specifically ask to be added.

4. Third Parties Who Process Your Data

We do not sell, rent, or share your information with third parties for marketing purposes. We never have.

The following third-party vendors process your data as part of delivering our services. Each vendor is bound by its own privacy and data-processing terms, which we link below. We have audited each vendor's terms and selected providers whose data-handling posture is consistent with our own.

Google Workspace (Sheets, Drive, Apps Script, Gmail)

• What they receive: Full form submission (all fields); internal notification email content.
• Why: Data storage, script execution, internal email.
• Their terms: Google Privacy Policy.

Anthropic (Claude API)

• What they receive: Full form submission — business name, contact name, email, phone, notes.
• Why: AI-assisted lead review and initial response drafting.
• Their terms: Anthropic Privacy Policy; Anthropic Commercial Terms.
• Data-handling note: Per Anthropic's Commercial Terms, Anthropic may not train its models on Customer Content submitted through the API. Your form submission data is Customer Content under those terms.

Postmark (by ActiveCampaign)

• What they receive: Email address, contact name.
• Why: Transactional email delivery (your confirmation email).
• Their terms: ActiveCampaign Privacy Policy; Postmark DPA.
• Data-handling note: Per Postmark's Data Processing Addendum (Section 3.3), Postmark will not retain, use, or disclose personal data outside its direct business relationship with DamWorks or for any purpose other than delivering the service.

Netlify

• What they receive: IP address and browser metadata via server logs when you visit our site.
• Why: Website hosting and content delivery network (CDN).
• Their terms: Netlify Privacy Policy.

If DamWorks is ever compelled to disclose your data by law, court order, or valid legal process, we will notify you in advance to the extent permitted by law.

4a. Automated Processing

We use AI to produce a preliminary fit score and research summary for each inquiry. This score is one input DamWorks uses when deciding how to respond; it does not by itself result in any decision about you. You can ask us to disregard the automated score and rely only on human review — see Section 8 (Your Rights and Deletion Requests).

5. AI Processing of Your Inquiry

When you submit the contact form, your submission is processed by an AI tool (Anthropic's Claude) to help us understand your inquiry and prepare an initial response. The AI reviews the information you provided, researches your business using publicly available sources, and drafts a suggested reply.

Our team uses AI to help prepare initial responses; a person at DamWorks reviews every reply before it's sent.

No reply is sent to you automatically — a DamWorks team member reads the AI output and decides whether to send it as-is, edit it, or discard it and write their own reply.

Per Anthropic's Commercial Terms, your submission data is not used to train Anthropic's AI models.

6. Data Retention

We keep the contact information you submit for up to 24 months after your last interaction with us. After that, we delete it or remove your contact identifiers and keep only anonymized business-name and industry data for internal analysis. You can ask us to delete your data sooner at any time — see Section 8 (Your Rights and Deletion Requests).

In more detail:

Contact form submissions (DamWorks internal records — Google Sheets):

• If your inquiry does not lead to a project, we retain it for 24 months from the date of submission, after which it is deleted.
• If your inquiry leads to a project, we retain the related records for the duration of the engagement and for a reasonable period afterward consistent with tax and business-recordkeeping obligations (typically 7 years from the close of the engagement, consistent with standard business record retention).

Anthropic (Claude API). Per Anthropic's Data Processing Addendum, Anthropic deletes all Customer Data within 30 days of account termination. Specific retention periods during active service are governed by Anthropic's DPA.

Postmark. Per Postmark's DPA (Section 9), Postmark deletes user/customer personal data within 30 days of account termination. Delivery-log retention during active service is governed by Postmark's own data-retention schedule.

7. Cookies and Website Analytics

We do not use tracking cookies or third-party analytics as of the effective date of this policy.

Our website hosting provider (Netlify) may log standard server-request data (IP address, browser type, requested pages, referring URL) as part of normal web-server operation. This data is retained and controlled by Netlify under its own privacy policy and is not linked to contact-form submissions.

If we add analytics in the future, we will update this policy with at least 30 days' notice before enabling any tracking technology, and will describe what is collected and by whom.

8. Your Rights and Deletion Requests

You have the following rights regarding the personal information you have submitted to DamWorks:

• Access — you may request a copy of the information we hold about you.
• Correction — you may ask us to correct inaccurate information.
• Deletion — you may ask us to delete your information. We will do so within 30 days unless we are required to retain it for legal, tax, or contractual reasons.
• Portability — you may request your information in a common machine-readable format (CSV or plain text).

To exercise any of these rights, email us at hello@damworksllc.com from the address you used to contact us. Tell us what you'd like (access, correction, deletion, or export) and we'll confirm receipt within 5 business days and complete the request within 30 days.

California residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• The right to know what personal information DamWorks has collected about you and how it is used and shared.
• The right to delete personal information we have collected (subject to certain exceptions).
• The right to correct inaccurate personal information.
• The right to opt out of the "sale" or "sharing" of your personal information. DamWorks does not sell or share your personal information as those terms are defined under CCPA/CPRA.
• The right not to be discriminated against for exercising your CCPA rights.

To submit a CCPA request, email hello@damworksllc.com with "CCPA Request" in the subject line. We will respond within 45 days (extendable by 45 additional days with notice).

New Jersey residents (NJDPA)

DamWorks is a New Jersey limited liability company. If you are a New Jersey resident, the New Jersey Data Privacy Act (NJDPA), effective January 15, 2026, grants you rights to access, correct, delete, and opt out of certain processing of your personal data. To exercise these rights, email hello@damworksllc.com with "NJ Privacy Request" in the subject line. We will confirm receipt within 5 business days and respond within 45 days.

Residents of other U.S. states

If you reside in a U.S. state with a comprehensive consumer privacy law (including Virginia, Colorado, Connecticut, Utah, Texas, and others), you have rights consistent with the applicable law. To exercise those rights, email hello@damworksllc.com and describe your request; we will respond within the timeframe required by your state's law, and in any event within 45 days.

9. Security

We take reasonable steps to protect the information you submit, including using HTTPS for site traffic and relying on the security practices of the infrastructure providers listed above. No system is perfectly secure, and we cannot guarantee absolute security, but we treat your information carefully and limit access to it.

10. Children's Privacy

This website is intended for business inquiries from adults. We do not knowingly collect information from children under 13. If you believe a child has submitted information to us, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Effective" date at the top of this page reflects the most recent version.

For material changes — such as adding a new category of data collection, adding a new subprocessor, or changing how we use your data — we will provide at least 30 days' advance notice by emailing registered contacts (people who have submitted the contact form) before the change takes effect. We will also flag the change prominently on this page.

For non-material changes (clarifications, formatting, broken-link fixes), we will update the effective date without advance notice.

12. Governing Law

This Privacy Policy is governed by the laws of the State of New Jersey, United States.

13. Contact

Questions, concerns, or requests about this policy — including access, correction, deletion, and portability requests — can be sent to:

We aim to respond to all privacy-related inquiries within 5 business days.

14. Last Updated

This Privacy Policy was last updated on September 15, 2026. It supersedes all prior versions of the DamWorks LLC Privacy Policy.