1. Who we are and what this policy covers
Page One Insights LLC (“Page One”, “we”, “us” or “our”) is a marketing and software company based at 111 NE 1st St., Ste 8646, Miami, FL 33132, United States. We help local service businesses with local SEO, Google Business Profile management, websites, reputation management, CRM and call-tracking systems, and custom CRM buildouts.
This Privacy Policy applies to:
- Our websites at pageoneinsights.com and pageonepartner.com (the Page One Partner business directory, see section 7), and any forms, chat or scheduling tools on them.
- The Page One client portal — the web app at portal.pageone.cloud, our Android app, and the iOS app when it becomes available (together, the “Portal”). Clients use the Portal to see their leads, reviews, Google Business Profile performance, website changes, reports, invoices and billing, and to message our staff.
- The services we deliver under a client agreement, including the communications (email, phone and SMS) that go with them.
When we handle information on behalf of a client — for example, the details of a lead who filled in a form on a client’s website, or a review left on a client’s Google Business Profile — the client decides why and how that information is used and we act as their service provider. This policy describes our own practices; our clients’ own privacy notices govern what they do with their customers’ information.
By using our website, the Portal or our services you agree to the practices described here. If you do not agree, please do not use them.
2. Information we collect
Information you give us
- Contact and account details — name, business name, email address, phone number, mailing address, job title, login credentials and the preferences you set in the Portal.
- Business information — details about your business, its locations, hours, services, service areas, branding and the content you ask us to publish.
- Communications — messages you send us through the Portal, email, web forms, phone calls and text messages, including support requests and change requests.
- Billing information — billing contact, invoice history and the token our payment gateway gives us in place of your card. We never see or store your full card number (see Payments).
Information collected automatically
- Usage data — pages and screens viewed, features used, links clicked, the date and time of visits, and the page that referred you.
- Device and connection data — IP address, browser type and version, operating system, device identifiers, language and approximate location derived from IP address.
- Cookies and similar technologies — as described in Cookies and analytics.
Information from third parties
- Google — when you connect a Google account to our services, we receive the data you authorise through Google’s consent screen. This is covered in detail in Google user data and Limited Use.
- Platforms we work in on your behalf — review sites, business directories, call-tracking and analytics providers, and our payment gateway send us information needed to deliver and report on your services.
- Leads and customers of our clients — names, contact details and message content submitted through forms, calls or texts that our clients route through our systems.
3. How we use information
We use personal information to:
- Provide and maintain our services and the Portal — create and manage your account, publish and manage your listings and website, track and route leads, generate reports and show your results.
- Perform our contract with you — deliver the services you purchased, bill you, and keep records of what was done.
- Communicate with you — respond to requests, send service notices, appointment reminders, account and billing updates and security alerts by email, phone, SMS or Portal notification.
- Support you — diagnose problems, answer questions and improve response times.
- Improve our products — understand how the Portal and website are used so we can fix friction and build what clients need.
- Market our own services — send news and offers about services similar to those you have purchased or asked about, unless you opt out. You can opt out at any time (see Your choices and rights).
- Protect Page One, our clients and the public — detect fraud and abuse, enforce our agreements, and meet legal, tax and accounting obligations.
We do not sell personal information, and we do not use it for automated decisions that have legal or similarly significant effects on you.
4. Google user data and Limited Use
Some of our services connect to Google through official Google APIs. We only connect when a person with authority over the Google account grants access through Google’s own OAuth consent screen, which lists exactly what is being requested. You can revoke that access at any time from your Google Account permissions page or by asking us, and we will stop using the connection.
Limited Use disclosure
Page One Insights’ use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
What we access and why
| Google data | Who connects it | What we access | Why we access it |
|---|---|---|---|
| Google Business Profile (Business Profile APIs) | Clients who buy Google Business Profile management | The business listings you select: listing information (name, address, phone, hours, categories, attributes, service areas, description), posts, reviews and review replies, photos and performance insights. | To manage the listing on your behalf: keep information accurate, publish posts and photos, respond to reviews, flag suspicious changes and show performance in the Portal and reports. |
| Google Search Console and Site Verification | Clients whose website we build or host, and Page One agency accounts | Search queries, impressions, clicks and average position for the verified website property, and the ability to verify that property and submit sitemaps and URLs. | To report how your website performs in Google Search and to tell Google about new or changed pages we publish for you. |
| Google Analytics (GA4) | Clients whose website we build or host | Traffic reports for the website — sessions, page views, traffic sources, top pages — and the ability to create or configure the Analytics property for a site we build. | To set up tracking on a new website and show traffic in the portal and reports. |
| Gmail | Page One staff accounts only | Email messages sent to and from the connected staff mailbox that relate to client work, so they can be shown alongside the client record. | To send and receive client correspondence from inside our CRM and keep a record of it on the client’s account. |
| Google Calendar | Page One staff accounts only | Calendar availability and the events our system creates or updates. | To book onboarding calls and appointments with clients and prospects at times staff are actually free, and keep those bookings in sync. |
The exact OAuth scopes behind each row, the Google APIs we call and step-by-step revocation instructions are on our Google API Services disclosure page.
How we protect Google user data
- We only use it to provide or improve the user-facing features you see — the Portal, our CRM and the reports and services described above.
- We do not sell Google user data and we do not use it for advertising, to build advertising profiles, to determine credit-worthiness or for any lending purpose.
- We do not transfer it to others except (a) as necessary to provide or improve those features — for example to our hosting provider under contract, (b) to comply with applicable law or a valid legal process, (c) as part of a merger, acquisition or sale of assets after giving you notice, or (d) with your explicit consent.
- Humans do not read it unless you ask for support and agree, it is needed for security or to investigate abuse, it is required by law, or it has been aggregated and anonymised so it no longer identifies anyone.
- We do not use Google user data to develop, improve or train generalised artificial-intelligence or machine-learning models.
- Access tokens are stored encrypted, limited to the staff who need them, and deleted within 30 days when you disconnect, close your account or ask us to. Cached Google data is not kept longer than the feature that uses it requires.
- If we change how we use Google user data, we will tell active clients at least 30 days in advance and, where Google requires it, ask you to consent again before using your data in a new way.
5. Text messaging (SMS)
If you opt in — by ticking the consent box on one of our web forms or by texting us first — we may send you transactional, appointment and account text messages, such as appointment confirmations and reminders, account and billing notices, lead alerts and replies to your questions. Message frequency varies. Message and data rates may apply.
- Reply STOP to any message to opt out; reply HELP for help. You can also call +1 (888) 272-1940 or email [email protected].
- Consent to receive text messages is not a condition of purchasing anything from us.
- No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. We share phone numbers and message content only with the carriers and messaging providers needed to deliver the messages, and otherwise as set out in How we share information.
The full program terms are on our SMS Terms page.
7. Page One Partner business directory
Page One Partner (pageonepartner.com) is a free directory of local service businesses published by Page One Insights LLC. It lists businesses, not consumers, and it is built from information each business has already made public:
- Google Business Profile — business name, category, address or service area as the business shows it on Google, phone number, website, hours, rating and review count, services, and the cover photo the business chose;
- the business's own website — the services it describes, used to write a short factual summary; and
- public business records, used to place a business in the right city and category.
Where a business is run under a person's own name, that name, phone number or address is also personal information. Our basis for publishing it is our legitimate interest in providing an accurate public directory of businesses that already advertise the same facts, balanced against the owner's interests: we publish only what is already public, we do not publish home addresses that a business hides on Google, phone numbers and email addresses are shown only when a visitor clicks to reveal them, and any owner can correct or remove a listing free of charge at any time (see corrections and removal). We never sell this information.
Owners who claim a listing
To claim a listing we collect the claimant's name, email address, phone number, role and message, the IP address the claim was sent from, and the outcome of our verification. We use these only to verify the claim, apply corrections, send the emails the process needs, and keep a record of who changed a listing. Claim records are kept for as long as the listing is claimed and for three years after, for dispute resolution.
Visitors who contact a business through a listing
A quote request sent from a listing (name, contact details and message) is delivered to that business and is shared with no one else; the business is responsible for how it uses it. We keep a copy for 30 days to deliver it and to prevent abuse of the form. Consent to be contacted by the business is recorded with the request. We do not use quote requests for our own marketing.
Analytics on the directory
pageonepartner.com uses Google Analytics with IP anonymization to measure which pages are used. No advertising cookies are set and no visitor profile is built. The Cookies and analytics section and the choices in it apply to the directory in the same way as to our main website.
9. Payments
Payments for our services are processed by third-party payment gateways (NMI, and FluidPay for accounts originally set up on that gateway). When you enter card details in the Portal or on one of our secure forms, they go directly to the gateway, which returns a token we use for future charges you have authorised. Card numbers are tokenised and are never stored on Page One servers. The gateway’s use of your information is governed by its own privacy policy and it maintains PCI-DSS compliance for card handling. We keep records of invoices, amounts, dates and the last four digits of the card for accounting, support and dispute resolution.
10. Mobile app
Our Android app, published on Google Play as “Page One Portal” (package cloud.pageone.portal), and the iOS app when it becomes available, are a way to use the same Page One client portal account on your phone. They show the same leads, reviews, performance data, website changes, reports, invoices and messages as the web app, and this policy applies to them in full. In particular:
- Sign-in. You sign in with the email and password of the account our team created for you. There is no self-service sign-up and no sign-in with Google, Apple or other social accounts.
- Notifications. If you allow notifications, the app registers a push token with Firebase Cloud Messaging on Android and Apple Push Notification service on iOS and we store that token against your account so we can alert you to new leads, messages and items waiting for your approval. Notifications are optional; you can turn them off in your device settings at any time, and the token is removed when you sign out.
- Photos and files. When you choose to upload a photo or document — for example a job photo for your website or a file attached to a lead — the app opens your device’s picker and sends only the file you select. It does not scan or upload your photo library in the background.
- What the app does not collect. It does not collect precise location, contacts, calendar, microphone or data from other apps, and it contains no advertising, analytics or crash-reporting software. The only third-party code in the app is the push-notification library.
- On your device the app keeps your sign-in session and display preferences so you stay signed in. Deleting the app removes them; it does not delete your account — see Account and data deletion.
- Purchases. Service plans are bought and managed with our team, not inside the app. Where the app lets you view billing or update a card on file, card details go directly to our payment gateway as described in Payments.
Google Play’s Data safety section and Apple’s App Privacy details for the apps are completed to match this policy.
11. Data retention
We keep personal information for as long as your account is active or as needed to provide the services you purchased. After that, we keep it only as long as necessary to comply with legal, tax and accounting obligations, resolve disputes, enforce our agreements and maintain security. Usage and device data is generally kept for a shorter period unless it is needed for security or is legally required. In particular:
- Google user data and tokens — deleted within 30 days of disconnecting the Google account or closing your account, except for minimal security logs.
- Account and portal data — kept for 90 days after your services end so the account can be reactivated without loss, then deleted or anonymised.
- Website files for a site we built — kept for 30 days after hosting ends and available to you on request during that time.
- Invoices and payment records — retained for the period required by tax and financial-record laws.
- Backups — automated daily database backups, kept on a rolling basis; deleted data ages out of backups on that cycle.
12. Security
We use administrative, technical and physical safeguards appropriate to the sensitivity of the information: TLS 1.2+ encryption in transit with HTTPS enforced on every host; encrypted storage of access tokens and credentials; row-level security that isolates each client’s data in our database; key-only server access behind a firewall and intrusion prevention; automated daily backups; role-based access limited to the staff who need it; audit logging; and regular review of who has access. The full list is in our Data Processing Agreement. No method of transmission or storage is 100% secure, so we cannot promise absolute security, but we will notify you and the relevant authorities of a breach affecting your information as required by law.
13. Your choices and rights
Regardless of where you live, you can:
- Access and update your account information in the Portal or by contacting us.
- Request a copy of the personal information we hold about you.
- Request deletion of your account and personal information (see section 13).
- Opt out of marketing email using the unsubscribe link in any message, and opt out of SMS by replying STOP. We will still send service, billing and security messages while you have an account.
- Disconnect Google from your Google Account permissions page or by asking us.
- Control cookies as described in section 6.
To exercise any of these rights, email [email protected] from the email address on your account or use the Portal. We may need to verify your identity before acting, and we will respond within the time required by applicable law (and within 30 days in any case). We will not discriminate against you for exercising your rights.
14. Account and data deletion
You can ask us to delete your account and the personal information associated with it at any time:
- Email [email protected] from the email address on the account with the subject “Account deletion request”, or
- Send the request to our staff through the Portal’s messaging feature.
We acknowledge every request within 2 business days by replying to the account email, then delete or anonymise the account, profile, Portal content, connected Google tokens and related personal information within 30 days. We retain only what we are legally required to keep — for example invoices and payment records for financial-record laws, and records needed to resolve a dispute or enforce an agreement — and we delete that when the retention period ends. Full details, including what is deleted and what is retained, are on the Account & data deletion page.
15. California and other U.S. state privacy rights
If you live in California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon or another state with a comprehensive privacy law, you may have the right to know what personal information we collect and how we use and share it, to access and correct it, to delete it, to obtain a portable copy, and to opt out of the sale or sharing of personal information, targeted advertising and certain profiling. We do not sell personal information, and we do not knowingly sell or share the personal information of anyone under 16.
Categories we collect (CCPA/CPRA)
In the past 12 months we have collected the following categories of personal information, from the sources and for the business purposes described in sections 2 and 3:
- Identifiers — name, email, phone number, postal address, IP address, account username.
- Customer records — business name, billing contact, invoice history, tokenised payment reference.
- Commercial information — services purchased or considered.
- Internet or network activity — usage and device data, cookie identifiers.
- Geolocation — approximate location derived from IP address (not precise GPS).
- Professional information — job title and employer.
- Audio and electronic information — messages, call recordings where call tracking is enabled and the law permits, and email you exchange with us.
- Inferences — limited to service recommendations drawn from the data above.
We disclose these categories to the service providers and platforms listed in section 7 for business purposes only. We do not collect sensitive personal information beyond account credentials, and we do not use or disclose it for anything other than providing the service.
Exercising your rights
Submit a request by emailing [email protected] or calling +1 (888) 272-1940. We will verify the request by matching the information you provide to our records and may ask for additional information. You may use an authorised agent if you give them written permission and verify your identity with us. We will respond within 45 days (extendable once by a further 45 days with notice). Under California’s “Shine the Light” law you may also request a list of the third parties to whom we have disclosed personal information for their direct marketing purposes — we have not made any such disclosures.
16. International visitors
We are based in the United States and our services are designed for U.S. businesses. If you access our website or Portal from outside the United States, your information will be transferred to and processed in the United States, where data-protection laws may differ from those in your country. By using our services you consent to that transfer. If you are in the European Economic Area, the United Kingdom or Switzerland, we process your information on the bases of contract performance, our legitimate interests in operating and marketing our business, your consent where required, and compliance with legal obligations; you have the rights of access, rectification, erasure, restriction, portability and objection, and the right to lodge a complaint with your local supervisory authority.
17. Children’s privacy
Our website, Portal and services are intended for businesses and adults aged 18 and over. We do not knowingly collect personal information from anyone under 13, and we do not direct any part of our services to children. If you believe a child has provided us with personal information, contact us at [email protected] and we will delete it promptly. A parent or guardian who has given us permission to collect a child’s information may review, correct or delete it, or withdraw consent, by contacting us.
18. Links to other websites
Our website and Portal may link to websites and services we do not operate — including the client websites in our portfolio, Google, review sites and our payment gateway. We are not responsible for their content or privacy practices. Please review the privacy policy of every site you visit.
19. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will post the new version on this page and update the “Last updated” date. If a change is material, we will also notify you by email or a prominent notice in the Portal before it takes effect. Continued use of our services after a change means you accept the updated policy.
20. Contact us
Questions, requests or complaints about privacy can be sent to:
- Page One Insights LLC, 111 NE 1st St., Ste 8646, Miami, FL 33132, United States
- Email: [email protected]
- Phone: +1 (888) 272-1940 (Mon–Fri, 9:00am–6:00pm ET)