Privacy Policy

Information We Collect

We collect information you provide directly and information collected automatically when you visit our site.

Information you provide

When you submit a form on this site (the free system map or contact), we collect the details you enter. Depending on the form, that includes your name, email address, phone number, business name, and any message or other information you choose to send us. We also record which page you submitted from and any campaign parameters in that page’s address. When you book a call, we collect scheduling information through our booking provider, Cal.com.

Buying a systems audit. When you buy a systems audit, payment is handled by Stripe on its hosted checkout page. Stripe receives your name, email address, billing details and card details. We never receive your full card number. We receive your name, email, the amount, the date, and a record that you accepted our Systems Audit Terms.

Booking and intake. You book your audit call through Cal.com. Cal.com receives your name, email, the time you choose, and your answers to the intake questions, which may include your website, your business phone number and hours, the tools you use, and whether you authorize the lead-path test.

The lead-path test. If you authorize it, we send one test request through your website form and make one call to your business number. We keep notes of what happened and how quickly your business responded, including any texts or emails your systems sent to us. We do not record the test call.

The audit call. We do not record audit calls. We take notes during the call to write your map. We write your map in our client portal, whose database is hosted by Supabase in the United States, and send it to you as a PDF.

Information collected automatically

When you visit our site, we automatically collect device information, browser type, pages visited, time spent on pages, referring URLs, approximate geographic location derived from your IP address, and the page from which you submitted a form (form submission source).

Form submission processing

Form submissions are processed for spam detection (using a hidden honeypot field), then stored by us in our own database, hosted by Supabase in the United States. We use them to notify our team, to send you an automated acknowledgment of your inquiry, and to follow up with you. Automated acknowledgments and other email are delivered through our email provider, Resend. We retain submissions as described in Data Retention below.

The free system map

The free system map at /system-map asks for your email address and business name, and your answers about how your business runs, your lead volume, reply rate, win rate, average job, job software, lead sources and capacity. Your answers save to our own database, hosted by Supabase in the United States, each time you move to the next step, starting when you give your contact details. If you stop partway, we keep what you entered. We use your answers to build your map, to email it to you through Resend, to notify our team, and to email you about your map and our paid systems audit. We may follow up with you even if you didn't finish. To stop our emails, reply "unsubscribe" or use the link in any email. We stop within 10 business days. To stop abuse, we keep your IP address for up to one hour to limit repeated submissions, and a one-way hash of your email address for up to 24 hours to limit how many maps we email to one address.

The call request

The call-request form on our contact page asks for your name, email address, phone number, what you want to talk about, and an optional message. When you submit it, we email those details to our own team through Resend and create a lead record in our own database, hosted by Supabase. We use your number only to call you back about your request. We do not text you, and the form does not add you to a mailing list.

How We Use Your Information

• To respond to your inquiry and follow up with you
• To build and email your free system map, and to email you about it and our paid systems audit.
• To run the systems audit you buy: the lead-path test, the audit call, and your system map.
• To schedule calls you book with us
• To understand how visitors use our site and improve our services

We do not sell, trade, or rent your personal information to third parties.

Cookies & Tracking Technologies

This site uses cookies to analyze traffic and, in your browser tab, session storage to save your progress on the free system map. They include:

• Google Analytics: sets _ga and _ga_* cookies on brevardbooked.com to tell visits apart and measure how the site is used. They belong to this site, not to other sites, and last up to two years from your last visit unless you clear them. Data is processed by Google.
• Free system map progress: your browser's session storage keeps your answers and results in this tab so you can go back a step. It is cleared when you close the tab.
• Cloudflare: may set performance and security cookies (such as __cf_bm) for bot management and DDoS protection.
• Cal.com and Stripe: the page where you book your systems audit call shows Cal.com's scheduler in a frame, and you pay on Stripe's own checkout page. Each may set its own cookies there, under its own privacy policy.

Google Analytics

We use Google Analytics on our own Google Analytics account for Brevard Booked. It runs on brevardbooked.com only. It does not start on this page, our Terms of Service, our cancellation page, or the page you see after buying a systems audit, but if you reach one of those pages from another page on this site, it may record that you viewed it. It records the pages you view, how far down a page you scroll, the site you came from, your device and browser, and your rough location. Google says Google Analytics does not store your IP address; it uses the address to estimate that location. It also records that a form was sent (for the contact form, only that it was sent), which step of the free system map you reached (never your answers), and the steps of a chat with our assistant. These events never include anything you type. One exception: if you search our blog, the words you search for appear in the page address, and Google Analytics records that address. When you book a call through Cal.com, our server may also tell Google Analytics that the booking happened, with a one-way hash of your email address in place of the address.

We load Google Analytics directly. We do not use Google Tag Manager, and this site loads no advertising tags: no Google Ads, no remarketing, no Meta Pixel, and no other ad network's code. We do not use session recording tools.

Most browsers allow you to block or delete cookies through their settings. Doing so may affect site functionality. You can also stop Google Analytics in your browser with Google's opt-out add-on at tools.google.com/dlpage/gaoptout.

Do Not Track. This site does not change what it collects when your browser sends a Do Not Track signal. It also loads Google Analytics the same way when your browser sends a Global Privacy Control signal. We do not sell your personal information or share it for advertising, so there is no sale or sharing for that signal to stop.

Tracking by other companies. Other companies may collect information about your activity on this site, and on other websites, over time. Google collects it for our analytics, as described above. Cloudflare, which hosts this site and runs Turnstile, receives your IP address and browser details with each request. Cal.com on our booking page and Stripe on its checkout page receive information when you use them. A video on one of our case-study pages loads from YouTube, which receives your IP address and browser details when it loads. Each company handles that information under its own privacy policy, which may let it combine it with what it collects on other websites.

Third-Party Services

We use the following third-party services to operate this site. Each service has its own privacy policy governing how it handles your data:

• Google Analytics: website analytics, on our own Google Analytics account. See Cookies & Tracking Technologies above
• Google Workspace: our business email and calendar, where our team receives form notifications, including your free system map answers, and where audit calls are held on Google Meet
• Resend: email delivery, including automated acknowledgments of your inquiry and your free system map
• Supabase: hosting for our database that stores your form submission and inquiry history and, if you buy a systems audit, your system map (United States)
• Stripe: invoicing and payment processing. Stripe receives your billing contact details and handles card details directly; we never receive them
• Cal.com: scheduling for calls you book with us. Receives your booking details if you book
• Cloudflare: website hosting, CDN, DDoS protection, and storage of audit purchase and booking records and short-lived abuse counters
• Cloudflare Workers AI: the AI assistant, running under a Cloudflare account owned by NovraScale LLC, doing business as Brevard Booked. Cloudflare processes your question to write an answer and, under its Workers AI terms, does not use it to train AI models or to improve its services. We keep the question text, with contact details masked, for up to 30 days; see “AI Assistant” below
• Cloudflare Turnstile: bot and abuse prevention on the AI assistant and chat. It checks that a person, not a bot, is sending. Cloudflare says it collects signals such as your IP address and browser details only to detect and block bots, not to identify, profile or target you
• YouTube (Google): a video on one of our case-study pages loads from youtube-nocookie.com, which receives your IP address and browser details when it loads

AI Assistant

Our site has an AI assistant, called the Brevard Booked assistant, in two places: an “Ask us anything” box below the questions and answers on several pages, and a chat button on some pages. Neither asks for your name, email address or phone number. Please do not type personal or customer information into either one.

Your question is processed by Cloudflare Workers AI, an artificial-intelligence service running under a Cloudflare account owned by NovraScale LLC, doing business as Brevard Booked. It writes an answer based on content published on this site, and it can make mistakes. If an answer differs from a page on this site or from our Systems Audit Terms, the page or the terms are what count. Cloudflare processes your question to produce the answer. Its Workers AI terms say it does not use your question or the answer to train AI models or to improve its services. Before your question is sent to the model or stored, our software replaces the email addresses, phone numbers, street addresses and card or Social Security style numbers it recognizes with placeholders. If you use the chat button, your browser also sends up to four earlier messages from the same conversation so the answer has context. Those are masked the same way and are never stored.

We keep the question text, with those details masked, for up to 30 days, along with the date, how the question was handled (answered, given a standard reply, or blocked), and whether it came from the box or the chat button. We use it to improve our answers. We do not store the answer, your IP address or your browser details with it. Each answer is generated, checked by our software, and only then shown to you. Some questions get a standard reply instead. We keep questions without an account or your IP address, so we can’t reliably tell which questions are yours. If you want a question deleted sooner, email us at privacy@brevardbooked.com with what you asked and roughly when, and we will delete any question that matches. Every question deletes itself within 30 days.

To limit abuse, we count how many questions come from your IP address. These counters store your IP address as part of their name (for an IPv6 address, the part that identifies your network), are kept apart from the questions, hold no question text, and are deleted automatically within 24 hours of your last question. We use them only to prevent abuse. Cloudflare Turnstile checks that a person is asking, and it receives your IP address to do so. It loads only when you start using a question box or the chat, never when the page opens. Our hosting provider, Cloudflare, also keeps technical request logs for us that can include your IP address, your browser and device details, your approximate location, and the page the question came from. We can see them for up to 7 days and use them only to keep the site running and secure. They record how each question was handled, never its text. Cloudflare also processes IP addresses to run and protect its network, under its own privacy policy.

We never sell your questions and never send them to advertising or analytics providers. The assistant tells our analytics provider, Google Analytics, only that the chat was opened or closed, that a question was sent or a suggested question was tapped, and how it was handled. Like other activity on this site, those events are linked to your Google Analytics cookie. They never include the words you type.

The assistant answers questions about Brevard Booked based on content published on this site. It can get things wrong, it is not a substitute for speaking with a person, and it does not give legal, tax, insurance, licensing or medical advice. What you buy is set by our Systems Audit Terms, not by the assistant.

Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encrypted connections (HTTPS) and access controls on internal systems. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

Data Retention

Except where a different period is listed below, we retain personal information you provide (name, email, phone number, business name, website URL) for as long as an active business relationship exists, or until you request deletion. Retention periods by category:

• Google Analytics: event data up to 14 months, then Google deletes it. The cookies in your browser last up to two years from your last visit unless you clear them
• Form submission data: retained indefinitely while the business relationship exists, or until deletion is requested
• Free system map answers, including partial answers: 2 years after your last contact with us, or until you ask us to delete them.
• Your system map from a paid audit, including the PDF in our portal: if you do not become a client, 2 years after we send it to you (or 2 years after we start it, if we never send it), or sooner if you ask us to delete it. If you become a client, we keep it while we work together, then 2 years.
• Assistant questions: the question text with contact details masked, up to 30 days. The answer, your IP address and your browser details are not stored with it. Abuse counters that contain your IP address: up to 24 hours after your last question, with no question text. Cloudflare request logs we can see, which can include your IP address, browser and device details, approximate location, the page the question came from and how each question was handled: up to 7 days. See “AI Assistant” above.

Audit purchase records: 7 years (tax and accounting). Intake answers and lead-path test notes: while we work together, then 2 years. Audit call notes: while we work together, then 2 years.

You may request deletion of your data at any time by emailing privacy@brevardbooked.com.

Your Rights

You have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Opt out of analytics by blocking this site's cookies in your browser, using a tracker-blocking extension, or using Google's opt-out add-on

To exercise any of these rights, email us at privacy@brevardbooked.com.

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete personal information, the right to correct inaccurate information, and the right to opt out of the sale or sharing of personal information.

We do not sell your personal information. We do not share it for cross-context behavioral advertising, meaning ads based on your activity across other sites. We also do not send information about you to Meta (Facebook and Instagram). The Meta Pixel does not load on any page of this site, and our server does not send Meta any event about your visit, a form you submit, or a call you book.

There is no Google advertising tag on this site: no Google Ads, no conversion tracking for ads, and no remarketing.

Your right to opt out: To stop Google Analytics in your browser, block or clear this site's cookies, or use Google's opt-out add-on at tools.google.com/dlpage/gaoptout. To ask us to delete analytics data about you, email privacy@brevardbooked.com with the subject line “Opt Out of Analytics.” Google Analytics does not hold your name or email address, so we can find only data we can tie to you: a booking recorded under a one-way hash of your email address, or visits under a Google Analytics cookie ID you send us. We will ask Google to delete it within 15 business days.

California residents may exercise any of the rights above by emailing privacy@brevardbooked.com. We will not discriminate against you for exercising any privacy right.

International Visitors

We serve businesses in the United States. Our service providers are based in the United States. Cloudflare, which hosts this site and runs the assistant, handles requests in data centers in the United States and other countries. We do not target our services to visitors in the European Economic Area or the United Kingdom. Our main database is in the United States. Information you send through our forms or the assistant may also be handled and stored by Cloudflare and our other providers in data centers outside the United States.

Children

This site is for business owners. It is not directed to children under 13, and we do not knowingly collect personal information from them. If you think a child has sent us information, email us at privacy@brevardbooked.com and we will delete it.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with a revised “last updated” date. Continued use of the site after changes constitutes acceptance of the updated policy.

Contact

Questions about this policy? Email us at privacy@brevardbooked.com.