Privacy

The short version

We do not warehouse your data. Every system we build runs on your accounts — your CRM, your inbox, your storage, your phone number, your spreadsheets. We pass through your data to do the work and we don't keep a copy on our side. If you fire us tomorrow, there is nothing of yours left for us to delete.

What this site collects

• Form submissions and chat conversations. If you fill out a form or talk to the chat assistant, we receive your message, your email if you share it, and a transcript of the conversation. We use this to follow up with you and for nothing else.
• Basic analytics. Page views and aggregate traffic data via Vercel Analytics. No fingerprinting, no cross-site tracking, no ad networks.
• No cookies for advertising. Only the strictly necessary cookies that keep the site working.

What we collect during a project

To build and run automation we need access to the systems the automation runs on. That usually means OAuth or API keys for tools like QuickBooks, Jobber, ServiceTitan, HubSpot, Gmail, Slack, Stripe, and so on. Two rules:

• We use the minimum scope required and we tell you which scope before we connect anything.
• When the engagement ends, you revoke our access. Tokens and credentials live in your accounts, not ours.

Subprocessors we rely on

Like most modern software shops, we use a small number of vendors to actually run things. The current list:

• Vercel — hosting and analytics for this site.
• OpenAI / Anthropic — the language models that power the assistants we build, including the chat on this page. No model provider trains on our prompts or your data.
• Resend — sends the emails (lead notifications, project updates) we send to you.

For client engagements we'll list any project-specific subprocessors in the proposal before you sign.

NDAs and security reviews

Mutual NDA available before any audit. If you have a security questionnaire, we'll fill it out. If you need single-tenant infrastructure, named-account scoping, or specific compliance (SOC 2 inheriting, HIPAA-aligned vendors, etc.), bring it up on the scoping call and we'll address it in writing before any data moves.

Your rights

You can ask us at any time to delete the lead data, transcripts, or project records we hold for you. We'll do it within ten business days and confirm in writing. If you're a California, EU, or UK resident and would prefer to invoke statutory rights under CCPA, GDPR, or UK GDPR, the same email works.

How to reach us

All privacy questions go to hello@processplus.ai. A real human reads every message — usually within a business day.