This Privacy Policy describes how Flagstone Studios, LLC ("Company," "we," "us"), a Washington limited liability company based in Kirkland, Washington, collects, uses, and shares information in connection with its reputation management and review-request services (the "Services"). It applies to our Clients (the businesses who use the Services) and to Client's end customers who are contacted through the Services. It should be read together with our Terms and Conditions.
1. Information We Collect
Client account information: business name, contact name, email, phone number, billing information, and CRM/integration credentials (e.g., Google Business Profile, GoHighLevel sub-account).
End customer contact information, supplied by Client, used solely to send review-request messages: name, phone number, and/or email address, and related transaction/appointment context Client provides to personalize messages.
Usage and delivery data: message send/delivery/opt-out status, link clicks, and review-platform interactions, collected to operate and report on the Services.
Technical data: IP address, browser type, and device information collected automatically when Client accesses our dashboard or linked pages.
We do not collect end-customer data directly from the public — it is provided to us by Client, who is responsible for the lawfulness of that collection (see Section 4 of our Terms and Conditions).
2. How We Use Information
We use collected information to:
Send review-request SMS, email, and other messages on Client's behalf;
Operate, maintain, and improve the Services and integrations;
Bill and manage Client accounts;
Provide customer support to Clients;
Comply with legal obligations, including SMS carrier and A2P 10DLC registration requirements; and
Detect and prevent fraud, abuse, or violations of our Terms.
We do not sell personal information, and we do not use end-customer contact information for any purpose other than delivering the Services Client has requested.
3. SMS/Text Messaging Consent and Opt-Out
Messages sent to Client's end customers are sent only where Client has represented to us that it holds valid consent to contact that person (see our Terms, Section 4 and Section 12). End customers may opt out of receiving further messages at any time by replying STOP to any text message received. Opt-out requests are honored promptly and applied across future sends. Message and data rates may apply per the recipient's mobile carrier plan.
We do not sell or share mobile opt-in data or SMS consent information with third parties for marketing purposes. Mobile numbers collected for this purpose are used solely to deliver review-request messages and related account communications.
For questions about a message you received, contact [email protected] or (425) 691-6667.
4. How We Share Information
We share information only as needed to operate the Services:
Service providers: SMS/email delivery providers, GoHighLevel and its messaging/carrier partners, hosting providers, and payment processors, each bound by their own data protection obligations.
Google Business Profile and other review platforms, to the extent Client connects those integrations.
Legal and safety purposes: where required by law, subpoena, or to protect the rights, property, or safety of Company, our Clients, or others.
Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy or a successor policy.
We do not sell or rent personal information to third parties.
5. Data Retention and Deletion
We retain Client and end-customer data for as long as the Client account is active and as reasonably necessary afterward for legal, billing, and record-keeping purposes. Data is not automatically deleted upon account cancellation. Client may request deletion of its data and its end customers' data by written request to [email protected]; we will complete verified requests within a commercially reasonable time, subject to legal retention obligations.
6. Your Rights (CCPA/CPRA, GDPR, and Similar Laws)
Depending on where an individual is located, they may have rights to access, correct, or delete their personal information, or to opt out of certain processing. End customers should direct such requests to the Client business that engaged our Services, as Client is the data controller for its customer relationships; Client may route the request to us at [email protected] and we will assist. California residents may also contact the California Department of Consumer Affairs if a request is not resolved satisfactorily.
7. Data Security
We use commercially reasonable administrative, technical, and physical safeguards designed to protect information from unauthorized access, use, or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Children's Privacy
The Services are not directed to individuals under 18, and we do not knowingly collect personal information from children.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the Effective Date above; continued use of the Services after an update constitutes acceptance of the revised Policy.
10. Contact Us
Flagstone Studios, LLC Kirkland, WA [email protected] (425) 691-6667
