Privacy Policy

1. Information We Collect

For Website Visitors

When you visit our site or fill out a form, we may collect:

• Name, email address, and phone number (if you submit a contact form or quiz)
• Message content and form responses
• Browser type, device information, and IP address
• Pages visited, time on site, and referral source

For Partner Agencies

When you sign a Power Partner Agreement and use our services, we also collect:

• Business name, address, and contact details
• Payment information (card on file, billing address)
• Engagement model preferences and service selections
• Onboarding form data (agency branding, team members, preferences)
• Communication history related to your partnership

Client Data We Process on Your Behalf

When we fulfill services for your clients, we may access or process:

• API credentials, login information, and access tokens your clients provide through you
• Client business information needed for website builds, SEO, and campaign setup
• Go High Level sub-account data (contacts, workflows, automations)
• Domain and hosting credentials

This data is processed solely to deliver services under your partnership. We act as a data processor on your behalf, not a data controller.

2. How We Use Your Information

We use the information we collect to:

• Deliver services: Build websites, configure systems, run campaigns, and fulfill partner obligations
• Process payments: Bill for activation fees, per-client fees, and setup fees
• Communicate: Respond to inquiries, send onboarding instructions, and provide support
• Configure white-label systems: Set up branding, sub-accounts, and client-facing materials under your agency name
• Improve our services: Analyze site usage patterns to make the experience better
• Meet legal obligations: Comply with tax reporting, fraud prevention, and applicable law

We do not use your information for purposes unrelated to our services.

3. Data Storage and Security

We take security seriously. Here's how we protect your data:

• Credential storage: All API keys, passwords, and sensitive credentials are stored using enterprise-grade, end-to-end encrypted, zero-knowledge password management. We use the same security standards as ProtonPass, meaning even we cannot access your raw credentials without your authorization.
• Database encryption: Application data is encrypted at rest and in transit using industry-standard protocols (AES-256, TLS 1.3).
• Hosting security: Our site is hosted on Cloudflare with DDoS protection, SSL certificates, and edge caching. Backend services run on Railway with isolated containers.
• Access controls: Staff access is role-based and authenticated via Google OAuth. Only team members who need specific data to fulfill their role can access it.

4. Third-Party Services

We use the following third-party services to operate our platform. Each has its own privacy policy:

We only share data with these services to the extent necessary to deliver our services. We do not sell or rent your data to any third party.

5. Cookies and Tracking

Our website uses a minimal set of cookies:

• Essential cookies: Required for session management, authentication, and basic site functionality. These cannot be disabled.
• Analytics: We may use privacy-respecting analytics to understand how visitors use our site. This data is aggregated and does not identify you personally.

We do not use advertising cookies, retargeting pixels, or third-party marketing trackers. You can manage cookies through your browser settings at any time.

6. Data Sharing

We do not sell your data. We do not share your client lists, pricing, or business processes with anyone outside our team. This is core to our white-label promise.

We only share data in these limited circumstances:

• Service delivery: With third-party services listed above, solely to fulfill our obligations to you
• Legal requirements: When required by law, subpoena, court order, or government request
• Business transfers: In connection with a merger, acquisition, or sale of assets (you would be notified)
• With your consent: When you explicitly authorize us to share specific information

7. Data Retention

We retain your information only as long as necessary:

After the retention period, data is permanently deleted or anonymized.

8. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Ask us to update or correct inaccurate information
• Deletion: Request that we delete your data (subject to legal obligations and active contracts)
• Portability: Receive your data in a structured, commonly used format
• Objection: Object to specific uses of your data

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

9. Children's Privacy

This website and our services are designed for businesses and professionals. We do not knowingly collect personal information from anyone under 13 years of age. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy as our services evolve. If we make material changes, we will notify active partners by email at least 30 days before the changes take effect. The effective date at the top of this page reflects the most recent update.

Continued use of our website or services after changes take effect constitutes your acceptance of the updated policy.

11. Contact Information

If you have questions about this Privacy Policy or how we handle your data, reach out: