Privacy Policy

Last updated: May 26, 2026

Central Valley AI ("we," "our," "us") is operated by Kaweah Tech, a California firm based in California's Central Valley. This policy describes what information we collect when you visit centralvalleyai.com, how we use it, who else processes it on our behalf, and the choices you have. It applies to this website only; links to other sites are governed by those sites' policies.

We have written this policy to comply with the California Online Privacy Protection Act (CalOPPA, Cal. Bus. & Prof. Code §§ 22575–22579), Google's Measurement Controller-Controller Data Protection Terms, and the Children's Online Privacy Protection Act (COPPA). We are not currently a "business" under the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA), the Colorado Privacy Act, the Connecticut Data Privacy Act, or the EU GDPR, because we do not meet the applicable revenue, processing-volume, or jurisdictional thresholds. The "California Privacy" section below explains what changes when we do.

1. What we collect

1.1 Information you actively send us

Central Valley AI does not have account signups, subscription forms, comments, or contact forms. The only personal information you can actively send us is what you choose to put in an email — for example, if you email hello@kaweah.tech with a tip, correction, or partnership inquiry. In that case we receive your email address, your name (if you sign the message), and whatever content you write. We use it to respond and we keep the thread until the matter is resolved, then archive it under our normal mailbox retention.

1.2 Information collected automatically

When your browser requests a page from centralvalleyai.com, our hosting infrastructure (AWS Lambda behind Amazon CloudFront) records standard request metadata in short-lived operational logs:

• IP address
• Requested URL and HTTP method
• HTTP response code and byte size
• Approximate timestamp
• User-Agent string (browser and device family)
• Referrer header (the page that linked you to ours, if any)

These logs exist for security, abuse prevention, and debugging. They are retained by our hosting provider per its standard operational practices and are not joined to your Google Analytics profile.

1.3 Analytics: Google Analytics 4

We use Google Analytics 4 ("GA4"), provided by Google LLC, to understand how visitors find and use the site so we can improve it. GA4 loads via Google's gtag.js script after the page has finished rendering, so it does not delay the content you came to read.

GA4 places two first-party cookies in your browser:

GA4 collects, for each pageview, a combination of:

• A pseudonymous client ID (not your name, email, or any identifier you give us)
• Page URL, title, and referrer
• Approximate location at the city level, derived from your IP address — Google uses your IP to look up a city and then discards it; the IP itself is not stored in our GA4 property
• Browser, operating system, device category, screen resolution, and language
• Engagement signals (time on page, scrolls, outbound link clicks, file downloads) provided by GA4's "enhanced measurement" feature
• The events we explicitly send, described in section 1.4

Our GA4 property uses Google's default privacy settings:

• Data retention is set to Google's default — 2 months for user-level and event-level data. After 2 months Google deletes the underlying event data; aggregated reports may be kept longer.
• Google Signals (the GA4 feature that joins data to signed-in Google accounts for cross-device tracking) is not enabled on our property.
• Ads personalization is not enabled — we do not link this GA4 property to any Google Ads account, and we do not use GA4 data to build advertising audiences or for any advertising purpose.
• IP anonymization is enforced automatically by GA4 and cannot be turned off.

Google's own description of how it processes the data is at business.safety.google/privacy and policies.google.com/privacy.

1.4 Custom event: Kaweah Tech lead-click tracking

We send one custom event to GA4 named kaweah_lead_click. It fires when you click any link on this site whose destination is kaweah.tech (or any subdomain). The event records:

• The clicked URL
• The visible text of the link (up to the first 100 characters)
• The destination domain
• The path of the Central Valley AI page where the click happened
• The same pseudonymous client ID GA4 already uses for that browser

We use this event to measure how often readers move from a Central Valley AI article or page to Kaweah Tech's website. We do not join this event to anything that could identify you personally, and we do not share the event with advertising networks. The event flows only into our own GA4 property.

1.5 What we do not collect

To be explicit about scope: Central Valley AI does not use advertising cookies, retargeting pixels, social-media tracking pixels (Facebook Pixel, X / Twitter Pixel, LinkedIn Insight Tag, TikTok Pixel, etc.), session-replay tools (FullStory, Hotjar, LogRocket, etc.), fingerprinting libraries, or any third-party identity graph. We do not buy or rent visitor data.

2. How we use the information

We use the information described in section 1 to:

• Serve you the page you requested.
• Understand which articles, cities, and tags are read most often, so editorial effort goes where readers actually want it.
• Measure how many readers click through to Kaweah Tech, the firm that operates this site.
• Detect and mitigate abuse, scraping at unsustainable rates, and security incidents.
• Respond to email you send us.

We do not:

• Sell personal information.
• Share personal information for cross-context behavioral advertising.
• Build advertising profiles.
• Disclose personal information to anyone other than the service providers listed in section 3, except where required by law (e.g. a valid subpoena) or to protect the safety of users or the public.

3. Service providers we use

These are the only third parties that routinely process visitor data on our behalf. Aggregated, non-personal article content may also be retrieved by AI crawlers and search-engine bots in accordance with our robots.txt; that retrieval is initiated by those crawlers, not by us, and does not involve your personal information.

4. Your choices and controls

You have several ways to limit what is collected about you on this site.

• Browser cookie controls. Every major browser lets you block or delete cookies on a per-site basis. Blocking cookies for centralvalleyai.com prevents the _ga and _ga_<MEASUREMENT_ID> cookies described above from being set or read.
• Google's Analytics Opt-Out Browser Add-on. Installing the add-on at tools.google.com/dlpage/gaoptout prevents GA4 from sending data from your browser to Google on this site (and any other site using GA4).
• Content blockers. Privacy-focused browser extensions (uBlock Origin, Privacy Badger, etc.) and privacy-focused browsers (Brave, Firefox with Enhanced Tracking Protection on Strict) block GA4 by default.
• Email opt-out. Because we have no marketing list, there is nothing to opt out of — but if we ever email you and you would prefer we did not, reply and say so.

5. Do Not Track and Global Privacy Control signals

Do Not Track (DNT)

Most browsers offer a "Do Not Track" setting. Because no industry or legal standard for honoring DNT signals has been finalized, this site does not currently respond to DNT signals. This disclosure is provided pursuant to California Business & Professions Code § 22575(b)(5) (the CalOPPA AB 370 amendment).

Global Privacy Control (GPC)

The Global Privacy Control is a browser-level signal that communicates an opt-out of the "sale" or "sharing" of personal information. GPC is legally binding on businesses that meet the California Consumer Privacy Act's applicability thresholds. We are not currently a "business" under the CCPA, so we are not legally required to honor GPC, and we do not currently process GPC signals as opt-out requests. When Central Valley AI crosses CCPA thresholds we will begin honoring GPC and update this policy accordingly.

We also note, for completeness, that we do not "sell" or "share" personal information as those terms are defined under the CCPA, so an opt-out signal would not change the data flow described in this policy today.

6. California privacy

This section addresses the rights of California residents.

CCPA / CPRA

Central Valley AI is not currently a "business" under the California Consumer Privacy Act because we do not (a) have annual gross revenue exceeding the statutory threshold, (b) buy, sell, share, or receive the personal information of 100,000 or more California consumers or households per year, or (c) derive 50% or more of annual revenue from selling or sharing personal information. We re-evaluate this on each major change to the site and at least annually. When we cross any threshold we will update this policy to include the full notice at collection, the request mechanisms, and the GPC handling required by CCPA.

Independent of CCPA applicability, the data practices described in this policy already satisfy the substantive promises CCPA would otherwise compel: we do not sell or share personal information, we do not use it for cross-context behavioral advertising, we do not retain it longer than disclosed, and we limit who processes it.

California "Shine the Light" (Civil Code § 1798.83)

We do not share personal information with third parties for those third parties' direct marketing purposes. California residents who want to confirm this in writing may email legal@kaweah.tech.

Right to know what we have

Even though we are not subject to CCPA, a California resident who wants to know what personal information our site has associated with their browser may email legal@kaweah.tech. We will do what is technically possible — note that almost all of the information described in this policy is pseudonymous and stored by Google, not by us, so the most useful action is usually the GA opt-out add-on or browser cookie deletion described in section 4.

7. Children's privacy

Central Valley AI is intended for a general audience. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13 within the meaning of the Children's Online Privacy Protection Act (COPPA). If you are a parent or guardian and believe a child under 13 has provided personal information to us through email, please contact legal@kaweah.tech and we will delete it.

8. Data security

We host the site on managed AWS infrastructure with TLS in transit, access controls scoped to the engineering team, and a small attack surface (the site is largely static content with a thin SSR layer). The auto-generated articles, the article-generation scripts, and the deployment pipelines are open-source on GitHub. No internet-facing system is perfectly secure; this disclosure describes our practices, not a guarantee.

9. Changes to this policy

When we change this policy materially — for example, when we add a new third-party processor or cross a privacy-law threshold — we update the "Last updated" date at the top of the page and post the new version at the same URL (/privacy-policy/). For non-material changes (typos, formatting, clarifications that do not change the substance) we update silently. Because we have no email list, we cannot notify you directly; if this policy matters to you, bookmark it.

10. Contact

Questions about this policy, or about how your information is handled on this site, can be sent to:

Kaweah Tech — Legal
Email: legal@kaweah.tech

For editorial questions, tips, or corrections, please use the general address: hello@kaweah.tech.