Privacy

Who we are. Imprynt is a trade name of Imprynt LLC, 340 SE 3rd St, Miami, FL 33131. We serve Miami and South Florida. Reach us at 727-732-2204 or kevin@mail.imprynt.dev.

What this covers. This website (imprynt.dev) and, for clients, the Imprynt portal (app.imprynt.dev).

What we collect on this site. If you fill out a form, we get what you typed: your name, business, email address, phone number, your current website if you share it, and what you described. If you call or text, we get your phone number and the message. Visitors don’t create accounts here.

If you become a client. Your portal login is your email address (no passwords — we email you a sign-in code). The portal shows the business data we handle for you: leads, messages, bookings, reviews, and — where the AI answering service is enabled — call recordings and transcripts. Calls answered by an AI assistant may be recorded and transcribed so you can review them; those recordings are visible only in your own portal.

If you purchase a plan. Payments are processed by Stripe; we never see or store your full card number. After checkout you complete a build form — business details, content, and any photos or files you upload. Uploads are stored in a private bucket (Supabase) accessible only to us, used solely to build and run your services, and deleted on request. If your plan includes an analytics login, we create an account for you (email-based sign-in) and show you traffic data for your own site — visitors, pages, and referrers — collected by privacy-friendly, cookieless analytics (Vercel).

Customer lists you upload. On plans with review recapture or a CRM, you may upload your own customer contacts. We process those strictly as your service provider: they are used only to run your campaigns, are never sold or used to market our services, and are deleted when you ask or when your plan ends. You are responsible for confirming your customers agreed to hear from your business, and every message we send on your behalf carries an opt-out.

AI processing. Some features use AI (Anthropic’s Claude) to do their job — summarizing conversations, auditing a Google Business Profile, drafting replies you approve, and answering questions in your portal. Your data is sent to the AI service to produce those results and is not used by us to build anything for anyone else.

Google Business Profile — how we get access. If you buy our Google Business Profile service, you give us access one of two ways: you add our management account as a manager of your profile, or you authorize our app (it appears as Imprynt Portal on Google’s sign-in screen). Today it is normally the first. That has one practical consequence worth knowing: with manager access the permission sits on our Google account rather than yours, so you won’t find Imprynt listed on your own third-party-access page — you remove us from the managers list on your profile instead. Separately, and whether or not you’ve granted either, we look up your profile’s public listing through Google’s Places API using our own key. That public lookup is where the rating, review count and review text in your portal come from today.

What we read. Google offers a single permission for this kind of service and it is broad — technically it allows full management of a profile, including changing and deleting content. Google doesn’t offer a narrower one, so what limits us is our own policy and your approval, not the permission. In practice we read your business information (name, categories, hours, services, description, photos and posts), your reviews, and your rating and review count over time. Reviews carry the reviewer’s public display name and photo exactly as Google publishes them; we show those to you and include review text in your monthly audit, and we don’t build profiles of reviewers or use their details for anything else.

Changes we make to your profile. This service changes your profile — it doesn’t only read it. Today our staff make those changes by hand using manager access: editing business information, uploading photos, publishing posts, and replying to reviews in your business’s name. As we automate, the app will make the same changes directly through Google’s API. Either way the changes are the ones in the action plan we show you, and every one of them is listed in your portal.

What we use it for. We use your profile data to audit and improve your own profile and to report back to you. Concretely: our AI provider (Anthropic) receives your profile content to write your monthly audit, and receives your rating, review count and recent review text again whenever you ask your portal assistant about your reviews; we store those audits and rating snapshots so your portal can chart them over time; and we email you a summary. We do not use Google user data to develop, train or improve generalized or non-personalized AI or machine-learning models — ours or anyone else’s. Anthropic processes this data as our provider under contract and does not use it to train its models.

Who reads it. People do read this data. Our staff — currently one — has manager-level access to your profile and both reads and changes it, but only to do the work you hired us for, and every change traces back to an action plan we’ve shown you. We rely on your agreement to that work, given when you engage us and again when you grant access. We’d also access it where necessary for security or to comply with the law.

How long we keep it, and disconnecting. We keep your audits and rating snapshots while you’re a client and for 12 months afterwards, so your history is intact if you come back — ask us and we’ll delete them sooner. You can end our access at any time by removing us from the managers on your profile, by revoking the app at myaccount.google.com/permissions, or by telling us. When access ends we stop collecting anything new and delete the stored authorization credential within 30 days. Ending access doesn’t by itself erase what we already collected — tell us to delete it and we will.

Google’s Limited Use rules. Imprynt Portal’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In plain terms: we don’t sell this data, we don’t use it for advertising or ad targeting, we don’t use it to train generalized AI models, and we don’t transfer it to anyone except the providers that make the service run (listed below), when you tell us to, or when the law requires it.

Analytics and cookies. The site uses Vercel Analytics to count visits and see which parts of the page people use — it’s cookieless and doesn’t identify you personally. The embedded booking calendar and contact forms are served by LeadConnector, and like most embeds they may set their own functional cookies when the page loads. If we run ads, an ad pixel (Meta) may set a cookie so we can tell which ads actually work. You can block cookies and browse this site fine; the one cookie you genuinely need is the portal’s login cookie — clients can’t sign in to app.imprynt.dev without it.

Text messages (SMS). We only text people who have ticked a box asking us to. Giving us your phone number is never enough on its own — on every form that collects a number, SMS consent is a separate checkbox that starts unticked, and it is never required to submit the form.

We ask for two kinds of permission, separately. Service messages are tied to something you started: a reply to your question, a quote or mockup you asked for, and confirmations and reminders for a call you booked. Marketing messages are follow-ups about our website and automation services, and that consent is never a condition of buying anything. You can give one, both, or neither — either way we can still reach you by phone or email.

Consent boxes appear on the forms on this site, on our chat widget, and on our booking form. You can also start the conversation yourself by texting or calling 727-732-2204, or by asking us during a call to text you — in which case we record that you asked and when. Whenever you tick a consent box we store what it said, the page you were on, and the moment you agreed. We never text numbers we bought, scraped, or were given by someone else. Message frequency varies with the conversation. Message and data rates may apply. Reply STOP to any message to opt out, or HELP for help — STOP takes effect immediately and we keep a record of it so it isn’t undone by accident.

We do not share your mobile information. No mobile information is sold, rented, or shared with third parties or affiliates for marketing or promotional purposes. Text-messaging originator opt-in data and consent are never shared with anyone. The only companies that touch your number are the ones that have to for the message to reach you — our messaging provider and our CRM, listed below — and they may not use it for their own marketing.

The services that make it run. Vercel (hosting and analytics), Supabase (the portal’s database), Stripe (payments), Resend (email delivery), LeadConnector (texting, calling, and CRM infrastructure), Anthropic (AI processing), and Google (Business Profile and reviews data). Each gets only what it needs to do its job.

What we don’t do. We don’t sell your information, and we don’t share it beyond the services above. Client business data from builds is covered by the client agreement — your data is yours.

How we protect it. Every page and form on this site is served over HTTPS, so what you type is encrypted in transit. Contact details, message history and consent records live in our CRM and database, both of which encrypt data at rest and are managed by their providers with current security patching. Access controls limit each account to its own records, so one client cannot read another’s.

Imprynt is a one-person company, so the number of people who can reach your data is exactly one, and that access is protected by passwordless sign-in — a single-use link or a six-digit code sent at the moment of login, with no stored password to be guessed or leaked. Keys and access tokens for the services we use are held in an encrypted secrets vault, never in our source code. We keep an access log so any look-up of your record is attributable and reviewable.

No system is perfectly secure, and we won’t claim otherwise. If a breach ever affected your personal information we would tell you and, where the law requires it, the relevant authorities.

Questions or deletions. Call or text 727-732-2204, or email kevin@mail.imprynt.dev. We’ll delete what you ask us to, with two exceptions we can’t make: your text-message consent record and any STOP you’ve sent — we keep those precisely so an opt-out can’t be undone by accident — and the payment and tax records our processor and the law require us to keep.