Privacy policy

Last updated 3 November 2026.

This policy covers Springforth, run by Springforth, LLC, the US (“we”). We build websites for local businesses. It covers this website, the private preview pages we send, the customer account, our emails and our calls, and says what personal information we handle, why, and how to make us stop.

What we collect, and where it comes from

Business details the business published. A business’s name, web address, trade, city and the phone number and email address shown on its own website. We read only pages anyone can open, and only the address a business chose to publish there. We never buy contact lists and never use contact-finding or data-enrichment services.
Public business listings. Business names, categories and locations from open map data (Overture Maps), which we use to find businesses whose site may need work.
Checks of a current website. Whether it loads securely, how it works on a phone and similar technical checks, each with the date it ran. We keep a copy of the page we checked as a record of where an address was published.
AI answers about a business. What AI assistants said when asked about a business or its trade, stored word for word with the question and the date.
Your preview page. Whether a preview page or its demo site was opened and which parts were used. We count these without storing your IP address.
What you send us. Replies, change requests, photos you send us, and the facts you confirm for your new site.
Your customer account. Your email address, when you signed in, the devices you signed in from, and coded (hashed) forms of your network address and browser, which we use to protect the account and to tell you about a sign-in from a new device.
Calls. If you call us, or start a call from this website or a preview page, our AI assistant tells you first that the call is recorded and transcribed. We keep the recording, the transcript and a record of your consent. After the call, card numbers and Social Security numbers are removed from the transcript.
If you buy. Our payment processor, Stripe, takes the payment and tells us your name, business, billing address, tax ID if you give one, and whether the payment went through. We never see your card number.

Why we use it

To build a preview of a new website and write to the business about it: one email and at most two short follow-ups.
To answer replies. An AI assistant helps draft them; if you ask whether a reply or a caller is an AI, we tell you.
To run the website and plan you buy: hosting, changes, monthly articles and keyword research, billing and support.
To handle what a call was about, and to call back only when you asked us to.
To keep our promise not to contact you again after you say stop, and to keep a record of how we obtained each address.
To keep the service and your account secure.

Stopping emails and calls, and deleting a preview

Reply “unsubscribe” to any email from us, or use the link at the bottom of it. We stop straight away, for your whole business and on every channel.
Say “stop” on any call. Our do-not-call policy has the details.
Reply “no thanks” and we delete the preview we built for you.
After an opt-out we keep only the business’s domain and the address on a do-not-contact list. That list is how we make sure we never write again.

Who else handles it

We don’t sell or rent personal information, and we don’t use it for advertising. Service providers run parts of the service for us and may only use it to do that:

Anthropic (its Claude AI models) writes the answers of the AI chat assistant on this website, on preview pages and on our customers’ websites, and helps write site text and draft replies. It receives what the task needs, such as a chat message, a business’s published details or the text of a reply.
Retell AI runs the calls of our AI voice assistant, on the phone and in your browser: it carries the call, records it and writes the transcript.
ElevenLabs makes the AI voice-over of the short personal film on a preview page, which says the business’s name.
Cloudflare (hosting and storage), Stripe (payments), our email sending services, and other AI services that help check the pages we build and review calls.

We never use what you tell us to train AI models. We may also disclose information when the law requires us to.

The chat and the web call

The chat on this website and the demo chat on a preview page are an AI assistant, and they say so. Each message you type goes to Anthropic to write the answer. We keep no copy of the conversation: we count the messages and what they cost. One exception: when a preview page’s chat offers to email you an answer and you press that button, we keep your last question (up to 300 characters) with that preview’s records, so we can email the answer to the address the preview was sent to.
The chat assistant on a customer’s website passes your enquiry to that business when you leave your name and a phone number or email address. The enquiry is kept with the conversation for up to two years, then deleted.
Call now on this website calls our phone line, where our AI voice assistant answers. Retell AI carries the call, records it and writes the transcript, and the line under the button says that the assistant is AI and that calls are recorded. When Call now offers a call in your browser, that call also runs through Retell AI, and before your microphone starts you are told that it is an AI assistant and that the call is recorded and transcribed. Say “stop” or hang up at any time.

Connected Google website data

If you choose to connect Google in your account, we request read-only access to list the Search Console properties and Google Analytics 4 web streams available to you. You choose the resources for your website. We use them to show recent aggregate clicks, impressions, active users, sessions and page views in your account. We do not request Gmail access or your Google password, change your Google properties, or install tracking.

We encrypt stored access and refresh credentials. We also keep the selected resource identifiers, granted permissions and connection timestamps. We fetch report totals when you view Website data; we do not store visitor-level Google records. We use Google data for this feature, not for advertising, sale or AI model training. Cloudflare handles hosting and storage for us. Your Google reports are not sent to the AI services described above.

Use “Disconnect Google” in Website data to remove our live credentials and selected resources. We also attempt revocation at Google; if it cannot be confirmed, we tell you to remove Spring Forth in your Google account permissions. When service ends or an account is closed, live credentials are cleared. A separate encrypted copy may remain solely for revocation retries within a 24-hour window; it is removed when revocation succeeds or maintenance closes that retry window. Connection-status metadata can remain with your account records under the retention periods below.

Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Where it is handled

We work from the US, and our providers store and process data in the United States, the European Union and other countries. We choose providers that protect it and use it only for us.

How long we keep it

A preview is deleted 30 days after we send it, or sooner when you say no or ask.
The record of where we found a published email address is kept for 7 years, because the law may ask us to show it.
AI answers about a business are kept for 24 months.
While you’re a customer we keep what your new site and plan need. After you cancel we give you the files of your new site, keep a copy for 90 days in case you come back, and then delete it, except billing records the tax law makes us keep.
Call recordings and transcripts are kept only while we need them to handle what the call was about.

Cookies

We set no cookies on this website. The customer account uses two strictly necessary cookies to keep you signed in and to protect the account. We use no advertising, analytics or tracking cookies. Our cookie notice lists each one.

Your rights

You can ask what we hold about you, and ask us to correct or delete it. Write to hello@springforth.ai and we answer within 30 days. We may need to confirm who you are first. Depending on where you live, the law may give you further rights over your information; write to us and we handle your request under the law that applies to you.

Children

Our service is for businesses. It is not directed at children, and we don’t knowingly collect information about children.

Security

Our pages and the customer account use encrypted connections (HTTPS). The account signs you in with a one-time email link or a passkey, never a password. Card details go to Stripe and never reach us.

Complaints

Write to Springforth, LLC at hello@springforth.ai. If our answer doesn’t settle it, you can contact the consumer protection office of your US state.

Changes to this policy

When this policy changes we update the date above. If a change affects customers, we tell them by email first.