Privacy

Last updated 7 November 2026. This page describes what the Stedwell website at stedwell.ai is built to do. It is an informational description of this system. It is not a legal opinion, and a lawyer has not signed off on it.

Who operates this site

Stedwell is operated by Vikart Inc., 73 Whitmore Dr, St. Augustine, FL 32092. Email brief@stedwell.ai.

Stedwell is not affiliated with SAM.gov, GSA, or any other U.S. government agency.

What you can do here

• Read the public pages, including an archived sample issue dated 5 November 2026.

You cannot opt in, start an email list, or pay from this site. Signup and checkout are switched off in the code. There is no password account.

Friday Dispatch opt-in

Friday Dispatch signup is not open. The public page has no email field and does not send an address to Resend. POST /api/subscribe refuses before it reads a body. Provider settings cannot turn that on; the switch is in the code and it is off. Nothing on this site subscribes you, and the endpoint does not answer as if it had.

No Friday Dispatch address is collected in this release. The public page has no email field. The consent version string friday-dispatch-v1 is not being recorded from this site.

Click links

Some links use /r with a company identifier (a SAM UEI). On a normal browser GET, the server may read a company name, state, and email from a lookup file in this project and store a click on a Resend contact. The stored source starts with outreach_click:. That record is not Friday Dispatch consent. A click contact created by this path is stored as unsubscribed. Link scanners, prefetch, HEAD requests, and requests with no user agent are redirected and not written.

The landing page can keep the price arm, the UEI, and an email address in the browser's localStorage under stedwell_arm, stedwell_uei, and stedwell_email, and can add them to later links on this site.

Payments

Paid checkout is not open. The pages show the configured prices (Estimator Desk $49 or $79 a month, Multi-State Firm $99 or $149 a month, depending on the price arm) and do not send you to Stripe. Daily delivery is not running, so the site does not charge you for it. Stripe payment-link addresses remain in the server configuration and are not used while checkout is closed. This server does not receive card numbers.

A Stripe webhook, checked with Stripe's signature, can still set paid_status on an existing Resend contact to paid, past_due, or canceled when an event includes an email. That status is not Friday Dispatch consent. The webhook does not clear an unsubscribe flag, does not add the address to the dispatch segment, and does not opt the address into a topic.

This page does not add a refund rule, a retention schedule, a lifetime price, or a cancellation portal.

Email

Welcome mail is not sent. The welcome function returns before it calls the email provider, because the same code switch that closes signup is off. Setting a welcome flag or a signing secret does not send a note.

Digest mail is not sent. Broadcast filing and sending return before any provider call, including when a topic id or a send flag is present. unsubscribed: false is not treated as consent. Publishing this page does not send any email.

The archived sample uses ordinary links to the preferences page. Those links are not a personal unsubscribe and do not change a subscription.

Unsubscribe

A personal opt-out link is a signed token minted for that message. It is meant to keep working for at least 30 days after the message, and the current links are built to last 180 days from the moment they are created. A later message gets a new link and a new expiry. The email address is not a separate field someone can edit. The signature is checked before any change. An expired or altered token does nothing. Opening the link does not subscribe or unsubscribe anyone. Confirming on the page, or a mail program's one-click POST, immediately sets that Resend contact to unsubscribed and removes it from the dispatch segment when the contact already exists. If the address is not already a contact, the server does not create one. The page does not display the email address. The server does not write the token or the address into its log line.

This site does not offer an address lookup, and it is not issuing new personal unsubscribe links because it is not sending mail. This page does not delete earlier provider records.

Providers this code uses

• Vercel hosts the site and the serverless routes.
• Resend is the contact and email provider for records that already exist there. This release does not add a Friday Dispatch signup or send a new message through it.
• Stripe is the payment provider for charges that already exist there, and for the webhook that can update a paid status on an existing contact. This release does not send you to a Stripe payment page.
• The browser loads fonts from Google (fonts.googleapis.com and fonts.gstatic.com).
• The digest pipeline, when a person runs it, downloads the public SAM.gov Contract Opportunities CSV. That file is government solicitation data, not a list of Stedwell subscribers.

This release does not sell, collect, or send a new signup or a new card payment. Resend and Stripe may still process contact and payment records they already hold. This page does not say those earlier records were deleted. Server logs can include an error status. The code redacts the Resend API key from those logs. This site does not use passwords.

How long records are kept

This page does not set a retention period and does not say that earlier records were deleted. A contact or payment record that Resend or Stripe already holds stays under that provider's own systems. An expired link, by itself, does not delete a contact.

Children

This site is written for contractors and estimators. It is not meant for children.

Changes

The date at the top is the date of this description. If the site's data flows change, this page should be updated to match the code. The consent version on the form changes when the scope of the opt-in changes.