Privacy Policy | CRO Automation
CRO Automation LEGAL

Privacy Policy

What we collect, why we collect it, and how we handle your data and your leads' data when we run your automations.

Effective date: September 29, 2026  |  Last updated: September 29, 2026

Jump to a section
  1. 1. Who this policy covers
  2. 2. Information we collect
  3. 3. How we use information
  4. 4. Data we handle for our clients
  5. 5. Text messaging (SMS)
  6. 6. How we share information
  7. 7. Cookies and tracking
  8. 8. How long we keep information
  9. 9. How we protect information
  10. 10. Your privacy rights
  11. 11. Children's privacy
  12. 12. Where data is stored
  13. 13. Changes to this policy
  14. 14. Contact us

The short version

  • We collect what you give us (like when you book an audit), plus basic data about how people use our site.
  • When we run automations for your business, your leads' information belongs to you. We only process it to deliver the Services you asked for.
  • We don't sell personal information, and we never share mobile numbers or text-messaging consent with third parties for their marketing.
  • You can ask us to access, correct or delete your information at any time.

This summary is for convenience. The full policy below is what applies.

01Who this policy covers

This Privacy Policy explains how CRO Automation ("CRO Automation," "we," "us") collects, uses and shares personal information. It applies to:

  • Visitors to [website URL] (the "Site")
  • Prospects and clients: business owners and staff who book an audit, contact us, or buy our Services
  • End contacts: the leads and clients of our clients, whose information passes through automations we build and manage

For end contacts, see "Data we handle for our clients" below. Our client, the credit repair business you contacted, controls that information and its own privacy policy also applies.

02Information we collect

Information you give us

  • Contact details, such as name, business name, email address and phone number
  • Details you share when booking an audit, such as lead volume, tools you use and how you currently follow up
  • Billing information. Card payments are processed by [Payment processor, e.g. Stripe]; we don't store full card numbers
  • Account access you grant us (logins, API keys or admin invites) to connect your tools
  • Messages you send us by email, text, chat or phone

Information collected automatically

  • Device and usage data, such as IP address, browser type, pages viewed, referring page and time on site
  • Cookie and similar technology data (see "Cookies and tracking")

Information from other sources

  • Scheduling tools, like [Calendly], when you book a call
  • Advertising platforms, like Facebook or Google, if you respond to one of our ads or lead forms

03How we use information

PurposeExamples
Provide the ServicesRun your audit, build and maintain your workflows, provide support
Communicate with youReply to questions, send reminders for booked calls, share project updates and invoices
MarketingSend our newsletter or tips about automation, if you've opted in. You can unsubscribe any time
Improve our Site and ServicesUnderstand which pages are useful and fix things that break
Security and legalPrevent fraud and abuse, enforce our Terms, and meet legal obligations

04Data we handle for our clients

When we build automations for a credit repair business, their leads' and clients' information (for example names, phone numbers, emails, form answers, appointment times and message history) flows through tools like the client's CRM, SMS provider and email platform.

For this data, we act as a service provider (sometimes called a "processor"). That means:

  • Our client owns and controls the data and decides how it's used
  • We only access or use it to build, test, monitor and fix the client's workflows
  • We don't sell it, use it for our own marketing, or combine it with other clients' data
  • We don't access clients' credit repair or dispute software, credit reports, or dispute files

If you're a lead or client of one of our clients and want to access, correct or delete your information, or stop receiving messages, please contact that business directly. If you contact us, we'll forward your request to them.

05Text messaging (SMS)

If you give a phone number and agree to receive texts from CRO Automation, or from a business using our automations, message frequency varies. Message and data rates may apply.

  • Reply STOP to any message to opt out. Reply HELP for help.
  • Opting out of texts doesn't stop emails, and vice versa.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are not shared with any third parties, except service providers that deliver the messages (like our SMS provider).

06How we share information

We do not sell personal information, and we don't share it for cross-context behavioral advertising, except as described in "Cookies and tracking." We share information only with:

  • Service providers that help us run our business, such as hosting, CRM, scheduling, email, SMS, payment processing and analytics providers. They may only use it to perform services for us
  • Tools you connect, when you ask us to integrate them as part of your build
  • Legal and safety reasons, when required by law or to protect rights, safety or property
  • Business transfers, if we're involved in a merger, acquisition or sale of assets
  • With your consent, for any other purpose you agree to

07Cookies and tracking

Our Site uses cookies and similar technologies to keep the Site working, understand how it's used, and measure our ads. These may include [Google Analytics], [Meta Pixel] and [Google Ads tags].

You can block or delete cookies in your browser settings. Some browsers also let you send a Global Privacy Control (GPC) signal, which we honor as a request to opt out of targeted advertising where required by law. To learn more about ad choices, visit optout.aboutads.info.

08How long we keep information

We keep personal information only as long as needed for the purposes in this policy:

  • Prospect information: up to [24] months after our last contact, unless you become a client
  • Client records and invoices: for the length of our relationship plus [7] years for tax and legal records
  • Access credentials to your tools: removed within [30] days after Services end

Data inside your own tools (like your CRM) stays there under your control.

09How we protect information

We use reasonable safeguards, including encrypted connections, access limited to people who need it, multi-factor authentication where available, and secure storage of credentials. Where possible, we ask to be added as a user to your tools rather than using your personal login.

No system is perfectly secure. If a breach affects your personal information, we'll notify you as required by law.

10Your privacy rights

Depending on where you live, you may have the right to:

  • Know what personal information we have about you and get a copy
  • Correct information that's inaccurate
  • Delete your information
  • Opt out of marketing, targeted advertising, or the "sale" or "sharing" of personal information
  • Not be treated differently for exercising these rights

To make a request, email [email protected] with the subject line "Privacy request." We'll verify your identity before acting and respond within the time the law requires (usually 45 days). You can use an authorized agent, and if we deny your request you may appeal by replying to our decision.

California residents

In the past 12 months we've collected the categories described in "Information we collect": identifiers, commercial information, internet activity, and professional information. We use and disclose them for the purposes described above. We don't sell personal information or knowingly collect sensitive personal information for inferring characteristics.

11Children's privacy

Our Site and Services are for businesses and aren't directed to children under 16. We don't knowingly collect their personal information. If you believe a child has given us information, contact us and we'll delete it.

12Where data is stored

We're based in the United States and our service providers mainly store data in the U.S. If you access the Site from another country, your information will be transferred to and processed in the U.S.

13Changes to this policy

We may update this policy from time to time. When we do, we'll change the "Last updated" date at the top. If changes are significant, we'll let active clients know by email before they take effect.

14Contact us

Questions or requests about your privacy? Reach us here: