Privacy Policy
Effective November 11, 2026
1. Who we are
Elevation 10 Thousand ("E10K", "we", "us") is an excavation, site-work and construction business based in Fairplay, Colorado. In this policy, "Sam" means Sam Wells, our internal AI business assistant, described on this page.
2. What this policy covers
This policy covers:
- this website, elevation10thousand.com; and
- how Sam accesses, uses, stores and shares information, including information received from Google APIs through a dedicated Google account owned by the company (the "assistant account").
Sam is used only inside our company. It is not offered to the public, and nobody outside the company is asked to connect their own Google account to it.
3. This website
This website does not use cookies, analytics, advertising or tracking scripts, and it has no forms or accounts. If you email us from a link on this site, we receive what you send us, as with any email.
The site is hosted by Cloudflare. Like any web host, Cloudflare processes technical information such as IP addresses and browser details to deliver the site and protect it from attacks; see Cloudflare's Privacy Policy.
4. Google data our assistant accesses
Sam is authorized to access these Google services in the assistant account only:
- Gmail: messages, attachments and labels in the assistant mailbox, including business email sent or forwarded to it. Sam can read, organize and send email.
- Google Drive, Sheets and Docs: files the assistant account owns or that have been shared with it, mainly our internal business records (jobs, tasks, costs, receipts, equipment and customer records).
- Google Calendar: events on calendars the assistant account can access.
- Google Contacts (read only): contacts saved in the assistant account.
- Google Apps Script: our own internal business software. Sam uses this permission to maintain it and publish new versions (see the assistant page).
Because the assistant mailbox receives business email, it can contain information about people who contact our company, such as customers, suppliers and contractors: names, email addresses, phone numbers, project details and invoices.
5. How we use information
We use information Sam accesses only to run our business through the assistant features on the assistant page:
- summarizing and organizing business email;
- preparing briefings and reminders;
- keeping our business records current;
- scheduling;
- sending email the owners ask for;
- keeping backups of our business records.
Elevation 10 Thousand's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not:
- sell Google data or any other personal information;
- use or transfer Google data for advertising, including retargeting or interest-based ads;
- use Google data to determine creditworthiness or for lending;
- use Google data to create, train or improve artificial-intelligence or machine-learning models;
- transfer Google data to data brokers or information resellers.
6. AI processing
Sam uses Anthropic's Claude models. To complete a task, the information the task needs, such as an email or spreadsheet rows, is sent to Anthropic for processing, and the result comes back to Sam.
Sam currently connects to Claude through a Claude subscription account, so Anthropic's Consumer Terms and Privacy Policy apply, not Anthropic's commercial API terms. Under Anthropic's published consumer policy, conversations are used to train its models only if the account's model-improvement setting is on. With the setting off, Anthropic's stated retention for subscription-account sessions like Sam's is 30 days (source), except that Anthropic can keep content longer if its safety systems flag it (up to 2 years) or when the law requires (source). We keep the model-improvement setting turned off, so under that policy Anthropic does not use Sam's conversations to train its models. If we change how Sam connects to Anthropic, we will update this section first.
7. Who can access information
- Our owners direct Sam and read its summaries and reports.
- Our team members see business information relevant to their work, such as job tasks and schedules, through our internal business software.
- Service providers that process information for us to run these features:
- Google, where our Workspace data is stored;
- Anthropic, for AI processing (section 6);
- DigitalOcean, which hosts the private server Sam runs on, in the United States;
- Discord, which hosts the private chat where the owners instruct Sam and Sam reports back; reports can include summaries of email and records;
- GitHub, which stores our internal software code and the structure of our business records (column headings and lists of categories). Customer, financial and contact details are not stored there;
- Cloudflare, which hosts this website and relays "new item saved" signals from our business software to Sam's server (these signals contain no business data);
- a web-research service (currently reached through Nous Research's tool gateway), which receives the search terms and public web addresses Sam looks up when it researches something.
- Legal and safety: we may disclose information when required by law or to protect against fraud, abuse or security threats.
We do not share information for anyone else's marketing.
8. Storage and protection
Google data stays in Google's systems unless Sam needs a copy to do its work. Copies Sam keeps are stored on our private server, and they include:
- its conversation history with the owners;
- working files;
- logs;
- backup exports of our business records.
We protect information by:
- using encrypted (HTTPS/TLS) connections to Google, Anthropic and Discord;
- limiting server access to the assistant's own system account and the owners;
- keeping credentials in a folder that other accounts on the server cannot open;
- requiring an owner's approval, in a separate approval system that holds the publishing credentials, before changes to our app code are published.
No system is perfectly secure, and we cannot guarantee absolute security.
9. How long we keep information
- Data in Google (email, files, calendars, records) is kept until it is deleted there.
- Automatic backups of our business records, made on our server and in Google Drive, are deleted after 30 days.
- Sam's other records on our server (conversation history, notes, task outputs and logs) and messages in our private chat are kept as long as we need them for business operations, and are deleted on request as described below.
- Anthropic keeps session content for 30 days, with the exceptions in section 6.
10. Your choices
- Access or deletion: if you've corresponded with our company, you can ask what information we hold about you or ask us to delete it by emailing [email protected]. We'll delete it from our email, business records and Sam's records, and tell you if we must keep anything, for example invoices we keep for tax and accounting. Copies in automatic backups expire within 30 days. We'll respond within a reasonable time.
- Revoking Google access: the owner of the assistant account can remove Sam's access to Google at any time at Google Account → Third-party connections.
11. Children
This website and our services are not directed to children under 13, and we do not knowingly collect their personal information.
12. Changes
If we change how Sam accesses or uses Google data, we will update this policy before the change takes effect and update the effective date above.
13. Contact
Questions or requests: [email protected]. See also our contact page.