1. Information We Collect

We collect information you voluntarily provide when you order a report or contact us through our website. This includes:

• First and last name
• Email address
• Business name
• City and state
• Business category / vertical
• Website URL (optional)
• Phone number (if provided)

We also collect standard technical information automatically when you visit our website, including your IP address, browser type, pages visited, and time spent on the site. This data is collected through Google Analytics (GA4) and is used solely to improve our website.

2. How We Use Your Information

We use the information you provide to:

• Generate and deliver your BundleSpy AI visibility report
• Communicate with you about your order and report delivery
• Follow up with relevant information about your report findings
• Send occasional updates about BundleSpy services (you may opt out at any time)
• Improve our services and website experience

We do not use your information for any automated decision-making or profiling.

3. How We Generate Your Report

To create your visibility report, we query third-party services using your business name and location. These include:

• Google Places API — to retrieve your business profile, reviews, photos, and local search rankings
• OpenAI (ChatGPT) — to query how your business appears in AI responses
• Anthropic (Claude) — to query how your business appears in AI responses
• Your website — to check for schema markup and technical SEO signals

These queries use only publicly available information associated with your business name and location.

4. Information Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. We may share limited information only in the following circumstances:

• Service providers: We use Formspree to process form submissions and Square to process payments. These providers have their own privacy policies and handle your data in accordance with their terms.
• Legal requirements: We may disclose information if required by law or in response to valid legal process.
• Business transfer: If BundleSpy is acquired or merged, your information may be transferred as part of that transaction.

5. Data Retention

We retain your contact information and report data for up to 24 months to allow for follow-up communications and service improvements. You may request deletion of your data at any time by contacting us at hello@bundlespy.com.

6. Cookies and Tracking

Our website uses Google Analytics (GA4) to collect anonymous usage data. GA4 sets cookies on your device to track usage patterns including pages visited, time spent on the site, and traffic sources. These cookies do not collect personally identifiable information and are used solely to help us understand how visitors use our website so we can improve it.

The specific cookies set by Google Analytics include _ga (expires 2 years), _ga_WCDFCBJ5M2 (expires 2 years), and _gid (expires 24 hours). These are analytics cookies only — we do not use advertising cookies, retargeting pixels, or any third-party tracking beyond Google Analytics.

You can opt out of Google Analytics tracking at any time by installing the Google Analytics Opt-out Browser Add-on. You can also manage or delete cookies through your browser settings — most browsers allow you to refuse or delete cookies under their privacy or settings menu.

7. Security

We take reasonable steps to protect your information from unauthorized access, disclosure, or loss. Our website uses HTTPS encryption for all data transmission. Payment processing is handled entirely by Square and we do not store any payment card information.

8. Your Rights

You have the right to:

• Request a copy of the information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Opt out of marketing communications at any time

To exercise any of these rights, contact us at hello@bundlespy.com.

9. Children’s Privacy

BundleSpy is a business-to-business service intended for adult business owners and professionals. We do not knowingly collect information from anyone under the age of 18.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last Updated” date at the top of this page. Continued use of our website after any changes constitutes your acceptance of the updated policy.