Privacy Policy

Wisfig ("Wisfig," "we," "us," or "our") is committed to protecting the privacy of individuals who visit our website, wisfig.com, or otherwise interact with our web design and SEO services. This Privacy Policy describes the types of information we may collect, how that information is used, and the choices available to you regarding your personal information.

This policy applies to visitors, prospective clients, and existing clients who access wisfig.com, submit an inquiry or contact form, or otherwise communicate with Wisfig, and to clients who connect a Google Business Profile to Wisfig's review management service ("connected clients"). It covers personal information you may choose to provide to us directly, certain information collected automatically through your use of the site, and information Wisfig accesses through Google APIs with a connected client's authorization, as described in the sections below.

Last updated: October 20, 2026. This Privacy Policy is effective as of that date. We encourage you to read this policy carefully. By continuing to use wisfig.com, you acknowledge the practices described in this document.

We collect personal information in two general ways: information you choose to provide directly to us, and information collected automatically when you visit or interact with wisfig.com.

Information You Provide Directly

When you submit a contact form, request information, or otherwise communicate with us through the website, we may collect the personal information you choose to include, such as:

• Your name
• Email address
• Phone number
• Business name and website address, where applicable
• Any additional details or messages you choose to include in a form submission or email

This information is provided voluntarily by you and is not collected unless you actively submit it to us.

Information Collected Automatically

As with most websites, certain information is collected automatically as part of normal website operation and through analytics and log files. This may include:

• IP address
• Browser type and version
• Device type and operating system
• Referring and exit pages
• Pages viewed, time spent on the site, and general usage patterns
• Date and time of access, collected via server log files

This automatically collected information is generally gathered through standard web server logs and analytics tools, and through cookies and similar tracking technologies, which are described in further detail in the Cookies and Tracking section of this policy.

We use the personal information described in this policy for legitimate business purposes connected to operating Wisfig and providing our web design and SEO services. These purposes include the following.

• Responding to inquiries: to reply to messages submitted through our contact form or sent directly to us, and to answer questions about our services.
• Providing requested services: to prepare proposals, scope projects, and deliver the web design, SEO, or related marketing services you request from us.
• Operating and improving our website: to maintain site functionality, understand general usage patterns, and make improvements to content and performance based on aggregate trends.
• Service-related communications: to follow up on an inquiry, share project updates with existing clients, or send administrative messages related to a service you have requested.
• Marketing and promotions: with your consent or where otherwise permitted, to send occasional information about our services, offers, or updates that may be relevant to you.

If you receive marketing communications from us and no longer wish to do so, you may opt out at any time by following the unsubscribe instructions included in the communication or by contacting us directly using the information provided on this page. Opting out of marketing messages does not affect service-related communications tied to an active inquiry or project.

Information Wisfig receives through Google APIs for connected clients is handled separately: it is used only as described in the Google Business Profile Integration section below, and it is not used for the marketing and promotions, website analytics, or website improvement purposes described above.

This section applies to Wisfig clients who connect one or more Google Business Profiles to Wisfig's review management service. It explains how Wisfig accesses, uses, stores, shares, and deletes data received from Google APIs ("Google user data").

How You Authorize Access

Connected clients grant access through Google's own OAuth consent screen, using Google's Business Profile management permission (the "business.manage" scope). You sign in with Google directly, and you never share your Google password with Wisfig. Wisfig does not request access to Gmail, Google Drive, or any other Google service through this integration.

Google's business.manage permission is broad. Wisfig uses it only to provide the Google Business Profile management and review response services you have contracted with Wisfig to perform, for the profiles you choose to connect.

Google User Data We Access and Store

With your authorization, Wisfig may access and store the following:

• Google Business Profile account and location identifiers
• Location and profile details for the profiles you connect, such as business name and location information
• Review records, including reviewer display names, star ratings, and review comments
• Reply drafts prepared by the service and replies published to your profile
• Processing and approval metadata, such as the status of each review and reply and its approval history
• An OAuth refresh token that allows the service to keep accessing your connected profiles until access is revoked

How We Use Google User Data

Wisfig uses Google user data only to provide and support the contracted Google Business Profile service, specifically to:

• Retrieve reviews for the profiles you have connected
• Draft, revise, and quality-check suggested review replies, with AI assistance
• Send reply drafts and approval notifications through the approval workflow agreed with you
• Publish replies to Google only as authorized under your agreement with Wisfig
• Keep the records needed to operate, troubleshoot, and secure the service

Wisfig does not sell Google user data, does not use it for advertising, and does not use it for the general marketing, promotional, or website analytics purposes described elsewhere in this policy. Wisfig personnel access Google user data only as needed to provide and support the service for you, for security purposes, or to comply with applicable law.

Service Providers and Sharing

Wisfig uses the following service providers, as applicable, to run the integration. Each receives only the data needed for its role:

• n8n (workflow automation): handles the exchange of the OAuth authorization code and runs the server-side workflows that retrieve reviews, prepare drafts, and publish authorized replies.
• Bunny.net (callback proxy): a dedicated HTTPS callback proxy at connect.wisfig.com receives Google's redirect and transmits the OAuth authorization code and one-time state value to Wisfig's fixed n8n callback. Request logging and caching are disabled on this dedicated callback route, and this proxy does not return access or refresh tokens to your browser.
• Supabase (database): stores the account identifiers, profile and location details, review records, drafted and published replies, and processing and approval metadata listed above. OAuth refresh tokens are stored in Supabase Vault.
• Google Gemini API (AI drafting): receives review text, the reviewer's first name, business and location context, and relevant previously approved reply examples in order to draft, revise, and quality-check suggested replies. OAuth tokens are not sent to Gemini.
• Discord (notifications, only with your authorization): if you authorize it and provide a Discord channel, reply drafts and approval notifications, which may include review details and the proposed reply, are posted to the channel you configure. This is a separate disclosure that Wisfig makes only at your direction, and you control who can access that channel. OAuth tokens are not sent to Discord.

These providers process data under their own terms and policies. Replies you have authorized are published to your Google Business Profile through Google's APIs. Google user data may also be disclosed where required by law or as part of a business transfer only as described in the Business Transfers section, which is subject to the Google API Services User Data Policy.

Security

Google user data is transmitted over encrypted HTTPS connections, access to it is restricted to the people and systems that need it to provide the service, and OAuth refresh tokens are stored in Supabase Vault. As described in the Data Security section, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Retention and Deletion

Wisfig keeps Google user data for as long as it is needed to provide the contracted service to you. After that, we may keep limited records where necessary for legal, security, or dispute-resolution purposes.

You may request deletion of your Google user data, or disconnection of your profiles from the service, at any time by emailing kaleb@wisfig.com. We will verify your identity and your authority over the connected profile before acting on the request, and will then delete the data except for records we are required or permitted by law to keep. Replies already published to Google remain on your Google Business Profile unless they are removed there.

Revoking Google Access

You can revoke Wisfig's access at any time from your Google Account at https://myaccount.google.com/connections. Revoking access stops Wisfig's authorized access to your Google Business Profile data from that point on, but it does not by itself delete records Wisfig has already stored. To have stored data deleted, send a request to kaleb@wisfig.com as described above.

Like most websites, wisfig.com uses cookies and similar tracking technologies, such as web beacons and local storage, to support basic site functionality and to help us understand how visitors use our website.

A cookie is a small text file placed on your device by your web browser when you visit a website. Cookies allow a site to recognize your browser, remember certain preferences, and collect information about how pages are used.

Types of Cookies We Use

• Necessary cookies: required for core website functions, such as loading pages correctly and maintaining basic security. These cannot be disabled without affecting site operation.
• Performance and analytics cookies: used to understand general traffic patterns, such as which pages are visited and how long users spend on the site, so we can maintain and improve wisfig.com.
• Functional cookies: used to remember choices you make while browsing the site, where applicable, to support a more consistent experience on return visits.

We do not use cookies to collect sensitive personal information, and any data gathered through analytics cookies is used in aggregate to understand website performance rather than to identify you individually.

Managing Cookies Through Your Browser

Most web browsers allow you to control cookies through their settings, including viewing which cookies are stored, deleting existing cookies, and blocking cookies from being set in the future. You can typically find these controls in your browser's privacy or security settings menu.

If you choose to disable or block cookies, some parts of wisfig.com may not function as intended, and certain features or pages may load or display differently. Because cookie management options vary by browser and device, please refer to your specific browser's help documentation for instructions on adjusting your cookie preferences.

We do not sell your personal information to third parties. Wisfig may share the personal information described in this policy only in the limited circumstances outlined below, and only as reasonably necessary to operate our business and provide our web design and SEO services.

Service Providers

We may share information with third-party vendors and service providers who perform functions on our behalf, such as web hosting, website analytics, email delivery, and form submission processing. These providers are given access only to the information needed to perform their specific function and are not authorized to use your information for their own independent purposes.

For connected clients, the service providers used for the Google Business Profile integration, and the optional sharing of reply drafts with a client-configured Discord channel, are described in the Google Business Profile Integration section.

Legal Requirements

We may disclose personal information if required to do so by law, regulation, legal process, or governmental request, or where we believe in good faith that disclosure is necessary to comply with a legal obligation, protect the rights or safety of Wisfig, our clients, or others, or investigate and prevent fraud or security issues.

Business Transfers

If Wisfig is involved in a merger, acquisition, sale of business assets, or similar transaction, personal information may be transferred to the involved party as part of that transaction. We would expect any successor entity to continue to handle your personal information consistent with this Privacy Policy, or to notify you of any material changes.

Google user data obtained through Google APIs is not sold, and it is transferred in connection with a merger, acquisition, or sale of assets only as permitted by the applicable Google API Services User Data Policy requirements, including any required notice or consent. This paragraph does not authorize unrestricted sale or transfer of Google user data.

Aside from the circumstances described above, Wisfig does not share your personal information with outside companies for their own marketing purposes without your consent.

Wisfig takes reasonable steps to protect the personal information we collect from loss, misuse, and unauthorized access, use, alteration, or disclosure. We implement a combination of administrative, technical, and physical safeguards designed to protect your information consistent with the sensitivity of the data involved and standard industry practices for a website of this type.

• Encrypted transmission: wisfig.com uses industry-standard encryption technologies to help protect information submitted through our contact forms and other data transmitted between your browser and our website.
• Access limitations: access to personal information we collect is limited to personnel and service providers who have a legitimate business need to handle it in connection with responding to inquiries or delivering our services.
• Routine safeguards: we use reasonable technical measures, such as secure hosting practices and routine maintenance, to help guard against unauthorized access to our systems and the information stored on them.

While we work to maintain appropriate safeguards, no method of electronic transmission or storage is completely secure, and we cannot guarantee the absolute security of information you submit to us. You transmit information to us at your own risk, and we encourage you to take reasonable precautions when sharing personal information online.

If you have reason to believe your interaction with wisfig.com is no longer secure, or if you have questions about the safeguards described here, please contact us using the information provided later in this policy.

Depending on your state of residence and applicable law, you may have certain rights regarding the personal information Wisfig holds about you. Where applicable, including under the California Consumer Privacy Act (CCPA) for California residents, these rights may include the following.

• Right to know/access: the right to request confirmation of whether we hold personal information about you and to request a copy of that information.
• Right to correction: the right to request that we correct inaccurate personal information we maintain about you.
• Right to deletion: the right to request that we delete personal information we have collected from you, subject to certain exceptions permitted by law, such as information we need to retain to complete a requested service or comply with a legal obligation.
• Right to opt out of marketing: the right to stop receiving marketing or promotional communications from us at any time.
• Right to non-discrimination: the right not to receive discriminatory treatment for exercising any of the privacy rights described in this policy.

Wisfig does not sell personal information, as described earlier in this policy, so no opt-out of sale request is applicable to our practices.

How to Exercise Your Rights

To make a request to access, correct, or delete your personal information, or to opt out of marketing communications, please contact us using the information provided in the Contact Information section of this policy. When you contact us, please describe your request and provide enough detail (such as your name and the email address or phone number associated with your inquiry) so that we can locate and verify the information connected to you.

We will respond to verified requests within the timeframe required by applicable law. In some cases, we may need to ask you for additional information to verify your identity before fulfilling a request, in order to protect your personal information from unauthorized access.

If you have submitted a marketing communication opt-out and continue to receive service-related messages tied to an active inquiry or project, this is separate from marketing and reflects ordinary communication about a service you have requested, as described earlier in this policy.

Wisfig's website and services are intended for business owners, marketing decision-makers, and other adults seeking web design, SEO, or related marketing services. Our website and services are not directed to children, and we do not knowingly collect personal information from individuals under the age of 13.

If we become aware that we have inadvertently collected personal information from a child under 13 without the verification of parental consent, we will take reasonable steps to delete that information as promptly as possible. If you believe a child under 13 has provided us with personal information through wisfig.com, please contact us using the information provided in the Contact Information section of this policy so we can address the matter.

Wisfig may update this Privacy Policy from time to time to reflect changes in our practices, the services we offer, or applicable legal and regulatory requirements. When we make material changes, we will post the revised policy on this page and update the effective date accordingly.

Any changes to this Privacy Policy become effective as soon as the revised version is posted on this page. We do not separately notify individual users by email or phone when the policy is updated, so we encourage you to review this page periodically to stay informed about how we collect, use, and protect your personal information.

Your continued use of wisfig.com or continued communication with Wisfig after a revised Privacy Policy has been posted constitutes your acknowledgment of the updated terms described in that version of the policy.

If you have questions, concerns, or requests regarding this Privacy Policy or the personal information Wisfig holds about you, please contact us using the details below.

Wisfig 2272 Sierra Meadows Dr, Ste B Rocklin, CA 95677

Privacy and support requests: kaleb@wisfig.com General email: admin@wisfig.com Phone: (530) 249-0098

When contacting us about a privacy-related matter, please include enough detail about your request so that we can identify the information connected to you and respond appropriately.