Privacy policy

1. Information we handle

• Account and access information: your email address, available sign-in profile information, invitations, client memberships, staff roles, and authentication records. Sign-in may use a secure email link or an enabled identity provider such as Google or Microsoft.
• Connected reporting: client business details and source mappings; aggregate website visitors, visits, pages, referral sources, geographic breakdowns and configured goals; Google Business Profile performance, available reviews, posts and search queries; keyword rankings; and enabled advertising metrics.
• Lead and call details where enabled: provider-returned Local Services Ads lead names, telephone numbers, messages, lead status, charge/credit information, notes, and call timing or duration. These are personal data and are restricted to authorized client and staff access.
• Workspace content: questions, AI answers and supporting evidence, feedback, support messages, draft client updates, client-safe context, private team notes, approvals and delivery records.
• Technical information: operational and security logs may contain IP addresses, browser/device information and request details. If you opt into notifications, we store the push subscription needed to deliver them.

Not every client has every source or feature. We receive only the information returned by configured, authorized integrations; the application does not have unrestricted access to every connected provider’s data.

2. Why we use information

We use this information to authenticate authorized users, display reports, validate source connections and freshness, compare performance, identify reporting signals, prepare client communications, answer supported reporting questions, provide support, deliver requested notifications, and maintain the service’s security and reliability.

Client reports require authorized access. Staff may review and compare accounts they are authorized to manage. Private team notes are kept separate from client-facing update generation and client outputs. Publishing or sending a client communication requires an explicit team action; AI does not independently change advertising campaigns, budgets, or business profiles.

3. Google information and reporting access

Depending on the connection, Google information may be received directly through authorized APIs or through reporting providers and Google BigQuery warehouses. This includes enabled Google Business Profile, Google Ads and Local Services Ads reporting. Google sign-in, when enabled, is separate from granting reporting access to a business or advertising account.

We use connected Google information for the reporting, analysis and client-service purposes described here. Reporting connectors are read-only. Permitted account data may be processed into reporting snapshots, evidence, signals and reviewed draft updates.

Local Services Ads details are shown only to authorized users. When Google returns an available recording link, authorized playback takes place through Google’s service. The current reporting connector does not download or store recording audio. Raw caller contact records, messages and recording links are not automatically supplied to the ordinary Pulse AI or brief-generation tools.

Inspired Pulse’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements, where applicable. We do not sell Google user data or use it for personalized advertising.

4. Optional AI assistance

Enabled AI features use OpenAI’s API to process questions and the authorized reporting evidence relevant to a supported request. Internal team analysis may compare authorized client accounts. Client-facing requests are scoped to that client. Update generation separates client-safe information from private team context; private context is used only for internal meeting notes, not the client-facing generator.

Our API requests set store: false. This is not a guarantee of zero provider retention: provider security, abuse monitoring, legal requirements and applicable service terms may still apply. AI conversations and outputs are also saved in our own application as described below. Please do not enter passwords, payment card information or unnecessary sensitive personal information into questions or context fields.

The client-facing Ask Pulse setting controls feature availability; it is not a blanket opt-out from every internal agency AI workflow. To discuss an AI-processing restriction for your account, contact Inspired so we can confirm and arrange an appropriate setup. Core report pages do not require the Ask Pulse interface.

AI outputs can be incomplete or incorrect. Source coverage, dates and supporting evidence help users check results; important client communications remain subject to human review.

5. Service providers and sharing

We use providers to operate the application, including Vercel for hosting, Supabase for database and authentication, Google for connected services and warehouses, OpenAI for enabled AI requests, and email delivery services including Resend for supported messages. Configured reporting sources may also include Plausible Analytics, Keyword.com, Jepto and Meta. These providers receive information needed for the relevant service.

Authorized client users see their own reporting workspace; authorized agency staff may access client reporting and internal workflows. Client updates are shared with selected recipients when an authorized team member chooses to send or share them. Downloaded reports, copied answers and files shared through your device are then subject to your choices and the receiving service’s practices.

Some client tabs include third-party widgets such as Elfsight or YouTube. Opening these embeds can make requests to those providers, which may apply their own cookies and privacy policies. The public homepage uses approved static screenshots, not a public connection to client records or a live AI demonstration.

We may disclose information when required by law, to protect rights or security, or as part of a business transfer subject to applicable confidentiality and privacy obligations. Providers may process information in the United States or other countries.

6. Cookies, preferences and app access

Authentication uses essential session cookies. Browser storage may remember your display preference and current conversation identifiers. Adding Pulse to your Home Screen installs an app-style shortcut; the service worker is not designed to cache private reports or AI responses for offline browsing. Browser notifications require your permission and can be disabled through browser or device settings.

7. Storage, retention and security

We store account configuration, source validation and reporting snapshots, workflow records, client updates and related service information for as long as needed to provide the service, maintain appropriate business records, and meet security or legal obligations.

AI conversations have a configured 90-day access window, with a scheduled cleanup process for expired conversation content. Other records, such as generated brief versions, approval/delivery history, usage and audit records, have separate retention needs. Backup copies and provider records may remain longer. The 90-day conversation window is not a promise that all application data is deleted after 90 days.

We use HTTPS, authenticated access, server-side authorization and database access controls to protect private workspaces. No service can guarantee absolute security. Contact us promptly if you believe your invitation, account or report has been accessed without authorization.

8. Your choices and requests

Email support@inspiredmarketing.design to request access, correction, export or deletion of information associated with your account, or to discuss source disconnection and AI-processing restrictions. We may need to verify your identity and authority over the client account. Some information may need to be retained for legal, security or recordkeeping purposes.

You can revoke a Google OAuth connection through your Google Account’s third-party connections. Business and advertising account access can also be removed through the relevant Google account access settings. Disconnecting a source stops authorized future collection after the connection is removed; it does not automatically erase existing reports, draft communications or provider records. Contact us separately for deletion requests.

9. Children and policy updates

This business reporting service is not directed to children under 13. We may update this policy as the service or its data practices change. The effective date above identifies the latest version; material changes will be communicated as appropriate.

10. Contact Inspired

INSPIRED MARKETING & DESIGN, LLC
support@inspiredmarketing.design
480-744-2125
inspiredmarketing.design