Privacy policy
Last updated: [DATE OF PUBLICATION]. This is a plain-English draft and should be reviewed by a qualified professional before launch.
This policy explains what information CallFlow SEO (a trade name of [LLC NAME], “we”) collects through callflowseo.com and in the course of client work, how we use it, and the choices you have. It applies to visitors and customers in the United States and Canada.
The short version
- We collect what you type into our forms, plus basic technical data needed to run the site.
- We use it to answer you, prepare your audit, and do the work you hire us for.
- We don’t sell your information, and we don’t share it for advertising.
- You can ask us to see, correct or delete your information at any time: [EMAIL].
Information we collect
What you give us
When you use a form on this site we collect the details you enter, such as your name, company or agency name, trade, city and state, website or Google Business Profile link, email address, phone number (optional), number of clients (agencies), and your message.
Collected automatically
Our hosting provider (Cloudflare) processes standard technical data such as IP address, browser type, pages requested and timestamps to deliver the site and protect it from abuse. [TODO: if analytics are added, name the tool here and describe what it collects and whether it uses cookies.] This site does not currently set advertising or tracking cookies.
During client work
If you become a client, you may give us manager access to your Google Business Profile, editor access to your website, and access to software used to send review requests. We use that access only to perform the agreed services. We also collect public information about your business, such as directory listings, map rankings and AI assistant answers, to measure results.
How we use information
- To respond to your request and send your free audit
- To provide, measure and report on services you buy from us
- To send service-related messages, such as reports and billing
- To keep the site secure and prevent spam (for example, the hidden field in our forms)
- To meet legal, tax and accounting obligations
We won’t add you to a marketing newsletter without your consent. If you agree to receive occasional updates, every message will include a way to unsubscribe, consistent with CAN-SPAM in the US and CASL in Canada.
AI tools
We use AI tools to help draft content and analyze public search results. We don’t put sensitive personal information into these tools, and we choose settings that don’t allow client data to be used to train public models where those settings are available. A person reviews all output before it’s used.
Who we share information with
We share information only with service providers who help us run the business, such as website hosting, form handling, email, rank-tracking tools and accounting software, and only as needed for them to do that job. [TODO: list the form handler and email provider once chosen.] We may also disclose information if required by law, or as part of a sale or reorganization of the business, in which case this policy would continue to apply.
We do not sell personal information and do not share it for cross-context behavioral advertising.
Case studies: we only publish a client’s results, name or quote with their written permission.
How long we keep it
Inquiry and audit information is kept for up to [24] months unless you become a client or ask us to delete it sooner. Client records are kept for as long as needed for the work and for legal and tax purposes. When a client leaves, we remove our access to their accounts.
Your choices and rights
You can ask us to tell you what personal information we hold about you, correct it, delete it, or stop contacting you. Depending on where you live (for example, certain US states, or Canada under PIPEDA), you may have additional rights. Email [EMAIL] and we’ll respond within the time required by applicable law. We won’t treat you differently for making a request.
Security
We use reasonable measures to protect information, including encrypted connections (HTTPS), unique passwords and two-factor authentication on the accounts we use. No method is perfectly secure, so we limit what we collect to what we need.
Children
This site is for businesses and is not directed to children under 16. We don’t knowingly collect their information.
Where information is processed
We are based in the United States, and our service providers may process information in the US or other countries. If you are in Canada, your information may be processed outside Canada and be subject to the laws of those countries.
Changes
If we change this policy, we’ll update the date at the top. Significant changes will be noted on this page.
Contact
[LLC NAME]
[MAILING ADDRESS]
[EMAIL]