Privacy Policy

Summary

MarketingScore360™ ("we", "us") provides an AI-assisted marketing diagnostic. This policy explains what information we collect, how it is used, and the choices available to you. It reflects the app's current behavior; it is not legal advice and does not guarantee any specific regulatory outcome.

Information we handle

• Assessment answers. The information you enter in the wizard is processed to generate your MSI Score™ and report.
• Contact details. If you provide a name, business email, phone, or company, we use them to deliver your report, email you the results and, if requested, coordinate a human strategy call.
• Newsletter / Update List. If you separately opt in to our update list, we store that consent. You can unsubscribe from any email we send.
• Account information. Administrators sign in with email/password or Google via our authentication provider.
• Analytics (only with consent). Analytics is off by default and begins only after you accept it. If you accept Analytics, we use PostHog to record pageviews and product-usage events. This data is pseudonymous: it is linked to a randomly generated device identifier, not to your name. We do not send names, email addresses, assessment IDs, report links, or tokens through analytics, and IP storage and location enrichment are disabled, so analytics events do not record your IP address or approximate location. If you withdraw consent, collection stops and analytics storage is cleared from your device.

Your privacy choices

When you first visit the site we show a consent banner. You can accept all, reject nonessential, or manage preferences. You can change your choice at any time via Privacy Choices in the footer. If your browser sends a Global Privacy Control or Do Not Track signal, we treat Analytics as off until you actively opt in.

Newsletter subscription is a separate opt-in. Accepting analytics does not subscribe you to email, and unsubscribing from email does not change your analytics choice.

Storage and cookies

For the full list of cookies and browser storage keys we set, their purpose, and category, see the Cookies & Storage page.

Service providers

• Lovable Cloud: application hosting, database, and authentication.
• PostHog: product analytics (only if Analytics is accepted).
• Cloudflare: content delivery and platform security.
• Email delivery: our hosting provider's transactional email service sends report, reminder, and confirmation emails, and maintains unsubscribe/suppression records.
• Website scanning: when you submit a website address, our servers request publicly served pages from that site (and use a public DNS resolver to look up the domain). The site you name may log that request like any other visit.
• Google Calendar (calendar.app.google): scheduling, only when you click the "Book a Human Strategy Call" link and interact with Google Calendar directly.

These providers act as our service providers/processors: they handle information on our instructions to run the Service, not for their own marketing. We do not currently use a third-party AI model provider to process your assessment answers. Scoring and narrative guidance are produced by our own rules-based, automated logic.

Retention

Assessment submissions are retained for as long as needed to provide your report. Newsletter records are kept until you unsubscribe. In- browser drafts stay on your device until you complete or clear them.

Your privacy rights and how to make a request

Subject to applicable law, you may ask us to: confirm whether we hold information about you and provide access to it; correct inaccurate information; delete information; or explain the categories, sources, and purposes of the information we process. We do not sell personal information for money, and we do not share it for cross-context behavioral advertising. We do disclose information to the service providers listed above so they can host, secure, analyze, and deliver the Service on our behalf, and we may disclose information where the law requires it or to protect legal rights.

How to submit a request. Email rm@heknowsbusiness.com with the subject line "Privacy Request" and tell us what you are asking for. Use the same email address you used on the site where possible, so we can locate your records. We may ask for limited additional information to verify that the request is genuinely yours before we act on it; that information is used only for verification. We aim to acknowledge requests promptly and will respond within the timeframe required by applicable law. We may need additional information to verify your identity or understand your request, and an extension, legal exception, or retention obligation may apply. You may use an authorized agent where the law allows, with proof of authorization. We will not discriminate against you for exercising these rights.

Limits on deletion. We honor deletion requests where we are able, but we cannot always delete everything. We may retain records that we are required or permitted to keep, for example: consent and unsubscribe records, security and abuse-prevention logs, email suppression entries (which exist specifically to keep us from contacting you again), transaction and accounting records, and information needed to establish, exercise, or defend legal claims. Where we cannot delete, we will explain why and restrict further use where practical. Backups and logs may retain copies for a limited period until they age out on their normal cycle.

Privacy requests are separate from booking a call. Please do not use the scheduling link to submit a privacy request. It is only for consultations about your marketing report and is not monitored as a privacy channel. To stop marketing emails, you can also use the unsubscribe link in any email we send; unsubscribing is not the same as a deletion request.

Contact

For privacy questions and rights requests, email rm@heknowsbusiness.com. For a consultation about your report or MSI Score™, use the scheduling link. Our Terms of Service govern use of the site and the diagnostic.