01
What we collect
We collect only the information necessary to deliver our services and operate our platform.
- Business contact information you provide when requesting a report or creating an account, such as name, email address, company name, and phone number
- Website analytics including page views, referral sources, and general usage patterns to improve the site experience
- Authentication data managed through Clerk, including login credentials and session tokens
- Public business data sourced from Google Places API for use in competitor analysis and market research deliverables
- Revenue data provided by clients for analysis purposes, encrypted at rest within our infrastructure
- Prospect data including publicly available business contact information used for outreach campaigns
02
How we use it
Your information is used to operate and improve our services. Specifically, we use data to:
- Deliver our services including revenue audits, missed-call and review recovery, and the recovered-revenue ledger
- Operate the client portal, process orders, and manage account access
- Communicate with you about your projects, deliverables, and account status
- Improve our services, website functionality, and client experience
- Conduct business outreach to prospective clients who may benefit from our services
03
Cold outreach
We may contact businesses we believe could benefit from our services. All outreach is conducted in full compliance with the CAN-SPAM Act:
- Every outreach email includes a clear, functional opt-out mechanism
- Opt-out requests are honored within 10 business days
- All emails include our valid physical mailing address
- Emails are never deceptive in their subject lines or sender information
If you receive an email from us and do not wish to be contacted again, use the unsubscribe link in the email or contact us at the address below.
04
SMS and text messages
If you opt in to receive text messages from Schubert Consulting, the following applies:
- We may send review request messages, appointment reminders, and service-related notifications via SMS
- Message frequency varies based on your service plan and activity
- Message and data rates may apply depending on your mobile carrier and plan
- You can opt out at any time by replying STOP to any message
- For help, reply HELP to any message or contact us at privacy@schubertconsulting.io
Mobile information will not be shared with or sold to third parties or affiliates for marketing or promotional purposes. Mobile information of end users opting in to our messaging programs will never be shared or sold to third parties.
We obtain express written consent before sending any text messages. Consent is not a condition of purchasing any goods or services. Consent records are retained for a minimum of five years in compliance with TCPA requirements.
05
Third-party services
We use the following third-party services to operate our business and platform:
| Service | Purpose |
|---|
| Clerk | User authentication and session management |
| Cloudflare | Website hosting, DNS, and content delivery |
| Google Places API | Public business data for research and analysis |
| Stripe | Payment processing and billing |
| Mailgun | Email delivery for outreach and transactional messages |
| Twilio | SMS delivery for review requests and service notifications |
| Apollo.io | Website visitor identification (company-level) for sales outreach; uses cookies/IP to match visits to business profiles |
| EmbedMyReviews | Review management platform for client reputation campaigns |
Each service operates under its own privacy policy. We share only the minimum data necessary for each service to function.
06
Data storage and security
We take the security of your data seriously and maintain the following safeguards:
- Self-hosted infrastructure located in the United States
- TLS encryption for all data in transit
- Encryption at rest for all revenue and financial data provided by clients
- Role-based access controls limiting data access to authorized personnel
- Active security monitoring with automated intrusion detection and logging
07
Data retention
We retain data only as long as necessary for its stated purpose:
- Client data is retained for the duration of your active account and any applicable engagement period
- Prospect data is retained per the lifecycle of the relevant outreach campaign
- Consent and opt-out records are retained as required by applicable law
- Website analytics are retained for 24 months, then aggregated or deleted
08
Your rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your personal data, subject to any legal retention obligations
- Opt out of marketing communications at any time
If you are a Texas resident, the Texas Data Privacy and Security Act (TDPSA) provides you with additional rights, including the right to know what data is collected, the right to delete personal data, the right to correct inaccuracies, the right to obtain a copy of your data in a portable format, and the right to opt out of data processing for targeted advertising, sale of personal data, or profiling.
To exercise any of these rights, contact us at privacy@schubertconsulting.io. We will respond within 45 days.
09
No patient or health data
We do not collect, store, process, or have access to any protected health information (PHI).
Schubert Consulting LLC is not a HIPAA covered entity and does not provide services that involve patient data, medical records, or health-related information of any kind. Our services are limited to business operations, revenue recovery, and reporting.
10
Children's privacy
Our services are designed for businesses and business professionals. We do not knowingly collect personal information from individuals under the age of 18. If we learn that we have inadvertently collected data from a minor, we will delete it promptly.
11
Changes to this policy
We may update this privacy policy from time to time. If we make material changes, we will notify you via the email address associated with your account before the changes take effect. Continued use of our services after notification constitutes acceptance of the revised policy.
12
Contact
For questions about this privacy policy or to exercise your data rights, contact us: