This Privacy Policy explains what Boring Business Work collects when you use our service and the websites we build for you, how that information is used, and the choices you have. The proposed effective date and the last-updated date for this policy are shown above.
Who is responsible for your information
Strategic Innovation LLC operates the service under the Boring Business Work name and is the business responsible for the information described here. Legal and business notice address: Strategic Innovation LLC, 3455 Bacon Rind Road, Reno, Nevada 89510. Privacy contact: bryan@boringbusinesswork.com.
Who decides how data is used. Strategic Innovation LLC decides why and how account, billing, security, support, and service-operation data is used. For lead submissions collected on an agent or customer website, the agent or customer decides the business purpose and the follow-up, and Strategic Innovation LLC processes, hosts, and transmits that data to provide the service. Each party has its own legal duties for the data it controls.
What we collect
- Account info: email you verify, and any name and contact details you enter for your account or brokerage profile.
- Onboarding and project info: intake and design answers, photos, brand assets, and reference links you share.
- Portal activity: messages, files, change requests, and support conversations you send us.
- Billing info: handled by our payment processor. We do not store full card numbers; we retain limited billing metadata (such as plan, amount, and payment status) needed to run your account.
- Website analytics: raw technical and usage data may be collected first about the site we host for you — for example approximate location derived from IP address, device and browser information, referrer, and page or action events. Reports we produce or share may later be aggregated or de-identified.
- Lead submissions: contact information (such as name, email, phone, and message) that visitors submit through forms on your website, along with related metadata like submission time and source page.
- Voluntarily supplied outcome information: notes you choose to share with us about what happened with a lead (for example whether it turned into a client or closed transaction). You are not required to share this.
- Basic technical and security logs used to keep the service running, prevent abuse, and investigate errors.
How we use it
We use the information above to operate, secure, support, troubleshoot, and improve the service; to build and maintain your website; to respond to your requests; and to send transactional emails such as verification, portal notifications, and receipts.
We may also create and use aggregated or de-identified statistics derived from analytics, lead activity, and voluntarily supplied outcome information for product improvement, internal benchmarking, and truthful marketing or performance reporting. Aggregated or de-identified information does not identify you, your brokerage, a website visitor, or a lead, and we do not attempt to re-identify it. We use the phrase "aggregated or de-identified" only where the underlying data actually meets that description; other operational data remains pseudonymous and is protected as personal information.
Ownership of leads and customer data
You retain ownership of your leads, lead submissions, and customer data. We process that data on your behalf only as needed to operate the service. We do not sell lead data, we do not use it for third-party targeted advertising, and we do not contact your leads for Boring Business Work marketing or sales.
Public performance claims
Any public performance claim we make about the service will be based on documented data and will describe the time period, comparison basis, and — where relevant — sample size or qualifying conditions. We do not promise traffic, leads, closings, or revenue.
Who we share it with
We use service providers (processors) that handle data only on our documented instructions and only to deliver the service. We do not sell lead data, do not use it for third-party targeted advertising, do not contact your leads for our own sales, and do not publicly identify you, your brokerage, or a lead without permission.
- Hosting, database, authentication, and file-storage providers that run the service and store its data.
- Email delivery providers used for verification, notification, and transactional mail.
- Payment processing providers, to accept, reconcile, and support payments.
- Security, fraud-prevention, and error-monitoring providers.
- Analytics and reliability providers used to keep the service working and measurable.
- Professional advisers such as accountants, auditors, and attorneys, under confidentiality obligations.
- Legal, safety, or regulatory authorities when required by law.
These providers may handle raw lead and account information solely to deliver the service and are subject to appropriate confidentiality and data-processing restrictions.
No sale of personal information
We do not sell personal information or covered information as those terms are defined by applicable law, including Nevada law. The designated address for privacy requests and for any sale opt-out notice is bryan@boringbusinesswork.com. We also continue to offer the voluntary access, correction, export, and deletion options described below, subject to identity verification.
Cross-site advertising
We do not authorize advertising networks to use service data for cross-site behavioral advertising. Service providers we use may independently collect technical, fraud, security, payment, or reliability data across the services they operate, under their own policies. We do not currently use service data for third-party targeted advertising.
Children and sensitive information
The customer platform is intended for adults and is not directed to children under 13. We do not knowingly collect information from children, and we will delete it when we can reasonably verify it. Please do not submit Social Security numbers, financial-account credentials, passwords, medical records, or other highly sensitive information through ordinary portal or website forms unless we specifically request it through an approved secure method.
Retention
Retention periods are operational estimates, not legal advice; specific statutory retention periods are a placeholder pending attorney confirmation.
We keep active-account data, project files, and lead submissions while your account is active. Cancelling monthly service requires at least 30 days' written notice, and your data stays available through that paid notice period. After cancellation and the applicable transfer window, how long we keep a record depends on: how long the service was active, the purpose the data was collected for, legal, accounting, tax, and security requirements, the need to prevent or resolve disputes, and ordinary backup and restore cycles. We delete or de-identify what we no longer need on a reasonable schedule, and we do not promise a fixed deletion deadline we cannot verify. Aggregated or de-identified statistics may be retained after that because they no longer identify you or any individual.
Privacy export vs. website code transfer
A privacy request is different from the Complete Website Code Transfer Package described in our Service Policy and Terms. After we verify your identity and authority, we provide only the personal data we are legally required to provide, in a reasonable format we select unless applicable law requires another one.
A privacy export is not a database dump, a platform export, a functioning backend, an operational migration, or a transfer of the website platform. It excludes database schema, authentication systems, credentials and secrets, internal logs where legally excludable, proprietary analytics and derived insights, our methods, security data, other users' data, integration credentials, third-party data, and migration services, except where the law specifically requires disclosure. Where applicable law permits, we may deny, limit, or charge a reasonable fee for repetitive, excessive, fraudulent, unverifiable, or legally exempt requests. Nothing in this section reduces mandatory privacy rights.
Your privacy requests
You may ask us to access, correct, export, or delete personal information we hold about you or that was submitted through your website. Email bryan@boringbusinesswork.com from the account on file, or reply from that account through the portal. This mailbox is also the designated privacy contact for questions about this policy. We may need to verify your identity before acting on a request and may retain limited records where the law allows or requires.
Security
Sign-in uses email + password. Passwords are stored hashed by our authentication provider; reset codes are sent to your verified email. We rely on widely-adopted platform security controls from our providers. No online service is perfectly secure.
Cookies and analytics
Our portal uses cookies and similar local storage that are necessary to keep you signed in and to keep the service secure. Websites we build for you may include analytics tools that first collect the raw technical and usage data described above; the reports we or you review may later be aggregated or de-identified. We do not use this information for third-party targeted advertising.
Your responsibilities on your own website
You are responsible for the privacy notices, cookie or tracking disclosures, consent collection, and marketing-contact permissions required for your own website, your leads, and your follow-up practices, including calling, texting, and email rules. We provide the platform; we do not provide legal advice about your disclosures.
Changes
We may update this policy. Meaningful changes will be posted here with a new effective date and, where reasonable, an email to active customers.