Privacy Policy

Information we collect

• Account information — name, email, and authentication details for Customer users.
• Lead information — names, email addresses, phone numbers, service requests, property or job details, service area or location, and any notes a Customer records or a Lead submits.
• Integration data — lead and advertising metrics from connected services such as Google and Meta, and messages you connect for outreach.
• Usage and device data — log data, IP address (stored hashed for abuse prevention), and basic analytics needed to run and secure the Service.

How we use information

• Provide, maintain, and secure the Service and its CRM, quoting, booking, and reporting features.
• Prepare suggested messages for a Customer to review and send from their own email or phone. Messages are sent without the Customer’s review only when the Customer turns on an automated feature.
• Send text messages that a Lead agreed to receive, such as appointment confirmations, reminders, and replies to a request.
• Produce summaries and analytics for the Customer about their own leads and spend.
• Detect, prevent, and investigate fraud, abuse, and security incidents.
• Comply with legal obligations.

Legal bases

Where required by law, we rely on: performance of a contract (to provide the Service to Customers); legitimate interests (to secure and improve the Service); consent (where you provide it, such as certain communications); and compliance with legal obligations. Customers are responsible for having a lawful basis to upload and process Lead information in the Service.

How information is shared

We do not sell personal information. We share it only with:

• The relevant Customer — Lead information is visible only within the workspace it belongs to.
• Service providers (sub-processors) who process data on our behalf under contract:
  • Supabase — Database, authentication, and file storage.
  • Vercel — Application hosting and delivery.
  • Stripe — Subscription billing and payments (card details go to Stripe, never to us).
  • Cloudflare — Domain, network delivery, and privacy-first web analytics on public pages.
  • Anthropic — AI drafting of suggested messages (when enabled).
  • Google (Ads & Business Profile) — Lead capture and advertising metrics.
  • Meta (Facebook/Instagram Ads) — Lead capture and advertising metrics.
  • Email delivery provider — Sending transactional and summary emails.
  • Twilio — Telephony and SMS features (when enabled).
  • PostHog — Product analytics: page views, clicks, and signup and setup steps (never lead or message content).
  • Sentry — Error monitoring.
• Meta — if you accept analytics cookies, the ad measurement data described under Cookies below.
• Legal and safety — when required by law, or to protect rights, safety, and the integrity of the Service.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

Data retention

We keep personal information for as long as a Customer account is active and as needed to provide the Service, then delete or de-identify it within a reasonable period, unless a longer retention is required by law. Customers may request deletion of their workspace data as described below.

Security

We protect data with encryption in transit, per-workspace access controls (row-level security so one workspace cannot read another’s data), scoped service credentials, and least-privilege access. No system is perfectly secure, but we work to protect information against unauthorized access, alteration, and loss.

Your rights and choices

Depending on where you live (for example under GDPR or the CCPA/CPRA), you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to opt out of the “sale” or “sharing” of personal information — which we do not do. To exercise a right, contact us at hello@ascendeddigitals.com. Leads should generally contact the business they dealt with directly; we will assist that business in responding.

Communications and consent

Outreach to Leads is initiated by Customers, who are responsible for having the necessary consent and for complying with laws governing calls, texts, and email (such as the TCPA and CAN-SPAM). Emails we help send include an unsubscribe option, and texts honor STOP requests. Recipients can opt out at any time.

Text messages

When you give a phone number and agree to receive texts, for example on a booking form or during a phone call with a business that uses the Service, we record the phone number, the consent, and the time it was given. We use them only to send the texts you agreed to: appointment confirmations, appointment reminders, and replies or follow-ups about your request.

• We do not sell, rent, or share mobile phone numbers or text message consent with third parties or affiliates for their marketing or promotional purposes. This information is shared only with the service providers that deliver the messages, such as our telephony provider and mobile carriers.
• Message frequency varies. Message and data rates may apply.
• Reply STOP to any text to stop receiving texts from that number. Reply HELP for help, or contact us at hello@ascendeddigitals.com.
• Consent to receive texts is not a condition of any purchase or booking.

Cookies

We use strictly necessary cookies to keep you signed in and to secure the Service. These run regardless of your choice below, because the Service cannot function without them. We also use a small number of first-party analytics cookies: PostHog’s, to count page views and the steps of signing up (it honours Do Not Track), and one of our own that remembers which campaign or website first brought a browser to us, so we can tell which marketing works. That cookie holds only campaign tags, the referring site’s domain and the first page visited, never anything you type, and expires after 60 days. Analytics cookies only run after you accept them in the cookie banner shown on your first visit; you can change your choice at any time by clearing cookies for this site. If you accept analytics cookies, we also use the Meta pixel to measure whether our own Facebook and Instagram ads lead to signups and paid plans: it reports page views, signup and checkout steps, and when you start a paid plan our server tells Meta the plan’s price with your email and account id hashed, plus your browser’s Meta cookies, IP address and user agent. Meta uses this data under its own terms. The pixel never runs on the pages our Customers send to their Leads. See our Cookie Policy for the full list of cookies and durations.

Children

The Service is for businesses and is not directed to children. We do not knowingly collect personal information from children under 13 (or the minimum age in your jurisdiction).

International transfers

We and our sub-processors may process information in countries other than yours. Where required, we use appropriate safeguards for such transfers.

Changes to this Policy

We may update this Policy from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, by additional notice.

Contact us

Eytan Shabtay, a sole proprietor operating as Ascended Digitals
hello@ascendeddigitals.com
+1 713 410 1374