Privacy Policy

Global Strategic Technologies LLC ("GST," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you visit our website or engage with our services.

Information We Collect

We may collect the following types of information:

• Contact Information: Name, email address, phone number, and company details you provide when contacting us or scheduling consultations.
• Usage Data: Information about how you interact with our website, including IP address, browser type, pages visited, and time spent on pages.
• Communications: Records of correspondence when you contact us via email, phone, or through our website.

How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and provide requested services
• Schedule and conduct consultations
• Improve our website and service offerings
• Send occasional updates about our services (you may opt out at any time)
• Comply with legal obligations

Information Sharing

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party service providers who assist in operating our website or conducting our business (e.g., calendar scheduling tools, email services).
• Legal Requirements: When required by law or to protect our rights, property, or safety.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

Third-Party Services

Our website may use third-party services such as:

• CalendarBridge: For scheduling consultations
• Google Analytics 4: To understand website usage patterns, including which pages, guides and tools are read. Google Analytics is loaded on every page; see the Cookies section below.
• Cloudflare Turnstile: An invisible bot check on the MCP trial signup page. To decide whether a request is automated, Cloudflare processes your IP address, TLS fingerprint, browser User-Agent and the page's site key, as described in the Turnstile Privacy Addendum.

These services have their own privacy policies, and we encourage you to review them.

When you sign up for the MCP trial, we keep a keyed hash of your IP address for 30 days to enforce one trial per network. The IP address itself is not stored, and the hash cannot be reversed without a server-side key.

The MCP Server

Our MCP server at mcp.globalstrategic.tech lets AI assistants such as Claude call our diligence tools on your behalf. When you connect it, we process the following:

• Access grants: When you approve a connection on the consent page, we record which client you authorized, the scopes you granted, the key or trial credential that proved your identity, and the time of consent. Access tokens expire after one hour; the grant itself remains until you or we revoke it, or until a trial credential expires. Grants are stored in Cloudflare KV.
• Usage limits and caches: Request counts per credential and short-lived working caches (cleared within hours) are kept in Upstash Redis, keyed by a credential identifier rather than by your name or email.
• Operational telemetry: Each request emits an aggregate event (tool name, outcome, duration, and the credential's owner label) to Cloudflare Analytics Engine, retained for three months, and errors are reported to Sentry. The content you send to a tool and the content it returns are not retained on our servers beyond the short-lived working caches described above.
• Hosting: The server runs on Cloudflare Workers. Cloudflare processes connection metadata such as your IP address under its own privacy policy.

Cookies and Tracking

Our website may use cookies and similar tracking technologies to enhance your browsing experience. You can control cookie preferences through your browser settings.

Data Security

We implement reasonable security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information (subject to legal obligations)
• Opt out of marketing communications

Client Confidentiality

For information shared during client engagements, we maintain strict confidentiality in accordance with our engagement agreements and professional standards. Client project information is handled separately from general website visitor data.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy periodically. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy regularly.

California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information.