Privacy Policy

Effective Date: September 25, 2026

1. Introduction

This Privacy Policy describes how Aspired Websites LLC ("we," "us," or "our") collects, uses, and shares information when you visit aspiredwebsites.com, fill out our contact or audit forms, or engage our services. By using our website or services, you agree to the practices described here.

2. Information We Collect

From you, directly

• Contact and call-back requests: your name, phone number, email address, and the message or best time to call that you send us.
• Chat widget conversations: if you start a chat on our website, the name, phone number, email address, and messages you provide are collected by our chat platform, LeadConnector (GoHighLevel), and added to our CRM so we can follow up with you.
• Website audit data: the website URL you submit and the scores returned. The URL is sent to Google PageSpeed Insights to run the checks and to Anthropic to write the plain-English summary. We keep it with your results for your visit only, unless you ask us to email you the full report; then we keep the URL, scores and your email address so we can send it.
• Client portal information: your login credentials, project details, business information you supply during intake, files you upload, and messages you send through the portal.
• Payment information: processed by Stripe. We do not store credit card numbers on our servers.

Automatically

• Standard web logs: IP address, browser type and version, the pages you visit on our site, the time you spent on each page, and the referring URL.
• Session replay on this website: we record how visitors move through aspiredwebsites.com (page views, scrolling, clicks, and the page layout) to improve the site. Anything you type into a form is masked in your browser before it is sent and is never recorded. Recordings are kept for 30 days and are not shared outside Aspired Websites. We never record the login, password, client portal, onboarding or payment pages. If your browser sends the Global Privacy Control signal, we don’t record your session at all.
• Session and heatmap data on client sites: when the Aspired Websites conversion tracker is installed on a client site, it collects anonymized interaction data (clicks, scroll depth, form submissions) to help measure performance, and session replay only where the client has turned it on, with the same input masking and Global Privacy Control rules. No personally identifying information is captured.

Review requests sent on behalf of clients

When a client uses automated review generation, the contact details of their customers (name, and phone number or email address) and the fact that a job was completed are used only to send that customer a review request. They are never sold or used for marketing.

3. How We Use Your Information

• To respond to your contact form inquiries.
• To provide the web design, hosting, and maintenance services you've engaged us for.
• To send you project updates, monthly reports, and other operational communications.
• To send you operational text messages if you provide your phone number — for example, appointment reminders, project status updates, and replies to a chat conversation you started with us. These are not marketing texts and do not require separate marketing opt-in. Message and data rates may apply; reply STOP at any time to stop receiving texts, or HELP for help. See our Terms of Service for details.
• To send you marketing emails about our services. You can unsubscribe at any time using the link in any marketing email.
• To improve our services based on aggregate usage patterns.
• To process payments and bill recurring subscriptions through Stripe.

4. Information Sharing

We do not sell your personal information to anyone. We share data only with the third-party services we use to run our business:

• Stripe: payment processing for invoices and subscriptions.
• SendGrid: transactional and marketing email delivery.
• Twilio: delivery of the operational text messages described above.
• LeadConnector (GoHighLevel): our chat widget and CRM platform, used to run the live chat on our site, process contact-form submissions, and follow up with you by text or email.
• DigitalOcean: website hosting and server infrastructure.
• Anthropic: the plain-English summary on website audit results, and our internal tools (content suggestions, security analysis, support drafting).
• Google PageSpeed Insights: the website URL you submit to the audit tool, to run its checks.
• Google: analytics (Google Analytics) and search visibility data (Google Search Console).

We may also disclose your information when required by law, to enforce our Terms of Service, or to protect the rights, property, or safety of our users.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

5. Cookies

We use cookies for:

• Session management: to keep you signed in to the client portal and to remember your form-filling progress.
• Analytics: Google Analytics cookies, to understand how visitors use our site so we can improve it. Google Analytics does not load if your browser sends the Global Privacy Control signal.

Our own visitor tracker and session replay set no cookies; they use a random identifier that lasts only for the page view.

We do not use third-party advertising cookies or cross-site tracking. You can disable cookies in your browser, but some site features (including the client portal) will not function without them.

6. Data Retention

• Contact form data: retained for 2 years from the date of submission, then deleted.
• Client project data: retained for 7 years from the date of project completion, for business and tax records.
• Email marketing list: retained until you unsubscribe, at which point your address is permanently suppressed.

7. Your Rights

You may request:

• Access to the personal information we hold about you.
• Correction of any inaccurate or incomplete data.
• Deletion of your data (subject to legal retention requirements).

To exercise any of these rights, email zacherylong@aspiredwebsites.com. We respond within 30 days.

8. Security

We use industry-standard security measures including TLS/SSL encryption for all traffic between your browser and our servers, AES-256 encryption for sensitive credentials stored in our vault, and DigitalOcean's hardened infrastructure with automated security patching. Our owner holds a CISSP certification and a Masters in Cybersecurity; security is a first-class concern in everything we build.

No system is perfectly secure, however. We cannot guarantee absolute security and will notify affected users promptly in the event of a breach affecting their data.

9. Children's Privacy

Our services are intended for businesses and adults. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our service offerings, or the law. When we make material changes, we will notify active clients by email at least 30 days before the changes take effect. The "Effective Date" at the top of this policy will always reflect the date of the most recent update.

11. Contact Us