>rhodywebsites
powered by Own The Box Marketing LLC
401-227-5020
DRAFT — not legal advice. Section 4 must be checked against Google’s current API Services User Data Policy wording before OAuth submission. Remove this banner before launch.
Legal

Privacy Policy

Last updated: [DATE]

1. Who we’re

Rhody Websites is a line of business of Own The Box Marketing LLC, a Rhode Island limited liability company. This policy explains what information we collect, why, and what we do with it.

We serve two groups: visitors to rhodywebsites.com, and clients whose websites and Google Business Profiles we manage.

2. Information we collect

From website visitors
—Information you submit in forms: name, business name, email, phone, and anything you write in a message field
—Analytics data: pages viewed, time on page, referring source, approximate location derived from IP address, device and browser type
—Cookies as described in Section 7
From clients
—Business contact and billing information
—Business details needed to perform the services: hours, categories, service areas, licensing
—Google account authorization (see Section 4)
—Customer contact information you provide for review requests
—Communications between us

We don’t knowingly collect information from anyone under 13.

3. How we use information

—To respond to inquiries and provide the services you purchase
—To manage your Google Business Profile, website, and reviews
—To send review requests to your customers on your behalf
—To bill you and maintain business records
—To improve our website and services
—To send you service communications and, where you’ve opted in, occasional marketing email
We don’t sell your personal information. We don’t sell or share your customers’ information.

4. Google user data

When you authorize us to manage your Google Business Profile, we access Google user data through Google’s Business Profile APIs.

Scope requested
https://www.googleapis.com/auth/business.manage openid · email · profile
What we access

Your Google Business Profile listing information, reviews and review replies, posts, photos, and profile performance metrics.

What we do with it

Solely to provide the services you purchased — updating your listing, publishing posts and photos you approve, retrieving reviews, submitting review replies you approve, and reporting performance back to you.

Limited use
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
—We use Google user data only to provide or improve the user-facing features described above
—We don’t transfer Google user data to third parties except as necessary to provide these features, to comply with applicable law, or as part of a merger or acquisition with notice to you
—We don’t use Google user data for advertising purposes
—We don’t allow humans to read Google user data except with your explicit consent, to comply with applicable law, for security purposes, or where the data is aggregated and anonymized
Storage and security

Your Google authorization credentials are encrypted at rest using per-tenant encryption and stored on our infrastructure. They’re never logged, displayed, or shared.

Revoking access

You may revoke our access at any time through your Google Account permissions page, or by contacting us. Revocation stops all Google-connected services immediately.

5. How we share information

We share information only with service providers who help us operate:

Google
Business Profile management, analytics
Cloudflare
Hosting, DNS, security
Supabase
Application database
Stripe
Payment processing
Twilio
SMS delivery
Brevo
Email delivery
DataForSEO
Keyword and ranking data

Each is bound by its own terms and processes data only as needed to provide its service. We may also disclose information where required by law.

6. Data retention and security

We keep client data for the duration of your service and for seven (7) years afterward for tax and business records, unless you request earlier deletion. Visitor form submissions are kept for two (2) years.

Security measures include encryption in transit and at rest, access controls, and encrypted credential storage. No system is perfectly secure, and we can’t guarantee absolute security.

7. Cookies and analytics

We use Google Analytics to understand how the site is used. You can opt out using Google’s browser add-on, or by declining analytics cookies in our cookie notice. Essential cookies required for the site to function can’t be disabled.

8. Your rights

You may request access to the information we hold about you, correction of inaccurate information, deletion of your information, a copy of your data in a portable format, or that we stop sending marketing communications.

Email us at the address below. We respond within thirty (30) days.

Residents of certain states and countries have additional rights under laws including the CCPA/CPRA and GDPR. We honor those rights regardless of where you live.

9. Changes

We may update this policy. Material changes will be posted here with an updated date and, for clients, communicated by email.

10. Contact

Questions about this policy, or requests under Section 8, go to the contact below.

Own The Box Marketing LLC
Rhode Island