Privacy Policy

01Information We Collect

We collect information in several ways depending on how you interact with our websites and services. Our domains poweredupweb.com and go.poweredupweb.com are both covered by this policy, as are all services we provide.

Personal Information (Website & Contact Forms)

• Name, email address, and phone number
• Company name and business details
• Payment details (processed securely via Stripe — we do not store raw card data)
• Any other information you provide through forms, emails, or direct correspondence

goCRM Data

Our proprietary goCRM platform collects and stores information on behalf of our clients. This includes:

• Contact records: name, email, phone, and company of your customers
• Lead pipeline status (cold, warm, customer) and history
• Meeting and booking data synced with Google Calendar
• Client interaction notes and communication logs
• File attachments uploaded to or sent via goCRM
• Payment records and billing links generated through Stripe

Data stored in goCRM belongs to the client account holder. PoweredUpWeb processes this data solely to provide the goCRM service and does not use it for our own marketing or analytics purposes.

Non-Personal / Analytics Information

• Browser type and version
• IP address and approximate location
• Referring website details
• Pages viewed, time on site, and interaction data
• Device type and operating system

02How We Use Your Information

• Service Delivery: To provide, maintain, and improve our web design, hosting, goCRM, and automation services.
• Communication: To respond to inquiries, send service updates, and provide customer support.
• Payment Processing: To process transactions securely via Stripe. We do not store raw payment card details on our servers.
• Marketing: To send promotional emails about services, offers, and updates to contacts who have opted in. You can unsubscribe at any time via the link in any email. We use Brevo as our email service provider for all marketing communications.
• Analytics: To analyze website performance and improve user experience using analytics tools.
• Automated Workflows: We use automated workflows (built on n8n) to process and route data between integrated platforms — including Google Calendar, Google Meet, Brevo, Stripe, and Google Drive — on your behalf. Data processed through these workflows is handled in accordance with each platform’s respective privacy policy and used solely to deliver the service you have requested.
• AI-Assisted Services: Some internal processes — such as content drafting, workflow logic, and support troubleshooting — may involve AI tools. Any data used in this context is handled with the same care as all other personal data and is not shared with AI providers for training purposes beyond what those providers’ own terms permit.

03How We Share Your Information

We do not sell or rent your personal information. We may share your information only in the following circumstances:

04Cookies & Tracking Technologies

We use cookies and similar tracking technologies to operate our website and understand how visitors use it.

• Functional Cookies: Required for core site functionality, such as remembering form inputs and maintaining sessions. These cannot be disabled without affecting site operation.
• Analytics Cookies: We use Google Analytics to understand how visitors interact with our site. This data is aggregated and anonymized where possible. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.
• Marketing Cookies: We do not currently use third-party advertising or retargeting cookies on our primary domains.

You can adjust your browser settings to disable cookies at any time, though some site functionality may be affected. A cookie consent banner may be presented on your first visit where required by applicable law.

05Data Retention

We retain personal information for as long as necessary to provide our services and fulfill the purposes described in this policy.

• Active clients: Data is retained for the full duration of the service relationship.
• After service termination: Client account data — including goCRM records, website files, and associated configurations — is retained for up to 90 days following termination of services, after which it is permanently deleted unless we are required by law to retain it longer.
• Financial records: Payment and transaction records may be retained for up to 7 years in accordance with applicable tax and financial regulations.
• Contact form submissions: Retained for as long as reasonably necessary to respond to and track inquiries, and may be deleted upon request.

If you would like your data deleted before the standard retention period, please contact us at [email protected].

06Data Security

We take reasonable technical and organizational measures to protect your personal information, including:

• SSL/TLS encryption on all data transmitted through our websites and services
• Secure, access-controlled server environments via Hostinger infrastructure
• Stripe’s PCI-DSS compliant payment processing (we never store raw card data)
• Regular security assessments and plugin/software updates across managed websites
• Restricted internal access to personal data on a need-to-know basis

However, no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

07Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request that we delete your personal information, subject to certain legal exceptions.
• Restriction: Request that we limit how we process your data in certain circumstances.
• Portability: Request your data in a structured, machine-readable format where technically feasible.
• Opt-Out of Marketing: Unsubscribe from any marketing communications at any time via the unsubscribe link in any email, or by contacting us directly.

To exercise any of these rights, contact us at [email protected]. We will respond within a commercially reasonable timeframe and no later than 30 days.

08California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, our business purposes, and the categories of third parties with whom we share it.
• Right to Delete: You may request deletion of personal information we have collected, subject to certain exceptions.
• Right to Opt-Out of Sale: We do not sell personal information. If this changes, we will update this policy and provide a clear opt-out mechanism.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, contact us at [email protected] with the subject line “CCPA Request.” We will verify your identity before processing the request.

09Data Processor Notice (goCRM Clients)

When PoweredUpWeb provides goCRM services to a business client, we act as a data processor on that client’s behalf. The client is the data controller — they determine what data is collected, how it is used, and how long it is retained within goCRM.

PoweredUpWeb processes end-customer data stored in goCRM solely to provide and maintain the goCRM service and does not use that data for our own marketing, analytics, or any other independent purpose.

goCRM clients are responsible for ensuring they have appropriate legal basis and necessary disclosures in place with their own customers regarding data collected and stored through goCRM. If you are a customer of a business that uses goCRM and have questions about your data, please contact that business directly.

10Third-Party Links

Our websites may contain links to third-party websites, tools, or platforms. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party site before providing personal information. The presence of a link does not constitute an endorsement by PoweredUpWeb.

11Children’s Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from someone under 18, please contact us immediately at [email protected] and we will take prompt steps to delete it.

12Breach Notification

In the event of a data breach that affects your personal information, PoweredUpWeb will notify affected parties within a commercially reasonable timeframe and in accordance with applicable law — including Florida’s Information Protection Act (FIPA) where applicable. Notification will be provided via email to the address on record and will include a description of the breach, the data affected, and the steps we are taking to address it.

13Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data practices. Changes will be posted on this page with the updated effective date. Continued use of our services after changes are posted constitutes acceptance of the updated policy. We encourage you to review this page periodically.

14Contact Us

For questions, concerns, or requests related to this Privacy Policy, please contact us: