1. Personal Information We Collect

"Personal Information" means data that identifies you directly (for example, your name) or indirectly (for example, data about how you use our services). We and our service providers may collect the following categories:

Basic contact information. Name, email address, phone number, business name, and mailing address.
Financial information. Credit or debit card numbers, billing addresses, or bank account details, when you purchase services or sign engagement contracts. Card data is processed by our payment processors and is not stored on our servers.
Internet and device activity. IP address, browser type, operating system, referring URLs, pages viewed, timestamps, and device identifiers.
Audio, electronic, and visual information. Photographs, videos, recorded calls (with notice and consent where required), and the content of messages you send us.
Inputs to our AI demos and tools. Text, business descriptions, KPI numbers, and other data you submit to experiences like the AI Opportunity Score, AI Chat Agent, Lead Engine, Hire Copilot, Client Intake Flow, Social Content Engine, and Dashboard in 60 Seconds.
Inferences. Preferences, characteristics, and behavior derived from the above categories.
Employment-related information. For job applicants and employees: resume content, work history, education, demographic information, and references.
Other information you choose to provide. Anything else you submit through forms, email, calls, or working sessions.

2. How We Collect Personal Information

We collect Personal Information:

Directly from you when you fill out a form, book a strategy call, send us an email, call our phone number, take one of our AI quizzes, or interact with our chat widget.
Automatically through your use of our website, including via cookies, server logs, and analytics tools.
From our service providers and partners including Google (Analytics), GoHighLevel (CRM, chat, booking, forms), Anthropic (the AI provider that powers our demos), and Vercel (our hosting provider).
From third-party data sources as permitted by law (for example, business directories, public databases, or data enrichment services).

3. How We Use Personal Information

We use Personal Information for the following purposes:

To provide, maintain, and improve our website, AI demos, and services.
To respond to your inquiries, schedule strategy calls, and deliver client engagements.
To send transactional and account-related communications (engagement updates, scheduling confirmations, billing notices).
To send marketing communications about our services, content, and events. You can unsubscribe at any time using the link in any marketing email or by contacting us directly.
To analyze how our website and services are used so we can make them better.
To advertise on third-party platforms (including Meta, Google, and LinkedIn) using audience targeting features that may use your contact information or website-activity data.
For internal accounting, research, recordkeeping, fraud prevention, and legal compliance.

4. AI and Automation Services

CAL is an AI-first agency. Our website hosts live AI demos and our client services frequently include AI agents, automation workflows, and AI-assisted communication. Here's what that means for your data:

Inputs to our public AI demos (such as text you type into the AI Chat Agent or numbers you enter into the AI Opportunity Score) are sent to Anthropic, our AI provider, under their applicable data handling terms. We do not knowingly ask for or accept Protected Health Information (PHI) or regulated personal data through public demos. The information you submit to a public demo is treated as informational and may be used in aggregate to improve the demo experience.
Client engagements that involve AI are architected with appropriate compliance posture. For workflows involving sensitive or regulated data (for example, HIPAA-covered health information, attorney-client information, or regulated financial data), we work with the client to determine whether cloud AI with appropriate Business Associate Agreements (BAAs) or local LLM installations on client hardware are the right fit.
Calls and meetings may be recorded, transcribed, and processed by AI tools where notice and consent have been given.

5. How We Share Personal Information

We do not sell your Personal Information. We may share it with the following categories of recipients for the business purposes described above:

Service providers and contractors who help us run our business, including hosting (Vercel), analytics (Google), CRM and communication (GoHighLevel), AI services (Anthropic, OpenAI, and others as applicable), email delivery, payment processing, and accounting providers.
Marketing and advertising partners for targeted advertising on platforms such as Meta, Google, and LinkedIn. You may have rights to opt out of certain types of advertising. See the "Your Privacy Rights" section below.
Professional advisors including legal, tax, and accounting professionals.
Regulators, courts, and law enforcement where required to comply with applicable law, valid legal process, or to protect the rights, property, or safety of CAL, our clients, or others.
Business successors. If CAL is involved in a merger, acquisition, financing, or asset sale, Personal Information may be transferred as part of that transaction.

6. Cookies and Similar Technologies

We use cookies and similar tracking technologies on our website for the following purposes:

Strictly necessary cookies that enable core functionality (page navigation, security, and access to protected areas).
Analytics cookies via Google Analytics, which help us understand how visitors use our website.
Functional cookies set by GoHighLevel for our chat widget, booking widget, and embedded forms.
Advertising and remarketing cookies that help us measure and optimize our marketing on platforms including Meta and Google.

You can control cookies through your browser settings. Most browsers let you block or delete cookies, though doing so may affect website functionality. You may also opt out of certain advertising-related tracking through industry programs such as the Network Advertising Initiative and the Digital Advertising Alliance.

7. Data Security

We take the security of your Personal Information seriously. Our website uses TLS/SSL encryption for data in transit. We use access controls, authentication, and audit logging on systems that store Personal Information. No method of transmission over the internet or storage system is 100% secure, so we cannot guarantee absolute security. If we become aware of a security incident affecting your Personal Information, we will notify you in accordance with applicable law.

8. Data Retention

We retain Personal Information for as long as necessary to provide the services you requested, comply with our legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary by category. You may request deletion of your Personal Information as described in the next section.

9. Your Privacy Rights

Depending on where you live, you may have the following rights regarding your Personal Information. Texas residents have rights under the Texas Data Privacy and Security Act, California residents under the California Consumer Privacy Act and California Privacy Rights Act, and residents of certain other states under their own state privacy laws:

Right to know. Request information about the categories of Personal Information we collect, use, and share about you.
Right to access. Request a copy of the specific pieces of Personal Information we have about you.
Right to correct. Request that we correct inaccurate Personal Information.
Right to delete. Request that we delete Personal Information we have collected from you, subject to certain exceptions required by law.
Right to opt out of the sale or sharing of Personal Information for cross-context behavioral advertising. We do not sell Personal Information.
Right to limit use of sensitive Personal Information where applicable.
Right to non-discrimination for exercising any of these rights.

To exercise any of these rights, contact us at info@createalegacy.co. We may need to verify your identity before fulfilling your request. You may also designate an authorized agent to make a request on your behalf, subject to verification.

10. Children's Privacy

Our website and services are intended for adults and businesses, not children. We do not knowingly collect Personal Information from children under 13. If you believe a child has provided us with Personal Information, please contact us at info@createalegacy.co and we will delete it.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policy of any site you visit.

12. International Data Transfers

CAL is based in the United States. If you access our services from outside the United States, your Personal Information may be transferred to, stored in, and processed in the United States, which may have different data protection laws than your country of residence.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will change the "Last updated" date at the top of this page and, where appropriate, provide additional notice (for example, by email or a prominent notice on our website). Your continued use of our website or services after the updated policy takes effect constitutes your acceptance of the changes.

14. How to Contact Us

For privacy questions, complaints, or to exercise your rights:

Email: info@createalegacy.co
Phone: (978) 953-4229
Mail: Create A Legacy, Plano, TX (full mailing address available on request)

Privacy Policy