Privacy
Southern Sun LLC is a one-person practice run by Gabriel Mongalo in the United States. In this policy, I and Southern Sun mean that company, which is the controller of the information described here.
This page covers information collected through southernsun.dev, including the AI Reception pages under /ai-receptionist, and calls to Southern Sun's own number, (480) 631-6095. It does not cover data held inside AI systems I build for clients, where I act on the client's instructions under our agreement, and it does not cover call recordings, transcripts or caller details handled by the AI Reception service — those are governed by the agreement with the client whose calls they are.
What this site collects
Anything you send me. If you use the contact form, I receive your name, email address and message. The form is delivered to my inbox by Resend. If you email me directly at hello@southernsun.dev or voice@southernsun.dev, I receive whatever you write. I use this to reply to you and to discuss working together.
Booking a call. The booking button opens a Cal.com embed, and that embed loads only when you click it. Until then, nothing on this site contacts Cal.com. Once you click, Cal.com receives your IP address and browser information and may store data on your device. If you go on to book, it collects your name, email address, timezone and anything you enter, on their systems under their own privacy policy, and the meeting is created in Google Calendar and Google Meet. If you would rather not load Cal.com at all, email me instead — it reaches the same place.
Calling Southern Sun. Calls to (480) 631-6095 are answered by an AI receptionist, and the call opens by saying so and that it is recorded. The call is recorded and transcribed by Retell AI, the service that runs the receptionist, which also writes a short summary: your name, what you are calling about, and the number to call you back on. That summary, the transcript and a link to the recording are sent to me on Telegram so I can follow up. If I am available, the receptionist can put you through to me, and the recording continues. If you would rather not be recorded, say so and the call ends there, or email me instead.
Analytics. Pages are measured with Vercel Web Analytics, which records the page path, referrer, filtered query parameters, device type, operating system, browser, timestamp, and an approximate location derived from your IP address, which can be as specific as a city. It does not use cookies. Visitors are counted using a hash generated from the request, which Vercel discards after 24 hours, so it does not build a profile of you across other websites. On the AI Reception pages I also record three anonymous events: that a booking link was clicked, that an email link was clicked, and that the pricing calculator was used. Those events carry no information about who you are.
Server logs.This site is hosted on Vercel, which keeps standard request logs — IP address, user agent, requested URL and timestamp. These exist so the site can be run, debugged and protected from abuse, and are retained on Vercel's schedule, typically around 30 days.
Fonts and icons. Typefaces and icons are served from this site itself, so loading a page contacts no font or icon provider.
What this site does not do
- No advertising, retargeting, or cross-site tracking pixels.
- No selling of personal information, and no sharing of it for cross-context behavioural advertising — including in the previous twelve months.
- No account creation, and no payment details taken on this site.
- No collection of sensitive personal information, and no automated decision-making that produces legal or similarly significant effects.
Why I am allowed to hold it
If you are in the UK or the European Economic Area, the law asks me to name a legal basis for each use. Mine are: taking steps at your request before entering a contract, and performing that contract, when you contact me or book a call; my legitimate interests in running, securing and improving this site, understanding aggregate traffic, and keeping records of who I have spoken to; your consent, where consent is required, which you can withdraw at any time; and compliance with legal obligations such as tax and accounting rules.
Cookies and similar technologies
Southern Sun sets no cookies of its own, and the analytics described above are cookieless. Simply reading this site stores nothing on your device. The one thing that can is the Cal.com booking embed, which is third-party code and may set cookies or store data in your browser — and it is loaded only if you click the booking button, so that is your decision to make rather than one made for you. Email me instead and it never loads at all.
Who else sees it
I use a small number of service providers, each of which handles information on my behalf or under its own policy: Vercel (hosting and analytics), Resend (contact form delivery), Cal.com (scheduling), Google (Calendar and Meet for booked calls), Retell AI (answering, recording and transcribing calls to my number, using the telephone carrier and speech and language-model providers it relies on) and Telegram (delivering call summaries to me). I do not give your information to anyone else for their own marketing.
I may disclose information where I am legally required to — a court order, a valid legal request, or where it is necessary to establish or defend a legal claim, or to protect the rights and safety of others. If Southern Sun is ever sold, merged, or transfers its business, records may pass to the acquirer, who would remain bound by this policy for information collected under it until you are told otherwise.
Where it goes
Southern Sun operates from the United States, and the providers above are largely US-based, so information collected here is processed in the United States. Where information is transferred out of the UK or the EEA, that transfer relies on the safeguards those providers put in place — most commonly the European Commission's Standard Contractual Clauses and the UK Addendum. Ask me and I will point you to the mechanism for a given provider.
How long it is kept
- Enquiries and email correspondence: up to 24 months after our last exchange, unless we go on to work together.
- Records of client work, including contracts and invoices: seven years, to meet tax, accounting and legal-claim requirements.
- Call recordings and transcripts: deleted from Retell after 90 days. The summary sent to me is kept like other enquiries, up to 24 months, and its link to the recording stops working once Retell deletes it.
- Server logs: as long as Vercel retains them, typically about 30 days.
- Analytics: retained in aggregate form, with no identifier tying it to you.
Ask me to delete what I hold about you and I will, unless I am required to keep it or need it to establish or defend a legal claim — in which case I will tell you what I am keeping and why.
How it is protected
The site is served over HTTPS, the providers above are established services with their own security programmes, and access to my inbox and accounts is limited to me and protected by strong authentication. No method of transmission or storage is perfectly secure, so I cannot guarantee absolute security — please do not send me passwords, payment card numbers, government identifiers or other sensitive material through the contact form or by unencrypted email.
Your rights
Whoever and wherever you are, you can ask me what I hold about you, ask me to correct it, ask me to delete it, or ask for a copy. Email hello@southernsun.dev and I will act on it.
UK and EEA.You have the right to access, correct, erase, restrict and object to my processing of your personal data, including objecting to processing based on legitimate interests; the right to data portability; and the right to withdraw consent where I rely on it, without affecting what was done before you withdrew it. You also have the right to complain to your local supervisory authority — in the UK, the Information Commissioner's Office at ico.org.uk. I would rather you came to me first, but that right stands either way.
California. You have the right to know what personal information I have collected, used and disclosed and why; to request deletion; to request correction; and to be free from discrimination for exercising any of these rights — exercising them changes nothing about how I deal with you. Because I do not sell or share personal information and do not collect sensitive personal information, there is nothing for you to opt out of or limit. You may use an authorised agent, who will need to show they are acting for you.
Making a request. Email me from the address you have used with me, or give me enough detail to match your request to my records — I may need to ask a question or two to confirm it is you, which is a safeguard for you rather than an obstacle. I will respond within 30 days, and within 45 days for California requests, and will tell you if I need longer. Requests are free unless they are manifestly unfounded or repetitive.
Children
This is a business site and is not directed to children. I do not knowingly collect information from anyone under 16. If you believe a child has sent me information, email me and I will delete it.
Do Not Track and Global Privacy Control
There is no consistent industry standard for responding to Do Not Track browser signals, so this site does not respond to them. Because I do not sell or share personal information, a Global Privacy Control signal has nothing to opt you out of here.
Other sites
This site links to places I do not control — GitHub, LinkedIn, Cal.com, and client work. Their privacy practices are their own, and this policy does not cover them.
Changes
If this policy changes, the updated version appears on this page with a new date at the top. If a change materially affects how I use information you have already given me, I will tell you by email where I have your address.
Contact
Southern Sun LLC · Attn: Gabriel Mongalo · hello@southernsun.dev