Privacy Policy

1. Our Privacy Roles

1.1 Information Collected for InfinityStorm

InfinityStorm determines how and why information is processed when the information relates to our own website visitors, prospects, sales activities, client relationships, billing, support, security, and business operations.

1.2 Information Processed for Clients

When InfinityStorm hosts, configures, maintains, or supports systems for a business client, we may process information about that client’s customers, prospects, appointments, communications, and contacts on the client’s behalf.

In those situations, the client generally determines:

• What information is collected
• Why the information is collected
• Which individuals may be contacted
• Which communications are sent
• How long information should be retained
• Which lawful permissions or consents are required

The client is responsible for its own privacy notices, consent practices, customer lists, communications, legal obligations, and instructions. InfinityStorm processes client-controlled information to provide the contracted services and according to applicable written instructions.

2. Information We Collect

Depending on how you interact with us or with a system we provide, we may collect the following categories of information:

• Contact information: name, business name, job title, email address, phone number, mailing address, billing address, and similar details.
• Business information: website URL, services, pricing, business hours, service areas, staff information, booking rules, policies, brand assets, photos, logos, and other information needed to provide services.
• Inquiry and appointment information: form submissions, booking selections, appointment details, requested services, calendar information, and related communications.
• Project and onboarding information: onboarding responses, approvals, instructions, account access, credentials, forms, calendars, workflows, automations, system settings, and configuration data.
• Client-controlled contact data: customer or prospect names, phone numbers, email addresses, appointment information, communication history, customer lists, consent records, suppression records, and related CRM information supplied or controlled by a client.
• Communications: emails, calls, text messages, chat messages, form submissions, support requests, meeting notes, approved call recordings, transcripts, and summaries.
• Website and technical information: IP address, browser type, device type, operating system, pages visited, referring page, approximate location, visit time, page views, unique views, form activity, opt-ins, and related usage data.
• Transaction and billing information: selected plan, billing cycle, payment status, invoices, recurring billing details, transaction history, taxes, refunds, credits, and limited billing information.
• Security and system information: login activity, account activity, error logs, audit information, delivery records, provider responses, and information used to detect misuse, fraud, security incidents, or technical problems.

InfinityStorm does not directly store full payment-card numbers or card-security codes on its own website servers. Payment-card information is handled by the applicable payment processor.

3. Sources of Information

We may receive information:

• Directly from you when you contact us or submit information
• From a business client that asks us to provide services
• Automatically through our website and hosting platform
• From forms, calendars, checkout pages, web chat, or CRM tools
• From connected accounts or platforms you authorize us to access
• From communication, phone, email, hosting, and payment providers
• From publicly available business websites and business directories
• From referrals or introductions made with appropriate permission

If a business client provides information about another person, the client is responsible for having the authority, permission, or lawful basis needed to provide and use that information.

4. How We Use Information

We may use information to:

• Respond to inquiries and schedule calls
• Evaluate whether our services may be relevant
• Prepare proposals, agreements, orders, and onboarding materials
• Provide websites, booking flows, CRM setup, and automation
• Configure forms, calendars, reminders, follow-up, and review requests
• Provide approved AI-assisted tools and communication features
• Build, configure, test, maintain, troubleshoot, and improve systems
• Provide onboarding, training, support, maintenance, and offboarding
• Send project updates, account notices, and service communications
• Process payments, manage recurring billing, and collect amounts owed
• Measure website activity and system performance
• Maintain account, network, platform, and communication security
• Detect errors, misuse, unauthorized access, fraud, and abuse
• Maintain consent, opt-out, suppression, and communication records
• Comply with legal, tax, accounting, and contractual obligations
• Enforce agreements and protect rights, property, and safety
• Send marketing communications where permitted or requested

We may also combine or organize information to create reports, summaries, workflow records, performance information, and operational insights needed to provide or improve the services.

5. SMS, Email, Calls & Recordings

5.1 Inquiry and Account Communications

If you provide your phone number or email address, we may contact you about your inquiry, appointment, project, account, services, billing, onboarding, support, security, or related business matters.

5.2 Optional Marketing Communications

If you separately opt in to marketing communications, you may receive recurring automated or manual text messages, phone calls, emails, or related communications.

Message and data rates may apply. Consent to marketing communications is not a condition of purchase.

5.3 SMS and Email Opt-Outs

You may opt out of SMS messages by replying STOP and may request help by replying HELP.

You may opt out of marketing emails using the unsubscribe link or instructions provided in the email.

Transactional, account-related, billing, support, security, appointment, or other nonmarketing communications may still be sent where permitted by law.

5.4 Mobile Information and Consent Records

We do not sell, rent, or share mobile opt-in information or text-message consent data with third parties or affiliates for their own marketing or promotional purposes.

Mobile information and consent records may be disclosed to service providers that help deliver messages, maintain communication systems, manage opt-outs, prevent abuse, provide support, or perform requested services.

All other categories of information described in this Privacy Policy exclude text-messaging originator opt-in data and consent. That information will not be shared with third parties for their own marketing or promotional purposes.

5.5 Call and Meeting Recordings

Sales calls, onboarding calls, support calls, video meetings, or other business communications may be recorded or transcribed when recording or transcription is enabled.

We will provide notice or obtain consent when required by applicable law. Participants should not continue with a recorded communication if they do not agree to the recording or transcription.

Recordings, transcripts, summaries, and notes may be used to:

• Maintain accurate records of discussions and decisions
• Prepare follow-up communications
• Improve sales, onboarding, support, and service quality
• Confirm instructions, approvals, scope, or requested changes
• Train or evaluate approved internal systems and processes
• Resolve disputes, complaints, or misunderstandings

Some AI-assisted phone features may generate transcripts, summaries, or call-related records even when a separate audio recording is not retained.

6. How We Disclose Information

We may disclose information to the following categories of recipients:

• Hosting and CRM providers that operate websites, forms, calendars, contact records, pipelines, automation, reporting, and communication systems.
• Communication providers that support phone numbers, calls, recordings, transcription, SMS, email, voicemail, messaging, delivery, and carrier registration.
• Payment processors that process payments, recurring charges, refunds, disputes, and transaction information.
• Artificial-intelligence providers used for approved transcription, summaries, drafting, communication, routing, assistance, or other supported features.
• Domain, hosting, email, and infrastructure providers used to operate websites, domains, email, files, integrations, and connected services.
• Analytics and technical providers used to measure website activity, identify technical issues, maintain security, and improve services.
• Authorized personnel who require limited access to perform approved sales, onboarding, administration, support, security, or service work.
• Professional advisors such as attorneys, accountants, tax professionals, insurers, or consultants where reasonably necessary.
• Legal, regulatory, or safety recipients when disclosure is required by law, subpoena, court order, government request, or reasonably necessary to protect rights, safety, security, or prevent fraud.
• Business-transfer recipients in connection with a merger, acquisition, financing, restructuring, asset sale, or similar transaction.
• Other recipients with your direction or consent or as reasonably necessary to complete a request you make.

InfinityStorm currently uses HighLevel and related supported services to operate portions of its website, CRM, forms, calendars, automations, communication systems, and managed client systems.

InfinityStorm currently uses Stripe to process payments. Stripe processes payment information according to its own agreements and privacy practices.

We do not authorize service providers to use personal information for their own unrelated marketing purposes.

7. Website Analytics & Cookies

7.1 HighLevel Website Statistics

Our website is hosted and operated using HighLevel. HighLevel’s built-in website and funnel statistics may collect or calculate information such as:

• Total and unique page views
• Pages visited
• Form, survey, calendar, or opt-in activity
• Sales, order, and revenue information where applicable
• Browser and device information
• IP addresses and approximate location information
• Referral and engagement information
• Technical and performance information

We use this information to understand website activity, measure performance, diagnose issues, improve pages, maintain security, and evaluate how visitors interact with the website.

7.2 Third-Party Marketing Analytics

InfinityStorm does not currently operate separate third-party advertising, remarketing, session-replay, or analytics scripts such as Meta Pixel or Google Analytics on this website.

If we add material third-party tracking or advertising technology in the future, we may update this Privacy Policy and provide additional controls or notices where appropriate.

7.3 Cookies and Similar Technologies

HighLevel, hosting providers, communication tools, embedded forms, and other necessary service providers may use cookies, local storage, pixels, identifiers, or similar technologies to:

• Operate and secure the website
• Maintain sessions and preferences
• Process forms, bookings, and checkout activity
• Measure visits and page performance
• Detect errors, fraud, abuse, or unusual activity

You can control certain cookies through your browser settings. Disabling cookies or storage may affect website, form, booking, checkout, or login functionality.

If a cookie banner or preference tool is provided, you may use it to manage the categories of tracking made available through that tool.

8. Payments

Payments are processed through Stripe or another processor disclosed at the time of payment.

Stripe may collect and process:

• Name and contact information
• Billing address
• Payment-card or bank information
• Transaction and payment information
• Fraud-prevention and device information

InfinityStorm does not directly store complete payment-card numbers or card-security codes on its own website servers.

We may receive limited payment information, such as the payment status, transaction identifier, amount, date, card brand, limited card digits, billing details, disputes, refunds, and subscription status.

9. AI-Assisted Processing

InfinityStorm may use artificial-intelligence tools to assist with approved business functions such as:

• Call or meeting transcription
• Conversation summaries and notes
• Drafting messages, documents, or responses
• Routing inquiries and organizing information
• Responding to approved nonprofessional questions
• Supporting calls, messages, booking requests, or follow-up
• Reviewing system activity and preparing reports

Information submitted to an AI-assisted feature may be processed by the applicable platform or AI provider to produce the requested output.

We limit AI-assisted processing to approved business purposes and use reasonable efforts to avoid submitting information that is unnecessary for the task.

AI outputs may be inaccurate, incomplete, delayed, unexpected, or inappropriate. AI tools do not replace human review, judgment, or responsibility.

InfinityStorm does not use AI tools to provide medical, veterinary, legal, financial, diagnostic, or other licensed professional advice.

10. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, misuse, loss, alteration, or disclosure.

Depending on the system and information involved, safeguards may include:

• Account authentication and access controls
• Role-based or limited access
• Secure third-party platforms and payment processing
• Encryption provided by applicable platforms
• Logging, monitoring, and security review
• Data minimization and limited-access practices
• Backup, recovery, and incident-response practices

No website, network, transmission, storage system, or security method is completely secure. We cannot guarantee that information will never be accessed, lost, intercepted, altered, or disclosed.

Clients and users are responsible for protecting passwords, using secure devices, limiting staff access, maintaining current account information, and notifying us promptly if they suspect unauthorized access to an InfinityStorm-managed system.

11. Data Retention & Offboarding

11.1 General Retention

We retain information for as long as reasonably necessary to:

• Respond to inquiries
• Provide, support, and maintain services
• Manage billing, taxes, accounting, and financial records
• Maintain contracts, approvals, and transaction records
• Preserve consent, opt-out, and suppression records
• Maintain security, fraud-prevention, and audit information
• Resolve disputes and enforce agreements
• Meet legal, regulatory, insurance, or provider requirements

11.2 Client Offboarding

Following the effective cancellation of a client’s managed services, agreed standard exports may remain reasonably available during the 30-calendar-day offboarding period, subject to available platform and provider tools.

After that offboarding period, InfinityStorm may delete or anonymize remaining client-controlled data under its control, subject to:

• Legal, tax, accounting, and billing requirements
• Open disputes, investigations, or security matters
• Backup and disaster-recovery cycles
• Fraud-prevention and suppression records
• Third-party provider retention schedules
• Any different requirement in an applicable written agreement

Deletion from active systems may not immediately remove information from encrypted backups, provider systems, communication records, financial records, or archives that are retained for a valid business or legal purpose.

11.3 Recordings and Transcripts

Recordings, transcripts, summaries, and meeting notes may be retained for as long as reasonably necessary for sales records, service delivery, training, quality assurance, dispute resolution, security, or legal obligations.

12. Your Rights & Choices

Depending on your location, relationship with InfinityStorm, and applicable law, you may have the right to request:

• Access to certain personal information
• Correction of inaccurate personal information
• Deletion of certain personal information
• A portable copy of certain information
• Restriction of certain processing
• Objection to certain processing
• Withdrawal of consent where processing relies on consent
• Opt-out from certain marketing communications

These rights may be limited by applicable law, identity-verification requirements, contractual obligations, security concerns, legal holds, billing records, tax requirements, technical limitations, and the rights of other people.

12.1 Client-Controlled Information

If your information was collected by one of our business clients through a client-branded website, form, calendar, communication, or managed system, the client may be the appropriate party to contact first.

We may refer the request to the applicable client or assist the client as required by our agreement and applicable law.

12.2 Submitting a Request

To submit a privacy request, email: [email protected] .

Please describe the request and provide enough information for us to identify the applicable account or records.

We may need to verify your identity or authority before completing a request. We may deny or limit requests where permitted by law and will explain the reason where required.

12.3 Marketing Choices

You may unsubscribe from marketing emails using the included unsubscribe instructions and may opt out of SMS messages by replying STOP.

Opting out of marketing does not prevent service, support, billing, security, appointment, or other transactional communications.

13. Sensitive & Regulated Data

13.1 Protected Health Information

InfinityStorm’s standard website and business systems are not intended to receive, store, or process protected health information regulated by HIPAA.

Do not submit protected health information, medical records, treatment details, diagnoses, clinical documentation, insurance information, or similar regulated healthcare information unless InfinityStorm has first reviewed the proposed use and expressly agreed to it in a separate written agreement.

InfinityStorm does not enter into a Business Associate Agreement or represent that a system is configured for HIPAA-regulated use unless that arrangement has been separately reviewed, configured, and accepted in writing.

13.2 Other Sensitive Information

Do not submit unnecessary:

• Government identification numbers
• Financial-account credentials
• Complete payment-card data
• Criminal-history information
• Biometric identifiers
• Passwords for unrelated accounts
• Legal records or privileged documents
• Other highly sensitive or regulated information

Payment information should be submitted only through the approved payment processor or secure payment page.

Businesses operating in healthcare, legal, financial, or another regulated field must notify InfinityStorm before using the services for regulated or sensitive information. InfinityStorm may require a compliance review, additional safeguards, a separate agreement, or may decline the proposed use.

14. Children’s Privacy

InfinityStorm’s website and services are intended for business users and are not directed to children under 13.

We do not knowingly collect personal information directly from children under 13 through our own website.

If you believe a child under 13 has submitted personal information directly to InfinityStorm, contact us at [email protected] and we will review the request and take appropriate action where required.

Business clients are responsible for determining whether their own services, forms, booking processes, or communications involve children and for implementing any notices, parental permissions, or safeguards required for their business.

15. Data Transfers

Information may be processed, transmitted, or stored in the United States or other jurisdictions where InfinityStorm or its service providers operate.

Those locations may have privacy and data-protection laws that differ from the laws where you live.

By using our website or services, you understand that information may be processed by providers in locations outside your state, province, or country, subject to applicable law and provider safeguards.

16. Changes & Contact

16.1 Changes to This Policy

We may update this Privacy Policy from time to time by posting a revised version with a new “Last Updated” date.

Updates apply prospectively unless otherwise required by law. Material changes may also be communicated through the website, email, account notice, or another reasonable method where appropriate.

16.2 Contact Information

Questions, privacy requests, or concerns may be sent to:

InfinityStorm LLC d/b/a InfinityStorm Systems
Email: [email protected]
Phone: 206-737-1006
Website: www.infinitystormsystems.com

Our Terms of Service explain the general rules for using our website and services.
View Terms of Service