Privacy Policy
Last updated 22 September 2026
This site has no advertising cookies or tracking pixels. Analytics are cookieless and run on a server I host. The rest of this page lists each service that touches your data and why.
Who runs this site
Sovereign AI is operated by DST Digital LLC, a Georgia company run by Duncan Smith. Questions about this policy go to ai@duncansmith.tech.
This policy covers this website, the booking page and email inquiries. Client deployments are governed by their own written agreements.
Analytics
I use a self-hosted copy of Plausible Analytics at analytics.duncansmith.tech. It sets no cookies. It records the page you visit, the referring site, your browser, operating system, device type and country. Your IP address is used to derive the country and a daily visitor count and is not stored.
When you click a booking link, it also records that click with the page and the button's position. When you start the video on the home page, it records that the video was played. The video and its captions are served from this site.
Hosting
Cloudflare serves this site. It processes request data such as your IP address to deliver pages and block abuse, and its bot detection may set a short-lived security cookie. Fonts and images load from this site, not from Google or other third parties.
Booking a call
The booking link opens a scheduling page I host myself, built on Cal.com. It asks for your name, email address and any notes you add. I use them to hold the call and follow up about it. The confirmation email and calendar invite pass through my email and calendar providers.
Mail sent to ai@duncansmith.tech is routed by Cloudflare Email Routing to my mailbox at Fastmail. An inbox assistant I run sorts incoming mail and suggests draft replies. That step sends the subject and message text to Anthropic's API, with email addresses, phone numbers and card numbers masked first. I read every Sovereign AI inquiry and send replies myself.
When a new inquiry arrives, Pushover alerts my phone with the sender's address and the subject line.
If you would rather your first message skip that step, book a call instead and share details there.
What I don't do
- Sell or rent personal information.
- Use advertising cookies, retargeting pixels or data brokers.
- Add you to a mailing list because you booked a call or sent an email.
How long I keep it
Analytics are kept in aggregate. Booking records and email stay while we're in conversation and afterwards for as long as I need them for business records.
Your choices
Email ai@duncansmith.tech to ask what I hold about you, to correct it or to have it deleted. I'll reply within 30 days.
Changes
If a service on this list changes, this page changes first and the date above moves.