Privacy Policy.
This Privacy Policy explains how Vessels collects, uses, stores, and protects personal information across all of its services, platforms, and client-built systems.
Contents
Who We Are
Scope of This Policy
Information We Collect
How We Collect Information
How We Use Information
Data Sharing and Disclosure
Third-Party Platforms We Use
Data Retention
Data Security
Your Rights and Choices
California Residents — CCPA
Children's Privacy — COPPA
Client-Built Systems — End Customer Data
Call Recording and AI Voice Agents
Creator and Talent Data
International Data
Changes to This Policy
Contact and Requests
1. Who We Are
The Lees Media LLC, operating under the trade name Vessels (vssls.co), is a Wyoming limited liability company providing agency, technology, and AI services for businesses, creators, and nonprofits. We are headquartered in Texas. For privacy-related questions, contact us at hello@vssls.co.
2. Scope of This Policy
This Policy applies to:
Visitors to vssls.co and any Vessels client subdomain (for example fes.vssls.co, collegist.vssls.co, or saintsteps.vssls.co)
Clients who sign Vessels service agreements or engage Vessels for any service
Creators and talent represented by Vessels
Brand partners and third parties who interact with Vessels on behalf of a client
End customers of Vessels clients who interact with Vessels-built systems (AI agents, membership platforms, websites, booking forms)
This Policy does not apply to third-party websites or services that Vessels links to but does not operate. We encourage you to review the privacy policies of those services directly.
3. Information We Collect
Information You Provide Directly
Name, email address, phone number, job title, entity name, and business information provided through forms, proposals, or onboarding
Payment information (processed by Stripe — Vessels does not store raw card data)
Electronic signatures and checkbox consent records captured through Vessels proposal and onboarding interfaces. Where a signature is drawn on screen, the drawn mark is captured as a PNG image and stored with the execution record.
Content you provide for website build, SEO, or creator management purposes
Communications you send to Vessels via email, booking forms, or voice agents
Information Collected Automatically
IP address, browser type, browser user agent string, device information, and general location at time of form submission
Timestamps of agreement execution, checkbox authorization, and form submission
Website analytics (page views, session duration, referral source) on Vessels-operated websites
Call metadata including call duration, time, and transcript data generated through AI voice agents
Information from Third Parties
Business information from public sources used in research for client delivery or outreach
Creator platform data (follower count, engagement, platform metrics) where shared by creators for management purposes
4. How We Collect Information
5. How We Use Information
Vessels uses the information we collect for the following purposes:
Service delivery: Building, deploying, and maintaining all systems and services described in a Client's service agreement
Agreement and consent recordkeeping: Retaining signed agreements, checkbox authorizations, and signature images as legally required records
Billing and payment processing: Managing invoices, recurring charges, refunds, and Stripe billing infrastructure
Communication: Sending service updates, billing notifications, and support responses
System improvement: Using anonymized, aggregated performance data to improve AI agents, SEO frameworks, and automation systems across Vessels' client base
Marketing and promotion: Using anonymized metrics and case studies to promote Vessels services — Client identifying information used in testimonials or case studies only with prior written consent
Legal compliance: Fulfilling legal obligations, responding to lawful requests, and protecting Vessels' rights
Fraud prevention: Detecting and preventing unauthorized use of Vessels-built systems
6. Data Sharing and Disclosure
Vessels does not sell personal information. We share information only in these circumstances:
Service providers: Third-party platforms used to deliver Vessels services (listed in Section 7). These platforms receive only the data necessary for service delivery.
Client data with clients: Data generated through a client's systems (their customer's contact info, CRM records, call logs) is accessible to that client and returned upon request.
Legal requirements: When required by law, court order, or governmental authority, or to protect Vessels' rights, property, or safety.
Business transfers: In connection with a merger, acquisition, or sale of assets, personal data may be transferred with appropriate notice.
Vessels will never share a Client's personally identifiable business information or customer data with a competitor or unrelated third party for commercial purposes without express written consent.
7. Third-Party Platforms We Use
Each platform listed above has its own privacy policy and data practices. Vessels is not responsible for the data practices of these third-party platforms.
8. Data Retention
Vessels retains personal information for the following periods:
Signed agreements, consent records, and signature images: Minimum 7 years from execution date for legal compliance purposes
Client contact and business data: Duration of active engagement plus 3 years following termination
Call recordings and transcripts: 90 days by default unless Client requests longer retention or deletion
Payment records: 7 years as required by financial record-keeping standards
Marketing data: Until opt-out or request for deletion
Upon Client request following termination, Vessels will delete or anonymize Client data within 30 business days, except where retention is required by law.
9. Data Security
Vessels implements commercially reasonable technical and organizational measures to protect personal information from unauthorized access, disclosure, alteration, or destruction. These measures include access controls on internal systems, encrypted data transmission via SSL/TLS, use of Stripe for payment processing (Vessels does not store raw card data), and restricted access to signed agreement records.
Card details entered at checkout are collected by Stripe on Stripe-hosted infrastructure. They are never transmitted to, processed by, or stored on Vessels servers. Vessels receives only the transaction result and the non-sensitive billing metadata Stripe returns.
No method of transmission over the internet is 100% secure. Vessels cannot guarantee absolute security and is not liable for unauthorized third-party access that occurs despite our reasonable security measures. In the event of a data breach affecting Client data, Vessels will notify affected Clients promptly in accordance with applicable law.
10. Your Rights and Choices
Depending on your jurisdiction, you may have the right to:
Access the personal information Vessels holds about you
Request correction of inaccurate personal information
Request deletion of your personal information (subject to legal retention requirements)
Opt out of marketing communications at any time by emailing hello@vssls.co or using any unsubscribe link
Request a copy of your data in a portable format
Withdraw consent where processing is based on consent (without affecting the lawfulness of prior processing)
To exercise any of these rights, contact hello@vssls.co with your name, contact information, and the specific request. Vessels will respond within 30 days.
11. California Residents — CCPA
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
Right to Know: You may request disclosure of the categories and specific pieces of personal information collected about you, the sources, the business purpose, and the categories of third parties with whom it is shared.
Right to Delete: You may request deletion of personal information collected from you, subject to certain exceptions.
Right to Opt Out of Sale: Vessels does not sell personal information as defined under CCPA.
Right to Non-Discrimination: Vessels will not discriminate against you for exercising any CCPA rights.
Right to Correct: You may request correction of inaccurate personal information.
To submit a CCPA request, email hello@vssls.co with "CCPA Request" in the subject line. Vessels will verify your identity before processing the request and respond within 45 days.
12. Children's Privacy — COPPA
Vessels' services are not directed to children under 13 years of age. Vessels does not knowingly collect personal information from children under 13. If we become aware that personal information has been collected from a child under 13 without verifiable parental consent, we will delete that information promptly. If you believe a child under 13 has submitted information to Vessels or a Vessels-built system, contact hello@vssls.co immediately.
13. Client-Built Systems — End Customer Data
Where Vessels builds systems that collect information from a Client's end customers (website booking forms, AI agent calls, membership enrollment, virtual estimate tools), the following applies:
The Client is the data controller responsible for that end customer data and for ensuring its collection complies with applicable law.
Vessels acts as a data processor, handling end customer data solely to deliver services on behalf of the Client.
End customers seeking to exercise data rights (access, deletion, correction) related to data collected through a Client's Vessels-built system should contact that Client directly.
Vessels will cooperate with Client to facilitate end customer data requests within reasonable timeframes.
Vessels may use aggregated, anonymized, and de-identified data derived from end customer interactions to improve Vessels' systems and services, without exposing any personally identifiable information.
Client Subdomain Isolation
Each Vessels client subdomain is operated as a self-contained system. Submissions made on one client's subdomain are handled by a function scoped to that client alone, are written to that client's own records, and generate confirmation email that references only that client's engagement. Vessels does not route a signer on one client subdomain into another client's contact list, automation, or mailing sequence, and does not send a signer correspondence relating to an engagement they are not party to.
Electronic Signatures
Where an agreement is executed on a Vessels page, Vessels records the signer's name, email address, phone number, job title, and the entity they are binding, together with the drawn signature image, the state of each consent checkbox, the submission timestamp in UTC, and the browser user agent string. This record is the evidence of execution under the Electronic Signatures in Global and National Commerce Act (E-SIGN). It is retained for a minimum of seven years and is available to the signer on request at hello@vssls.co. A signer who wishes to execute on paper instead may request a countersigned PDF rather than signing on screen.
14. Call Recording and AI Voice Agents
Vessels builds and operates AI voice agents that may record calls and generate transcripts. Clients deploying these systems are responsible for complying with applicable call recording consent laws in their jurisdiction, including two-party consent requirements in states such as California, Florida, and Illinois. Vessels recommends all call handling systems include a disclosure to callers that their call may be recorded.
Call recordings and transcripts are stored on VAPI.ai and Twilio infrastructure and are accessible to Vessels and the Client. Recordings are retained for 90 days by default and may be requested for deletion by the Client. Vessels does not use individual call recordings for purposes unrelated to service delivery.
15. Creator and Talent Data
For creators represented by Vessels, we collect and process: name, contact information, platform handles and metrics, banking and tax information (for payment processing and 1099-NEC issuance), and brand deal and contract records. This information is used solely for the purpose of managing the creator relationship and fulfilling our management obligations. Creator financial information is held securely and never shared with brands or third parties without creator consent.
Where Vessels administers creator commissions on behalf of a Client, Vessels shares with that Client only the information required to verify and reconcile amounts owed, which is the creator's name or handle, the attributed performance, and the amount payable. Creator banking details, tax identification numbers, and rate history are not disclosed to the Client.
16. International Data
Vessels is based in the United States and processes data in the United States. If you are located outside the US and interact with Vessels or a Vessels-built system, your information will be transferred to and processed in the United States. By using Vessels services, you consent to this transfer. Vessels does not currently offer GDPR-specific data processing agreements but will work with Clients who require them on a case-by-case basis.
17. Changes to This Policy
Vessels may update this Privacy Policy periodically. When we make material changes, we will update the "Last Updated" date at the top of this page and notify active Clients via email with at least 14 days advance notice. Continued use of Vessels services following notice of changes constitutes acceptance of the updated Policy.
18. Contact and Requests
For all privacy-related requests, questions, or concerns:
Vessels (The Lees Media LLC)Email: hello@vssls.coSubject line for data requests: "Privacy Request"Website: vssls.co
Vessels will respond to all verifiable requests within 30 days. For urgent requests related to data breaches or COPPA concerns, please mark your email "URGENT."