Privacy Policy

Effective Date: May 23, 2026

1. Introduction

This Privacy Policy describes how Aspired Websites LLC ("we," "us," or "our") collects, uses, and shares information when you visit aspiredwebsites.com, fill out our contact or audit forms, or engage our services. By using our website or services, you agree to the practices described here.

2. Information We Collect

From you, directly

• Contact form submissions — your name, business name, phone number, email address, and the message you send us.
• Website audit data — the website URL you submit for analysis and the performance scores returned.
• Client portal information — your login credentials, project details, business information you supply during intake, files you upload, and messages you send through the portal.
• Payment information — processed by Stripe. We do not store credit card numbers on our servers.

Automatically

• Standard web logs — IP address, browser type and version, the pages you visit on our site, the time you spent on each page, and the referring URL.
• Session and heatmap data — when the Aspired Websites conversion tracker is installed on a client site, it collects anonymized interaction data (clicks, scroll depth, form submissions) to help measure performance. No personally identifying information is captured.

3. How We Use Your Information

• To respond to your contact form inquiries.
• To provide the web design, hosting, and maintenance services you've engaged us for.
• To send you project updates, monthly reports, and other operational communications.
• To send you marketing emails about our services. You can unsubscribe at any time using the link in any marketing email.
• To improve our services based on aggregate usage patterns.
• To process payments and bill recurring subscriptions through Stripe.

4. Information Sharing

We do not sell your personal information to anyone. We share data only with the third-party services we use to run our business:

• Stripe — payment processing for invoices and subscriptions.
• SendGrid — transactional and marketing email delivery.
• DigitalOcean — website hosting and server infrastructure.
• Anthropic — AI-powered features (content suggestions, security analysis, customer support automation).
• Google — analytics (Google Analytics) and search visibility data (Google Search Console).

We may also disclose your information when required by law, to enforce our Terms of Service, or to protect the rights, property, or safety of our users.

5. Cookies

We use cookies for:

• Session management — to keep you signed in to the client portal and to remember your form-filling progress.
• Analytics — to understand how visitors use our site so we can improve it.

We do not use third-party advertising cookies or cross-site tracking. You can disable cookies in your browser, but some site features (including the client portal) will not function without them.

6. Data Retention

• Contact form data — retained for 2 years from the date of submission, then deleted.
• Client project data — retained for 7 years from the date of project completion, for business and tax records.
• Email marketing list — retained until you unsubscribe, at which point your address is permanently suppressed.

7. Your Rights

You may request:

• Access to the personal information we hold about you.
• Correction of any inaccurate or incomplete data.
• Deletion of your data (subject to legal retention requirements).

To exercise any of these rights, email zacherylong@aspiredwebsites.com. We respond within 30 days.

8. Security

We use industry-standard security measures including TLS/SSL encryption for all traffic between your browser and our servers, AES-256 encryption for sensitive credentials stored in our vault, and DigitalOcean's hardened infrastructure with automated security patching. Our owner holds a CISSP certification and a Masters in Cybersecurity; security is a first-class concern in everything we build.

No system is perfectly secure, however. We cannot guarantee absolute security and will notify affected users promptly in the event of a breach affecting their data.

9. Children's Privacy

Our services are intended for businesses and adults. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our service offerings, or the law. When we make material changes, we will notify active clients by email at least 30 days before the changes take effect. The "Effective Date" at the top of this policy will always reflect the date of the most recent update.

11. Contact Us