Privacy Policy

What we collect

Through the audit form and the contact form: what you type in — your name, phone number, email address, business name, city, and trade, plus any message you write.

Through the free Business Check (/check): the business, city and website you ask us to check, and the results, which come from public Google data and that website. The text you type into the search box is not stored. If you ask for the full review, we keep that request with the channel you chose and, if you leave one, your phone number.

To limit abuse and understand how the check is used, we store a salted hash of your IP address and of a session identifier, and records of the steps taken in the check (started, business selected, completed, result viewed, review requested). We do not store your IP address itself with these records. The session identifier is kept in one first-party cookie (fc_sid, 30 days), needed for the check's limits.

We do not run advertising pixels, session recording, or a chat widget on this site, and we do not use cookies to profile you.

Why we collect it

To run the free audit or check you asked for and to reply to you about it. A phone number left with a review request is used only to contact you about that request, in the way you chose. The hashes and step records are used to enforce limits, prevent abuse and see where the check breaks down. If you become a client, your contact details are used to deliver the service. We do not add you to a marketing list on the strength of a form submission.

Who we share it with

We do not sell personal information. Limited information is processed by service providers used to host the site (Vercel), store check data (Neon), deliver notifications (Resend, Telegram), run the requested audit or check (Google Places API, Google PageSpeed Insights) and protect the check from bots (Cloudflare Turnstile). Turnstile runs in your browser, and your IP address is sent to Cloudflare to verify the result; Cloudflare handles that data under its own privacy policy.

A Business Check result can be opened by anyone who has its link, and later checks of the same business show the dates and scores of earlier ones. A result contains public business data only: not your name, phone number, IP address or review request.

How long we keep it

For as long as we are talking to you, and afterwards only as long as we need it for our records. Business Check results, hashes and step records have no automatic expiry at this time. Ask us to delete your information and we will.

Your California rights

Under the California Consumer Privacy Act (CCPA/CPRA), California residents may request to know what personal information we hold about them, request that we delete it, request that we correct it, and opt out of its sale or sharing — although we do not sell or share personal information. Exercising these rights costs you nothing and we will not treat you differently for it. Email info@factumagency.com to make a request; we may need to confirm your identity before acting on it.

Children

This site is for business owners. It is not directed at children and we do not knowingly collect information from anyone under 16.

Changes and contact

If this policy changes, the date at the top changes with it. Questions, corrections, or deletion requests: info@factumagency.com.