PrivacyPolicy.

At Reporting For Doody (“Company,” “we,” “us”) we take your privacy seriously. This policy explains what we collect, why we collect it, who we share it with, and what control you have over it. If anything here is unclear, contact us and we'll explain in plain English.

1. Information We Collect

1.1 Information You Provide

• Quote & contact details - name, email, phone, service address, dog count, yard details, referral source, and anything you write in special requests.
• Account information - username, hashed password, and customer profile data when you sign up for the client portal.
• Payment information - handled securely by our payment processor (Stax). We never store your full card number on our servers; only a tokenized reference and the last four digits.
• Communications - email replies, SMS responses, and service feedback you send us.
• Newsletter / marketing opt-ins - your email and (optionally) name when you subscribe via the website footer or download a guide.

1.2 Information Collected Automatically

• Analytics - anonymized page views, traffic source, device type, and approximate location collected by Google Analytics 4 and Vercel Analytics. We use IP anonymization on GA4.
• Performance data - Core Web Vitals (LCP, CLS, INP) collected by Vercel Speed Insights for performance monitoring only.
• Advertising & conversion measurement - our public marketing and quote pages load the Meta (Facebook) Pixel and Google Ads conversion tracking. These record page views and quote requests so we can measure which ads work and show relevant ads to people who visited us. They are not loaded on the client portal, employee wiki, or admin areas.
• Ad click identifiers - if you arrive from an ad, we store that click's identifier (Google gclid/gbraid/wbraid, Meta fbclid, or Microsoft msclkid) in a first-party cookie for up to 90 days, so that if you later request a quote we can credit it to the right campaign.
• Hashed conversion matching - when you submit a quote, we may send Meta an irreversibly hashed (SHA-256) copy of your email address and phone number so it can match the conversion to your ad click. Meta receives only the hash, never the plain email or phone number.
• Bot protection signals - Cloudflare Turnstile uses browser characteristics to verify you're human. It does not track you across sites.
• Cookies / local storage - small technical cookies for session management, analytics, and (if applicable) Stax payment tokenization.

1.3 What We Do NOT Collect

• We do not store full credit card numbers.
• We do not sell or rent your personal data to anyone, ever.
• We do not run advertising or remarketing trackers inside the client portal, employee wiki, or admin areas - only on the public marketing and quote pages.
• We do not share customer data across non-RFD businesses.

2. How We Use Your Information

• To deliver the service you requested (quoting, scheduling, pickups, billing).
• To send you transactional notifications (quote delivered, service completed, payment receipts) via email or SMS.
• To send marketing communications you've opted into (newsletter, guides, special offers).
• To improve the website, fix bugs, and understand which content is helpful.
• To comply with legal obligations (tax records, insurance, court orders if applicable).

3. Third-Party Services We Use

We rely on a small set of vetted third-party services. Each one signs a data processing agreement with us where applicable, and we limit shared data to what they need to do their job.

• GoHighLevel - CRM and marketing automation. Stores your contact info and message history so we can follow up on quotes and send opted-in marketing.
• Resend - transactional email delivery. Sends quotes, confirmations, and service notifications. Never used for marketing emails.
• Stax Payments - payment processing. Tokenizes and charges your card or ACH. PCI-DSS compliant; we never see your full card number.
• TextGrid - SMS delivery for service notifications and quote links (only when you provide a phone number and consent to SMS).
• Google Analytics 4 - anonymous traffic and usage analytics. Configured with IP anonymization.
• Google Ads - conversion tracking on our public pages. Tells us which ads produced a quote request.
• Meta (Facebook/Instagram) - the Meta Pixel on our public pages, plus the Meta Conversions API on the server. Used to measure ad performance and build remarketing audiences. Contact details sent for conversion matching are hashed (SHA-256) before they leave our servers.
• Vercel - web hosting, analytics, and performance monitoring.
• Cloudflare Turnstile - bot/spam protection on forms.
• Mapbox - service area maps. Receives anonymous map tile requests.
• Google Maps Platform - geocoding and routing for our operations. Customer addresses are sent for routing; not used by Google for advertising.
• Neon - encrypted PostgreSQL database where customer records live.

4. Marketing & Email Communications

All marketing emails (newsletter, drip sequences, promotions) are sent through GoHighLevel. Every marketing email includes a one-click unsubscribe link in the footer. Transactional emails (quote delivered, payment receipts, service notifications) are required for service delivery and cannot be unsubscribed from while you have an active account, but you may close your account at any time.

SMS messages are sent only to phone numbers you provide and only for service-related notifications (quote delivery, schedule reminders). Reply STOP at any time to opt out. Standard message and data rates may apply.

5. Data Retention

• Customer records - retained for the lifetime of your account plus 7 years thereafter for tax and accounting purposes.
• Quote requests that don't convert - retained for 2 years for analytics and re-engagement, then deleted.
• Newsletter subscribers - retained until you unsubscribe.
• Soft-deleted records - quotes, leads, and properties marked for deletion are retained for 30 days in case of accidental deletion, then permanently purged.

6. Your Rights

Wisconsin residents have rights under applicable state and federal law. Regardless of where you live, we honor the following on request:

• Access - request a copy of the personal data we hold about you.
• Correction - fix anything that's wrong.
• Deletion - close your account and delete your data, subject to records we're required to retain by law.
• Opt-out - unsubscribe from marketing emails or SMS at any time.
• Ad tracking opt-out - you can turn off the advertising trackers described in 1.2 by blocking third-party cookies in your browser, or through Meta ad preferences and Google ad settings. Blocking them does not affect your service.
• Portability - receive your data in a portable format (CSV / JSON) on request.

To exercise any of these rights, email info@reportfordoody.com from the address on file. We'll respond within 30 days.

7. Security

We use industry-standard security practices including HTTPS encryption everywhere, encrypted databases, hashed passwords, scoped API keys, and rate-limited public endpoints. We restrict employee access to customer data on a need-to-know basis. No system is 100% secure, but we work hard to keep yours safe.

8. Children's Privacy

Our services are intended for adults. We don't knowingly collect personal data from anyone under 13. If you believe a child has provided us with personal data, contact us and we'll delete it.

9. Changes to This Policy

We may update this policy as our services or applicable laws change. The “Last updated” date at the top reflects the most recent revision. Material changes will be communicated via email to active customers.

10. Contact

Questions about this policy or how we handle your data?

• Email: info@reportfordoody.com
• Phone: (608) 515-8874
• Mail: Reporting For Doody, Sun Prairie, WI 53590

See also our Terms & Conditions for service-specific policies.