Privacy Policy

This Privacy Policy describes how Turbion.ai ("Turbion," "we," "us," or "our") collects, uses, shares, retains, and protects information when you visit our website at https://turbion.ai, submit one of our intake forms, receive SMS messages or phone calls from us, or otherwise interact with our services. It also describes the choices and rights you have regarding your information.

We're a U.S.-based business operating from 401 E Jackson St, Tampa, FL 33602. Our services include custom AI infrastructure builds for service businesses (the "Turbion AI" division) and funding referrals via authorized third-party partners (the "Turbion Capital" division). Both divisions are subject to this Privacy Policy.

If you have any questions about this policy or your data, email support@turbion.ai. If you're trying to stop SMS messages or manage your communication preferences specifically, see turbion.ai/help — that page contains the full opt-out instructions and is the destination for HELP-keyword text responses.

Information we collect

We collect information in three ways: (a) information you provide directly to us through our forms, calls, and emails; (b) information collected automatically through our website and analytics tools; and (c) information from third parties such as funding partners or authorized referral sources.

Information you provide directly

• Contact information: first and last name, email address, mobile phone number, business name, website URL, role/title, and LinkedIn URL.
• Business profile information: industry, annual revenue, team size, time in business, prior funding history, credit score range (self-reported), and the operational challenges you describe in our intake forms.
• Funding application information: requested funding amount, funding timeline, and other details required by our third-party funding partners to process your application.
• Communications: the content of emails, SMS messages, voice calls (which may be recorded), and chat sessions you exchange with us or with our automated agents.
• Consent records: whether you have opted in to receive SMS messages, accepted our Terms of Service, and agreed to this Privacy Policy, along with the date and source of each consent.

Information collected automatically

• Device and browser information: IP address, browser type and version, operating system, screen size, language, time zone, and approximate geographic location derived from IP.
• Usage information: pages viewed, links clicked, time spent on pages, referring URL, and basic interaction signals (such as mouse movement and timing) used for bot detection.
• Cookies and similar technologies: see the "Cookies and tracking" section below.
• Communication metadata: for SMS and voice calls, we receive metadata such as call duration, timestamps, delivery receipts, and disposition codes from our telecom processors.

Information from third parties

• Referral information: if an authorized partner (such as a Turbion Capital advisor) refers you to us, we may receive your contact information and a brief description of your inquiry from them.
• Funding partner data: if you apply for funding through Turbion Capital, our funding partners (such as Cypress Point Solutions) may share with us application status, document requests, and outcomes related to your specific application.
• Service provider analytics: aggregate and anonymized analytics from our service providers (such as email open/click data from Beehiiv, or call analysis summaries from Retell AI).

How we use your information

We use the information we collect to deliver and improve our services, communicate with you about your inquiries and applications, comply with our legal obligations, and protect Turbion and our users from fraud and abuse. Specifically:

• To respond to your inquiries: when you submit one of our intake forms (AI Audit, Contact, Partnership, Turbion Capital, or the pre-qualified funding portal at /capital/funded), we use your information to follow up by phone, SMS, and email.
• To process funding applications: when you submit a Turbion Capital inquiry, we share the information necessary for the funding application with our vetted third-party funding partners (see "Who we share your information with" below) so they can process your application.
• To schedule and conduct AI audit calls and other consultative engagements.
• To send transactional and account-related messages: appointment confirmations, status updates, document requests, advisor scheduling notifications, and verification codes.
• To send newsletter content (The Signal) if you've subscribed — separate, explicit opt-in.
• To analyze and improve our services: aggregated usage analytics, conversion analysis, and service-quality reviews.
• To protect against fraud and abuse: bot detection, spam filtering, and detection of misuse of our SMS or voice services.
• To comply with our legal obligations: tax records, accounting, telecom regulatory requirements (including A2P 10DLC and TCPA), and lawful requests from law enforcement.

Mobile information and SMS communications

This section explains how Turbion.ai handles your mobile phone number, SMS opt-in status, and information about SMS / phone-call communications. We have written it specifically to meet the requirements of the A2P 10DLC framework administered by the major U.S. wireless carriers (AT&T, T-Mobile, Verizon) and the Cellular Telecommunications Industry Association (CTIA).

When and how you opt in to receive SMS

You will only receive SMS messages or phone calls from Turbion.ai if you have explicitly opted in by taking one of the following actions:

• Submitted the AI Audit booking form at https://turbion.ai/ai-audit with the SMS-consent checkbox affirmatively checked.
• Submitted the Contact form at https://turbion.ai/contact-us with the SMS-consent checkbox affirmatively checked.
• Submitted the Partnership Application at https://turbion.ai/partnerships with the SMS-consent checkbox affirmatively checked.
• Submitted the Turbion Capital funding inquiry at https://turbion.ai/turbion-capital with the SMS-consent checkbox affirmatively checked.
• Submitted the pre-qualified funding intake at https://turbion.ai/capital/funded after being referred by a Turbion Capital representative, which displays the SMS-consent disclosure on the page where the phone number is captured.

In every case, the SMS-consent checkbox is unchecked by default. Consent to receive SMS is not a condition of receiving any Turbion service. If you do not check the box, you will not receive SMS messages from us.

What messages you'll receive

Our SMS messages are transactional and account-related. Examples include application status updates, document requests, advisor scheduling, appointment reminders, and verification codes. Message frequency varies by use case (typically 2–10 messages during an active engagement). Standard message and data rates may apply per your wireless carrier plan. Turbion.ai does not charge for SMS messages.

How to stop or get help with SMS

You can opt out of SMS at any time by replying STOP to any text message from us. You'll receive a single confirmation message that you've been unsubscribed, and then no further messages. You can also email support@turbion.ai with the subject "Unsubscribe" and the mobile phone number you want unsubscribed, or call +1 (813) 705-7933 during business hours.

Reply HELP to any of our text messages to receive an auto-response with our contact details and this Privacy Policy link. Full opt-out instructions, the list of phone numbers we send SMS from, and our anti-phishing safeguards are documented at https://turbion.ai/help.

How we treat your mobile information (carrier-required disclosure)

We do not sell, rent, lease, or share your mobile phone number, SMS opt-in status, or any contact-related information you've provided to us with any third party for the purposes of marketing or promotion. This is a strict policy. There are no exceptions.

Information sharing is limited to the following narrow categories, and only to the extent necessary to deliver the specific service you've requested:

• Telecom service providers that we contract with to deliver SMS and voice services (such as Twilio for SMS routing and Retell AI for voice agents). These providers act as data processors under written agreements that prohibit them from using your mobile information for their own purposes, including their own marketing.
• Funding partners (such as Cypress Point Solutions) to whom you've requested an introduction by submitting a Turbion Capital intake. These partners receive only the information necessary to process your specific funding application, and are bound by their own consent terms and our partner agreement. They may not use your mobile information for marketing outside of the application you initiated.
• Law-enforcement, regulatory, or legal authorities only when required by a valid subpoena, court order, regulatory request, or other applicable law.

We do not share mobile information with affiliates, advertising networks, data brokers, analytics resellers, or any party that would use the information to market unrelated products to you. Your SMS opt-in status, in particular, is treated as confidential and is not transferred even to processors except where strictly required to deliver the messages themselves.

Who we share your information with

Beyond the mobile-information restrictions above, here is a comprehensive list of the categories of third parties with whom we may share your information, and what data they receive:

Service providers (processors)

We use the following service providers to deliver our services. Each operates as a data processor under contractual obligations that limit their use of your data to providing services to us, and prohibit them from using your data for their own purposes:

• Twilio Inc. — SMS message delivery and A2P 10DLC carrier connectivity. Receives: mobile phone number, SMS message content, delivery metadata.
• Retell AI — outbound and inbound voice agent platform ("Tatiana"). Receives: contact info passed as dynamic variables, voice call audio, transcripts, and call analysis data.
• Beehiiv — email newsletter delivery and transactional email when used. Receives: email address, name, business name, and engagement metrics.
• Hostinger / Mailgun-equivalent SMTP — transactional email delivery from tatiana@turbion.ai and support@turbion.ai. Receives: email address and message content.
• Cloudflare — DNS, CDN, and bot protection (Turnstile). Receives: IP address, browser characteristics, and basic interaction signals as described in the "Bot protection" section.
• Google Workspace — internal email and document storage. Receives: email content sent to or from Turbion staff.
• Vercel — website hosting. Receives: standard HTTP request logs, IP address, user agent.
• Close CRM — sales pipeline management. Receives: contact information, communication history with you, opportunity status.
• n8n (self-hosted) — internal workflow automation. Processes: form submissions and communication routing internally on our infrastructure.

Funding partners (Turbion Capital)

When you submit a Turbion Capital funding inquiry, you authorize us to share the information necessary for your application with our vetted third-party funding partners. Currently the primary partner is Cypress Point Solutions; additional partners may be engaged when they offer products better suited to your situation, and any such sharing is governed by our partner agreement and your initial consent.

Funding partners receive your contact information, business profile (industry, revenue, time in business, credit range), requested funding amount, and timeline — only what they need to process your application. They become independently responsible for the information they receive under their own privacy policies and consent terms, which they're required to publish independently.

Legal and safety

We may disclose information when we believe in good faith that disclosure is required by applicable law, regulation, valid legal process (subpoena, court order, search warrant, regulatory request), or to protect the rights, property, or safety of Turbion.ai, our users, or the public — including detection and prevention of fraud, abuse, or security incidents.

Business transfers

If Turbion.ai is involved in a merger, acquisition, asset sale, financing, or bankruptcy, your information may be transferred to the new owner or successor entity as part of that transaction. We will notify you (e.g., via prominent notice on our website or by email) before your information becomes subject to a different privacy policy.

Beyond the categories above, we do not share, sell, rent, or otherwise disclose your personal information to third parties.

Bot protection and form security

We use Cloudflare Turnstile to protect our forms from automated abuse and spam. Turnstile runs invisibly in your browser when you submit a form and helps us verify that submissions come from real humans rather than bots. Cloudflare receives information such as your IP address, browser characteristics, and basic interaction signals (like mouse movement and timing) in order to perform this verification. No personally identifying information you enter into the form is sent to Cloudflare as part of this check.

Your use of Turnstile on this site is governed by Cloudflare's Turnstile Privacy Addendum, available at https://www.cloudflare.com/turnstile-privacy-policy/. We recommend you review it to understand how Cloudflare processes data collected through Turnstile.

Cookies and tracking technologies

We use a small number of cookies and similar technologies to operate our website. These include:

• Strictly necessary cookies: used to keep the site running, protect against abuse, and remember your basic session state. These cannot be disabled.
• Analytics cookies: used to understand aggregate site usage (which pages are popular, conversion rates from one section to another). We use privacy-conscious analytics providers and do not link this data to individual personal identifiers.
• Preference cookies: used to remember your language selection and similar UI preferences.

You can disable cookies in your browser settings, but some features of the site may not function correctly if you do. We do not use third-party advertising cookies or remarketing pixels on turbion.ai at this time.

Embedded content from other websites

Pages on this site may include embedded content — for example, the Impruvu / AdvisorHub funding intake form on /capital/funded, video chat widgets, or third-party calendar booking embeds. Embedded content from other websites behaves exactly as if you had visited the other website directly. Those sites may set their own cookies, collect their own analytics, and apply their own privacy policies.

When we embed third-party content, we choose providers whose privacy practices we've reviewed. The currently embedded providers include Cal.com (booking), Impruvu (funding intake), Cypress Point Solutions (funding portal), Beehiiv (newsletter signup widget), and Shapo (review widget). We recommend reviewing their respective privacy policies if you interact with their embedded content.

How long we retain your data

We retain personal information only as long as necessary for the purposes set out in this policy, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. Specifically:

• Contact information from intake forms: retained for the life of the relationship, plus up to 7 years after the last interaction for accounting, tax, and TCPA / 10DLC compliance reasons.
• SMS opt-in / opt-out records: retained for the duration of the opt-in plus at least 4 years after opt-out, as required by FCC and CTIA record-keeping rules.
• Voice call recordings and transcripts (Retell AI): retained for up to 90 days for quality assurance and dispute resolution, then deleted unless we are required to keep them longer for legal reasons.
• Email correspondence: retained for the life of the account plus 2 years.
• Server access logs and analytics data: retained for up to 90 days in raw form; aggregate analytics may be retained indefinitely.
• Funding application data submitted to partners: governed by the partner's retention policy once it leaves our systems.

You can request earlier deletion of your personal information by emailing support@turbion.ai. We will honor verified deletion requests except where we are legally required to retain the information.

Your privacy rights and choices

Depending on your state of residence and applicable law, you may have some or all of the following rights regarding your personal information:

• Right to know — request confirmation that we process your personal information, and access a copy of it.
• Right to correct — request that we correct inaccurate or incomplete personal information about you.
• Right to delete — request that we delete personal information we hold about you, subject to legally required exceptions.
• Right to portability — receive a copy of your personal information in a structured, machine-readable format.
• Right to opt out of sale or sharing — you have the right to opt out of the sale or sharing of personal information. As stated above, we do not sell or share your information in the senses defined by CCPA / CPRA, but you may submit a formal opt-out request at any time and we will confirm.
• Right to limit use of sensitive personal information — request that we limit our use of any sensitive personal information.
• Right to non-discrimination — you will not be denied service, charged different prices, or provided a lesser quality of service for exercising any of these rights.

To exercise any of these rights, email support@turbion.ai with the subject "Privacy Rights Request." We will verify your identity (typically by confirming details from our records) before fulfilling the request and respond within 45 days (extendable by an additional 45 days for complex requests, with notice). If you authorize an agent to act on your behalf, we may require proof of that authorization.

California residents: Turbion.ai is committed to compliance with the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). The categories of personal information described above match the CCPA categories of "identifiers," "commercial information," "internet or electronic network activity information," and "professional or employment-related information." We do not knowingly sell or share personal information (including the personal information of minors under 16) as those terms are defined under the CCPA.

EU / UK / EEA residents: although Turbion.ai is U.S.-based and primarily serves U.S. customers, if you are an EU, UK, or EEA resident and provide us with information, we treat that information consistent with our processor agreements and the broader principles of the GDPR (lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality). Email support@turbion.ai to exercise any equivalent rights you hold under the GDPR or UK GDPR.

Children's data

Turbion.ai's services are intended for business owners and operators, not children. We do not knowingly collect personal information from children under the age of 13 (or under 16 for EU / UK / EEA residents). If we learn that we have collected personal information from a child under the applicable age, we will delete that information promptly.

If you believe a child has provided personal information to us, please contact support@turbion.ai immediately so we can investigate and delete the information.

How we protect your information

We implement reasonable administrative, technical, and physical safeguards to protect personal information against loss, theft, unauthorized access, disclosure, or alteration. These include encryption in transit (TLS) for all data transmission, encryption at rest for sensitive stores, access controls and authentication on internal systems, vendor security review for all data processors, and incident response procedures.

No system can be guaranteed to be completely secure. If you believe your information may have been compromised, please contact support@turbion.ai immediately. We will investigate and notify affected individuals and applicable regulators as required by law.

Note specifically that Turbion.ai will never request payment information, banking details, social security numbers, login credentials, or two-factor codes via SMS or unsolicited email. If you receive a message claiming to be from Turbion asking for any of these, it is not from us. See turbion.ai/help for the full anti-phishing checklist and the list of phone numbers we actually send SMS from.

International data transfers

Turbion.ai is based in the United States, and our service providers may operate in the United States and other countries. If you access our services from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. The laws of those countries may differ from the laws of your country.

When we transfer personal information internationally, we rely on appropriate safeguards required by applicable law, including standard contractual clauses with our processors where required.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we do, we will revise the "Last updated" date at the top of the policy. For material changes that affect your rights or our handling of your information, we will provide reasonable advance notice — for example, by email to subscribers or by a prominent notice on our website — before the changes take effect.

We recommend reviewing this policy periodically to stay informed of how we protect your information.

Contact us about privacy

If you have any questions or concerns about this Privacy Policy, your personal information, or our data-handling practices, please contact us. The fastest way to reach us is by email:

• Email: support@turbion.ai (subject line: "Privacy")
• Mail: Turbion.ai, 401 E Jackson St, Tampa, FL 33602
• Phone: +1 (813) 705-7933 (Mon–Fri, 9 AM – 5 PM ET)
• SMS opt-out / help: see turbion.ai/help

We aim to respond to privacy inquiries within 5 business days. For formal privacy-rights requests (access, correction, deletion, portability, opt-out), see the "Your privacy rights and choices" section above.

© 2026 Turbion.ai · All Rights Reserved.