DRAFT FOR LEGAL & OPERATIONAL REVIEW — NOT YET EFFECTIVE
Privacy Policy
This is a draft for legal and operational review, not an adopted policy. Current operations and possible future capabilities are distinguished below. Publishing this policy alone does not authorize automated marketing, advertising tracking, SMS, or AI-assisted calls. Complete every bracketed review item before adoption.
1. Business identity, scope, and information you provide
ScalePoint AI provides AI business consulting, AI strategy, custom AI agents, and business automation services across multiple industries. The proposed operating entity is 22nd Level Incorporated, an existing corporation, pending final verification as operator. ScalePoint AI’s fictitious business name registration is pending, and its business mailing address is being arranged. [LEGAL REVIEW REQUIRED: Verify the responsible entity, registration details, and required business disclosures.] This draft addresses visitors and prospects; separate client agreements govern client services. Current inquiry fields collect name, email, company, business challenge, optional phone number, optional website, and a separate optional SMS consent selection. Do not submit sensitive personal information or confidential third-party records through general inquiry fields.
2. Current hosting, analytics, cookies, and storage
Current: Framer hosting and Framer Analytics are active. Framer serves website content, and published pages include its analytics script. Hosting processes visitor requests to deliver the website. [REVIEW REQUIRED: Confirm technical data and analytics measurements, purposes, retention, processing locations, and contractual roles from Framer’s current documentation.] Published pages contain a Framer editor-related local-storage check; this does not establish advertising tracking or storage writes for ordinary visitors. Browser cookies, storage behavior, and hosting logs have not been fully verified. No cookie-free claim is made. No cookie banner, preference center, or analytics-consent blocking was identified in the audit. [REVIEW REQUIRED: Complete a browser cookie, storage, and network audit; determine applicable consent and preference controls before adoption.]
3. Future analytics, advertising, CRM, and lead tracking
Possible future capabilities: additional analytics and advertising tools may measure website use and outreach; CRM and lead-tracking tools may organize inquiries, qualification, follow-up status, and consultation history. Google Analytics and Meta Pixel are examples under consideration, not verified current installations. No current use of Make, Twilio, or any other unverified service is asserted. Before introducing new processing, identify the actual provider, data, purposes, legal basis, sharing, retention, and transfers; update disclosures and implement legally required consent or opt-out controls. A policy statement alone is not permission to track or market. [REVIEW REQUIRED: Verify actual CRM and lead-tracking practices, including manual records and downstream email processing, if any.]
4. Inquiry processing, AI assistance, email, and phone calls
Current: Website inquiries notify solutions@scalepointai.co. Submitted information is intended to support responses, consultation scheduling, understanding business needs, and discussing requested services. [REVIEW REQUIRED: Confirm actual uses and applicable legal bases.] Possible future capabilities include AI-assisted review, summarization, qualification, routing, communication drafting, automated email responses and follow-ups, and business phone calls, potentially using AI assistance or artificial voices. These workflows are not verified as active. Before implementation, assess provider access, permitted inputs, accuracy, human oversight, and applicable rights relating to automated processing. Submitting an inquiry does not itself authorize unrelated automated marketing or AI calls. Email preference or opt-out requests may be sent to solutions@scalepointai.co; provide unsubscribe methods where required. [REVIEW REQUIRED: Verify email and calling workflows, marketing permissions, do-not-call and suppression procedures, required AI or artificial-voice disclosures, and recording or transcription consent before activation. No current recording practice is asserted.]
5. Optional SMS, consent records, and suppression
Current: Phone Number and SMS Consent are separate optional form fields; the checkbox is initially unchecked. Consent is not required to submit, and a phone number or inquiry alone is not SMS consent. No automated SMS sending service was identified in the inspected configuration. Possible future consent-based messages may concern an inquiry, scheduling, appointment reminders, and related services within the approved consent scope. Message frequency varies; message and data rates may apply. The proposed disclosure provides STOP to opt out and HELP for assistance. Implement and test these procedures before sending. [REVIEW REQUIRED: Confirm the program, provider, sender identity, message scope, registration, support, and opt-out timing.] Appropriate consent evidence and withdrawal and suppression records must be linked to the relevant number to prevent further messaging after opt-out except as legally permitted. [REVIEW REQUIRED: Establish and verify consent timestamps, source, disclosure version, number association, retention, access controls, suppression synchronization, and other reasonable revocation methods. Verify checkbox reset behavior after repeated submissions. These are requirements to establish, not claims of implemented automation.]
6. Mobile information sharing
Mobile information and SMS consent information will not be shared with third parties or affiliates for their own marketing or promotional purposes. Information may be shared with service providers solely to deliver communications and operate our services, subject to applicable privacy and security requirements.
7. Service providers and other disclosures
Current verified services include Framer hosting and analytics, native website inquiry collection, and notifications to solutions@scalepointai.co. An outbound Google Calendar appointment link is configured, not an embedded scheduling widget. Third-party terms and privacy notices apply when visitors use those services. Potential future providers may support hosting, email, communications, CRM, automation, scheduling, and AI processing. [REVIEW REQUIRED: Identify the actual mailbox and other providers, distinguish active services from proposals, and verify roles, access, processing locations, contracts, and transfer safeguards. Assess AI-provider retention and model-training terms before sharing inquiry data; no such contractual protections are asserted as already agreed.] Information may need to be disclosed when legally required or to protect legal rights, subject to applicable law. The mobile-information restriction in section 6 applies to mobile and SMS consent information. [REVIEW REQUIRED: Confirm actual sharing, legal bases, international transfers, any business-transfer disclosures, and any sale, sharing, or targeted-advertising practices and related rights. No unverified sale or no-sale claim is made.]
8. Privacy requests and rights
Depending on location and applicable law, individuals may have rights to access, correct, delete, or obtain copies of information, object to or restrict processing, withdraw consent, or opt out of certain marketing or advertising practices. Additional rights may apply to automated processing if introduced. Contact solutions@scalepointai.co for requests. Withdrawal does not itself require deletion of records needed to respect opt-outs or meet legal obligations. [LEGAL REVIEW REQUIRED: Confirm jurisdictions, legal bases, identity verification, deadlines, authorized-agent procedures, appeals, regulator complaints, and required non-discrimination language. Confirm all applicable rights and exceptions.]
9. Retention and security
Retention should reflect collection purposes, inquiry and service needs, legal obligations, and the need to document consent and respect opt-outs. [REVIEW REQUIRED: Establish and verify actual retention periods or criteria for inquiries, emails, CRM records if used, analytics, future AI inputs and outputs, consent, suppression, backups, deletion, and legal holds. No fixed period is asserted.] Safeguards must be proportionate to the information and processing; no system guarantees absolute security. [REVIEW REQUIRED: Verify implemented access controls, provider safeguards, security measures, deletion, and incident-response procedures before claiming specific practices are operational.]
10. Contact and policy updates
Contact solutions@scalepointai.co for privacy questions and requests. Proposed operating entity: 22nd Level Incorporated — [PENDING FINAL VERIFICATION AS OPERATOR]. ScalePoint AI fictitious business name registration: [PENDING; VERIFY FINAL STATUS BEFORE ADOPTION]. Mailing address: [BEING ARRANGED — INSERT VERIFIED ADDRESS IF REQUIRED]. Effective date: [EFFECTIVE DATE — NOT YET ADOPTED]. If practices change, update this policy and provide notices or obtain consent where required before new processing begins. Policy updates alone do not supply required consent. [LEGAL REVIEW REQUIRED: Confirm responsible-entity details, required contact information, and change-notice and adoption procedures.]