Privacy Policy

This policy says what Horizon Business Operations ("Horizon," "we") collects from clients and from their customers, what Google, Facebook, and Instagram data the app accesses, and how to ask us to delete it. Write to blake.harris@horizonbusinessops.com with a question or a deletion request.

What we collect from clients and their customers

Forms. When someone fills out a form on Horizon's site or on a client's site, we collect what they type. That can include a name, a business name, a phone number, an email address, and the message.

Leads. A lead is a person who reaches out through a form, a booking request, or a quote request. We keep the contact details and the message so the client can respond, and so Horizon can send the follow-up that the client's plan includes.

Billing, through Stripe. Clients pay through Stripe. We receive the client's name, email, the package or plan they bought, the payment status, and receipts. Stripe processes the card. Horizon does not store full card numbers.

Email, through Resend. We send email through Resend. That includes the address we send to, the message (such as a form reply, a review request, or a notice to the client), and whether the message was delivered. Resend handles delivery.

We also keep the business details a client gives us so we can build and run their site, such as hours, service area, photos, and logo files.

Google data the app accesses

When a client asks Horizon to manage their Google presence, the app accesses:

• Google Business Profile information, such as the business name, address or service area, phone, hours, and website
• reviews
• posts
• Search Console performance, which shows how the site appears in Google Search

We access this Google data to manage the client's listings, posts, and reports on the client's behalf.

Facebook and Instagram data the app accesses

When a client asks Horizon to manage their Facebook Page or Instagram account, the app accesses:

• Facebook Page information
• Instagram account information
• posts on those accounts

We access this Facebook and Instagram data to manage the client's posts and reports on the client's behalf.

Google API Services User Data Policy, including Limited Use

Horizon's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In plain words, that means we use Google user data only to provide the features the client asked Horizon to run: their listing, their posts, and their reports. We do not sell Google user data. We do not use Google user data for advertising. We do not transfer Google user data to others except to provide those features, to comply with the law, or with the client's permission. People at Horizon do not read Google user data unless the client asks us to, we need to for security, the law requires it, or the data is combined so it no longer identifies a person and is used to run the service.

We do not sell data

We do not sell personal information. We do not sell client data, customer data, or data from Google, Facebook, or Instagram.

Each client's data stays confidential and separate

Each client's records are kept in that client's own account. We do not mix one client's customers, leads, listings, or posts with another client's. We treat that information as confidential and use it only to do the work for that client, and as the law requires.

How long we keep it

If you ask us to delete data, we delete it within 30 days and email you a confirmation. The steps are on the data deletion page at /data-deletion.

If a client cancels and does not ask us to delete their data, we keep that client's site files and client data for at least two years after cancellation takes effect, as the Website Services Agreement says. After that, we may delete them. Stripe and Resend keep their own records under their own policies.

Security

We use reasonable administrative, technical, and physical safeguards for a business of our size. Connection tokens for Google and Meta are stored encrypted. Only a Horizon admin can connect those accounts. We will tell a client without undue delay after we learn of a security breach that affects that client's data in our control.

How to ask for deletion

Email blake.harris@horizonbusinessops.com and tell us what you want deleted. You can also disconnect Horizon from Facebook and from Google yourself. The data deletion page at /data-deletion explains both.

New York law

New York law governs this policy.