Privacy Policy

From website visitors. What you type into our contact, audit-request and sign-up forms: name, business name, email, phone, website address and your message. We also receive standard technical data with each request (IP address, browser type, pages requested). We use a cookieless analytics service that counts page views without identifying you.

From clients. Business and contact details, the information you give us to run your services (services offered, service area, hours, photos, logos, website and Google Business Profile details), sign-in email, and billing records. Card details are entered directly with Stripe; we never see or store full card numbers.

About end customers, on a client's behalf. Name, phone number and email address the client gives us or that you enter on a form; the rating and any private feedback you choose to send on a review page; what you type into a lead form or website chat (name, contact details, the service you need, your message); and whether you have opted out of messages.

Public business information. For our audit, prospecting and competitor tools we collect publicly available information about businesses — website content, Google ratings and review counts, directory listings. This is information about businesses, not private individuals.

• To provide the services a client has signed up for: sending review requests, publishing websites and landing pages, passing leads to the client, producing reports and monthly recaps.
• To answer inquiries, run requested audits, and send sign-in links, receipts and service notices.
• To bill clients and handle failed payments.
• To keep the platform secure: rate limits, abuse prevention and error logs.
• To draft text with AI tools (for example, a recap narrative or suggested page copy). A person at NGS reviews AI-drafted content before it is sent to a client or published.

Clients may use our platform to send their customers a text message asking about a recent job, with a link to leave a review. Clients are required to have their customers' permission to contact them before we send any message.

• Frequency. One message per completed job.
• Opt out. Reply STOP to any message to stop all messages sent through our platform to your number, from every business that uses us. Reply START to opt back in.
• Help. Reply HELP or email hello@northeastgrowthsolutions.com.
• Cost. Message and data rates may apply.

We do not sell, rent or share mobile phone numbers or SMS opt-in information with third parties or affiliates for their marketing or promotional purposes. Phone numbers are shared only with the messaging provider that delivers the message (Twilio) and the client the message is sent for.

We do not sell personal information. We share it only as follows:

• The client a record belongs to. End-customer feedback, leads and chat messages go to the business they were meant for. Clients never see another client's data.
• Service providers that run the platform, under contracts that limit use to providing their service: Supabase (database and sign-in), Vercel (hosting and analytics), Stripe (payments), Resend (email), Twilio (text messages), Anthropic (AI drafting), and Google (business listing data, page-speed checks and, with a client's authorization, Google Business Profile management). Our AI search monitoring sends search questions about a client's business type and town to AI providers (OpenAI, Google Gemini, Perplexity, DataForSEO); those questions contain no end-customer information.
• When required by law, or to protect the rights, safety or property of NGS, our clients or others.
• In a business transfer, such as a merger or sale of assets, subject to this policy.

We use cookies only to keep clients and staff signed in. We do not use advertising or cross-site tracking cookies. Our page-view analytics do not use cookies.

• Client and end-customer records are kept while the client's account is active. After a client cancels, the client may request an export for 30 days; we then delete that client's end-customer data within 90 days of cancellation, except where the law requires us to keep it.
• An opt-out is kept for as long as we send messages, so that STOP keeps working.
• Billing records are kept as long as tax and accounting law requires.
• Inquiries from our own website are kept for up to three years.
• Rate-limit records store a one-way hash of your IP address, never the address itself, and are deleted after one day.

Data is encrypted in transit. Access is restricted by account, and each client can see only its own data. Stored website credentials are encrypted. No system is perfectly secure; if a breach affects your information, we will notify you and the appropriate authorities as New York law requires.

You may ask us to show you, correct or delete personal information we hold about you by emailing hello@northeastgrowthsolutions.com. We will respond within 45 days.

If your information was collected by one of our clients (for example, you are a customer of a contractor who uses us), we will pass your request to that business and act on its instructions, because it decides how that information is used. You can also contact the business directly.

Our services are for businesses and are not directed to children under 13. We do not knowingly collect information from children under 13.

We will post changes on this page and update the date at the top. Material changes are emailed to clients before they take effect.

Questions: hello@northeastgrowthsolutions.com, or Northeast Growth Solutions LLC, Schenectady, New York. See also our Terms of Service.