Privacy Policy

1. About This Policy

This Privacy Policy describes how GeeJay Enterprises LLC, doing business as “Ashford Local” (“Ashford Local,” “we,” “us,” or “our”), collects, uses, and shares information when you visit the Ashford Local website at https://ashfordlocal.com, any subdomain of ashfordlocal.com (including preview subdomains), or any web property that we operate (collectively, the “Sites”).

If you have questions about this Policy, contact us at hello@ashfordlocal.com or:

2. Information We Collect

2.1 Information You Provide

Contact information. If you fill out a contact form (for example, a quote-request form on a preview site we built for a business) we collect the information you submit: name, phone number, email address, any service description or message, and any file attachments you upload.

Payment information. When you purchase a website from us, our payment processor (Stripe, Inc.) collects your payment card information, billing address, and related details. We do not store your full card number; we store only a transaction reference and last-four digits for customer support purposes.

Account information. When a customer onboards a site with us, we collect additional business details: legal business name, service area, hours of operation, team photos, service descriptions, license numbers, and other information necessary to build and maintain the site.

Communications. If you email or call us, we may retain that correspondence and related metadata as part of our customer support records.

2.2 Information Collected Automatically

Usage data. When you visit our Sites, we automatically collect certain information about your device and browsing behavior, including IP address, browser type, operating system, referring URL, pages visited, and timestamps.

Cookies and tracking technologies. We use cookies and similar technologies for essential functions and privacy-respecting analytics. See Section 5 for details.

Call recordings. If you call our business phone number, your call may be recorded and transcribed for quality and record-keeping purposes. An automated disclosure will play at the start of the call informing you of this. You may request a transcript of any call involving you; email hello@ashfordlocal.com.

2.3 Information from Third Parties

Google Business Profile data. For the purpose of building preview websites for businesses we have not yet contacted, we collect publicly available information from Google Business Profiles, including business name, address, phone number, website URL (if any), reviews, ratings, and photos. This information is collected via third-party services such as Outscraper.

Enrichment services. We use services such as Clay.com to attempt to identify the owner or primary contact at a business for outreach purposes.

3. How We Use Information

We use the information we collect to:

• Provide, maintain, and improve the Sites and our services
• Process payments and manage subscriptions
• Respond to your inquiries, comments, and support requests
• Send transactional communications (welcome emails, billing notices, launch confirmations)
• Send commercial communications (cold outreach emails about our services, as permitted by CAN-SPAM and only until you opt out)
• Understand how visitors interact with our Sites so we can improve them
• Detect, prevent, and respond to fraud, abuse, or security incidents
• Comply with legal obligations

4. How We Share Information

We share information only as described below. We do not sell personal information.

4.1 Service Providers

We share information with third-party service providers who process it on our behalf to deliver our services. These include:

• Vercel Inc. — website hosting and content delivery
• Cloudflare, Inc. — domain registrar, DNS, and content delivery
• Stripe, Inc. — payment processing and subscription management
• Resend, Inc. — transactional email delivery
• Instantly.ai — outbound email campaign management
• Lob, Inc. — physical mail (postcard) delivery
• Anthropic PBC — AI processing for generating website content drafts
• Airtable, Inc. — customer and lead record management
• Plausible Analytics B.V. — privacy-respecting website analytics
• Twilio, Inc. — phone and voice services
• Vapi Labs Inc. — AI voice agent infrastructure

Each of these providers is contractually obligated to process information only as directed by us and to safeguard the information they handle.

4.2 Legal Requirements

We may disclose information if required to do so by law, court order, or valid legal process, or to protect our rights, property, or safety (or those of our customers or others).

4.3 Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, information may be transferred as part of that transaction. We will notify affected customers by email before any such transfer takes effect.

4.4 With Your Consent

We may share information for any other purpose with your explicit consent.

5. Cookies and Analytics

Our Sites use the following cookies and tracking technologies:

Essential cookies. Required for the Sites to function (for example, to maintain your session during checkout). We do not collect a separate consent for essential cookies because they are necessary to deliver the services you request.

Plausible Analytics. We use Plausible to measure aggregated traffic patterns. Plausible does not set cross-site cookies, does not collect personal data, and is privacy-friendly by design. You can learn more at plausible.io/data-policy.

Event tracking. On preview sites and claim pages, we fire anonymous event beacons to Plausible when visitors take actions like clicking the phone number or submitting a form. These events are aggregated and not tied to identifiable individuals.

We do not use Google Analytics, Meta Pixel, or similar third-party cross-site tracking on our Sites.

6. Your Choices and Rights

6.1 Opt-Out of Marketing Email

Every commercial email we send includes a one-click unsubscribe link. Clicking it removes your email address from our outreach list within seconds. We honor opt-out requests immediately and do not sell or share opt-out lists. You may also email hello@ashfordlocal.com to request removal.

6.2 Access and Correction

You may request a copy of the personal information we have about you, or request corrections to that information, by emailing hello@ashfordlocal.com. We will respond within thirty (30) days.

6.3 Deletion

You may request deletion of your personal information by emailing hello@ashfordlocal.com. We will delete the requested information within sixty (60) days, except for records we are required to retain by law (for example, tax records) or records necessary to enforce our agreements or resolve disputes.

6.4 California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) gives you additional rights over your personal information, including the right to know what categories we collect, the right to delete, the right to correct, and the right to opt out of the sharing or sale of personal information. We do not sell personal information. To exercise any CCPA/CPRA right, email hello@ashfordlocal.com.

6.5 European Residents

We currently target US-based customers only. If you are located in the European Economic Area, United Kingdom, or Switzerland and believe we have collected information about you, email hello@ashfordlocal.com and we will work with you to address your rights under the GDPR or equivalent law.

7. Data Retention

We retain personal information only as long as necessary to provide our services and meet our legal and operational obligations:

• Lead records (non-customers): up to 24 months after last engagement, then deleted or anonymized.
• Customer records: for the duration of the customer relationship plus seven (7) years after termination, for tax and legal records.
• Call recordings and transcripts: 180 days after the call.
• Analytics data: aggregated indefinitely; individual-level session data (where it exists) retained for 30 days.
• Email correspondence: for the duration of the business relationship plus three (3) years.

8. Security

We take reasonable administrative, technical, and physical safeguards to protect the information we collect, including encryption of data in transit (TLS/SSL), encryption at rest where our providers support it, least-privilege access controls, and vendor diligence on the service providers listed in Section 4.1. No system is perfectly secure; we will notify affected users and appropriate authorities of any security incident affecting personal information as required by applicable law.

9. Children’s Privacy

Our Sites are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, email hello@ashfordlocal.com and we will promptly delete it.

10. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will update the “Last Updated” date above and, for material changes affecting current customers, provide notice by email at least thirty (30) days before the change takes effect.

11. Contact

For any questions about this Policy, contact: