Privacy Policy

Reflectico ("we", "us", "our") is a small consulting practice that helps small businesses with their website, SEO, marketing, and online systems. This policy explains what information we collect on reflectico.com, why we collect it, and what choices you have.

We only collect what we need to help you:

• Information you give us. When you fill in the contact form, the Business Growth Assessment, or create an account, you share details like your name, email, phone, business name, website, and the answers you provide. We use this to respond to you and prepare recommendations for your business.
• Account information. If you sign in, our authentication provider (Supabase) stores your email and a basic profile so we can let you back into your account. If you sign in with Google, Google also shares your name, email, and profile picture with us.
• Usage information. If you accept analytics, we use Google Analytics to count visits and see which pages help people most. This includes the pages you view, a coarse location based on your IP address, the device and browser you use, and how you got to the site.
• Files you upload. If you upload files in your dashboard, those files are stored privately and are only accessible to you and the Reflectico team.

• To reply to your message or assessment and follow up.
• To prepare written recommendations and proposals for your business.
• To run and improve the website and the services you've signed up for.
• To send you occasional updates if you have specifically asked for them.

We do not sell your personal information, and we do not run advertising or cross-site tracking on this site.

We use a small number of cookies and similar technologies. They fall into two groups:

• Strictly necessary. These keep you signed in, remember your cookie choice, and allow forms to work. They are always on because the site cannot function without them.
• Analytics (optional). Google Analytics 4 helps us understand which pages and resources are most useful. We only load it after you accept analytics cookies.

You can change your choice at any time using the cookie settings link in the footer.

We only share your information with the services we use to run the business:

• Supabase for account sign-in, our database, and file storage.
• Google if you choose to sign in with your Google account.
• OpenAI to help summarize your assessment for our team. We do not use your information to train any third-party model.
• Google Analytics if you have accepted analytics cookies.
• Email and calendar tools (Google Workspace) to contact you and to schedule calls you book.

We do not sell or rent your data, and we only share it with these providers as needed to run the site and the services.

We keep your information for as long as your account is active or as needed to provide the service. If you ask us to delete your information, we will do so unless we are required to keep it for legal or accounting reasons.

You can ask us to:

• See what personal information we have about you.
• Correct any information that is wrong.
• Delete your information.
• Stop receiving any optional emails from us.

Email hi@reflectico.com and we will reply within a few business days.

We use reasonable technical and organizational measures to keep your information safe. No system is perfectly secure, so we encourage you to use a strong password on your account and to let us know if you notice anything unusual.

This site is intended for business owners and is not directed at children under 16. We do not knowingly collect information from children.

If you are in the European Union, the European Economic Area, the United Kingdom, or Switzerland, this section gives you extra detail under the General Data Protection Regulation (GDPR) and the UK GDPR.

Data controller. Reflectico is the data controller for the information described in this policy. You can reach us at hi@reflectico.com.

Why we are allowed to process your information. We rely on the following legal bases:

• Your consent for analytics cookies and any marketing emails. You can withdraw this at any time using the cookie settings link in the footer.
• Performance of a contract when we use your information to deliver the services you've asked for.
• Our legitimate interests in replying to your inquiries, keeping the site secure, and running our business, balanced against your rights.
• Legal obligation when we need to keep records for tax or accounting reasons.

International data transfers. Reflectico is based in the United States, and several of the providers we use (Supabase, OpenAI, Google) also store and process data outside the EU and UK. Where required, we rely on the European Commission's Standard Contractual Clauses and equivalent UK transfer mechanisms with these providers. You can ask us for a copy of these safeguards by emailing us.

Your GDPR rights. In addition to the rights listed above, you can also:

• Ask us to restrict or object to certain uses of your information.
• Ask for a portable copy of the information you've given us.
• Withdraw any consent you have given us, at any time.
• Lodge a complaint with your local data protection authority. For example, the Information Commissioner's Office in the UK (ico.org.uk) or your country's supervisory authority in the EU (list of EU authorities).

We do not use your information for automated decision-making or profiling that produces legal effects.

If you are a California resident, you have the right to know what personal information we collect, to ask us to delete it, and to opt out of any sale or sharing. We do not sell or share personal information as those terms are defined under the California Consumer Privacy Act. To exercise your rights, email hi@reflectico.com.

We may update this policy from time to time. When we make meaningful changes, we will update the "Last updated" date at the top of this page.

Questions about this policy? Email hi@reflectico.com.