Privacy policy

Last updated . Review by .

Draft, lawyer review pending. This page is a template draft that must be reviewed by a lawyer (attorney) before it is relied on. It is not legal advice.

This policy explains how Pretto Digital Placeholder LLC ("Pretto Digital", "we", "us") collects, uses, shares and protects personal information when you visit https://prettodigital.com, contact us, or use our services. It is written for the United States and Canada.

Information we collect

  • Contact details you give us: name, email address, phone number, business name and address.
  • Business information you share so we can do the work: website, business profile and review-site access, brand rules, photos and call or text records for your business.
  • Data from Google services you connect (see "Google user data" below), such as Search Console and Google Analytics 4 reports.
  • Contact details of your customers and leads that you or your phone system pass to us, when you use features such as missed-call text-back or review requests. For that data we act on your behalf as a service provider.
  • Basic technical logs kept by our servers (IP address, browser type, pages requested, time) for security and troubleshooting.

How we use it

  • To provide, plan, carry out and report on the services you ask for.
  • To reply to your questions and send service messages.
  • To keep our systems secure, prevent abuse and meet legal obligations.
  • To improve our own services, using aggregated or de-identified information where we can.

Mobile information and SMS

If you opt in to text messages, we use your mobile phone number only to send the messages you agreed to. Mobile information, phone numbers and SMS opt-in consent are not shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except service providers that deliver the messages for us. See the SMS terms and SMS opt-in.

Google user data and Limited Use

When you connect Google Search Console or Google Analytics 4, we read your reports only to show them to you, to plan and measure the work you hired us to do, and to build your reports. Pretto Digital's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

  • We use Google user data only to provide and improve the user-facing features you asked for.
  • We do not transfer it to others except as needed to provide those features, to comply with law, or as part of a merger or sale with notice to you.
  • We do not use it for serving advertisements, including retargeting or interest-based advertising.
  • We do not let humans read it unless you ask us to (for example for support), it is needed for security or to follow the law, or it is aggregated and used for internal operations.
  • We do not use it to train general-purpose AI models. Where AI helps analyze your reports, see "AI service providers" below.

You can disconnect Google at any time in your Google account permissions, or ask us to disconnect it and delete the data we received.

AI service providers

We use third-party AI providers to draft and analyze. We currently use DeepSeek, and we may add or change providers; the current list is available on request. We send a provider only what a task needs, under terms that do not allow it to use that data to train its models. A person on our team reviews AI output before you see it. See the AI disclosure.

Sharing

We never sell personal information, and we do not share it for cross-context behavioral advertising. We share it only with service providers that help us run our services (hosting, email and text delivery, payment processing, AI processing, error monitoring), under contracts that limit their use of it, with your direction, or when the law requires it or to protect rights and safety. If our business is sold or merged, the information may move to the new owner, which must honor this policy.

Email and marketing messages

We send commercial email only in line with the US CAN-SPAM Act and Canada's Anti-Spam Legislation (CASL): we identify ourselves, include our mailing address, send only with consent where the law requires it (express or implied under CASL), and honor each unsubscribe request within 10 business days, and usually sooner. Every commercial email has a working unsubscribe method. We do not use automated calls or texts for cold outreach.

Speed and error measurement

To keep our site and app fast, a small script of our own (no third party) measures how quickly each page loads and responds on your device, and records script errors. It sends the page address without any query string, the measurements, your device type (phone, tablet or desktop) and the error text with email addresses and long numbers removed. It sets no cookies and stores nothing on your device. We do not keep your IP address: we keep only a keyed hash of it (it cannot be turned back into the address without our secret key), so we can count returning visitors. These records are deleted after 2 years. If your browser sends Do Not Track or Global Privacy Control, the script sends nothing.

Cookies

This site sets no tracking or advertising cookies. See the cookie notice.

Retention and security

We keep personal information only as long as needed for the purposes above or as the law requires, then delete or de-identify it. We protect it with access controls, tenant separation between clients and encryption in transit. No system is perfectly secure, and we will notify you of a breach as the law requires.

Your rights: access, export and deletion

You can ask us to give you a copy of your personal information and your business data in a common, portable format (export), to correct it, or to delete it. We act on verified requests within 30 days (45 days where the law allows an extension). When an account ends, we delete or return client data on request and remove it from active systems within a reasonable period, except what we must keep for legal, tax or security reasons. Residents of some US states, and Canadians under PIPEDA and provincial laws, have further rights, such as to withdraw consent, and we honor them. You may opt out of text messages at any time by replying STOP. To make a request, use the contact details below; we will verify who you are first.

Children

Our services are for businesses and are not directed to children under 13 (or under 16 in Canada where that applies). We do not knowingly collect their information.

Where data is processed

Our providers may process data in the United States and other countries. Data held outside your province or state may be subject to the laws of that place.

Changes

We may update this policy and will change the date above when we do.

Contact

Pretto Digital Placeholder LLC, 100 Placeholder Street, Suite 1, Exampletown, ST 00000. Email hello@pretto-digital.example, phone (555) 555-0142.