Privacy Policy
Last updated: April 6, 2026
1. Information We Collect
Contact form submissions: When you fill out our contact form, we collect your name, email address, phone number, business name, website URL, service interest, budget range, and how you found us.
Site audit data: When you run a free website scan or purchase a full audit, we collect the domain you submit for analysis.
Chatbot conversations: If you interact with our chatbot and provide your name and email, that information is stored to follow up with you.
Analytics data: With your consent, we collect anonymized usage data such as pages visited, time on site, and device type through Google Analytics 4. No analytics cookies are loaded until you accept our cookie banner.
2. How We Use Your Information
- To respond to your inquiries and provide requested services
- To process payments for site audits via Stripe
- To send confirmation emails and audit reports
- To improve our website and services based on aggregated analytics
- To manage client relationships in our CRM
3. Third-Party Services
We share data with the following services to operate our business:
- Google Analytics 4 - anonymized website analytics (only with your consent)
- HubSpot - customer relationship management (stores contact form data)
- Resend - transactional email delivery (sends confirmation emails and reports)
- Stripe - payment processing (handles $97 audit payments securely)
- Vercel - website hosting and first-party analytics
Each service has its own privacy policy and data handling practices. We do not sell your data to any third party.
4. Cookies
We use a cookie consent banner. Analytics cookies (Google Analytics) are only loaded after you click "Accept." If you decline, no analytics cookies are set.
Essential storage: We use localStorage to remember your cookie consent preference. This is not a cookie and does not track you across sites.
Vercel Analytics:Vercel's first-party analytics is privacy-focused and does not use cookies. It collects anonymized page view data.
5. Your Rights
Under GDPR (EU residents) and CCPA (California residents), you have the right to:
- Access - request a copy of the personal data we hold about you
- Deletion - request that we delete your personal data
- Correction - request that we correct inaccurate data
- Opt-out - decline analytics cookies via our consent banner, or withdraw consent at any time by clearing your browser's localStorage
- Portability - request your data in a machine-readable format
- Do Not Sell - we do not sell personal data. No action is needed.
6. Data Retention
Contact form submissions and CRM records are retained for as long as the business relationship is active, plus 2 years. Analytics data is retained according to Google Analytics default settings (14 months). You may request deletion at any time.
7. Data Security
We use HTTPS encryption, security headers (CSP, HSTS, X-Frame-Options), and secure third-party integrations to protect your data. Payment data is handled exclusively by Stripe and never touches our servers.
8. Contact
For any privacy-related requests or questions, contact us at:
Robert Callan
By Callan
Chicago, Illinois
robert@bycallan.com
9. Changes to This Policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated date. Continued use of the site after changes constitutes acceptance of the updated policy.