Privacy Policy
Last updated:
Who we are
Acetrio Consulting LLC, a Virginia limited liability company trading as Acetrio, operates this website and provides marketing services to local businesses. In this notice, “we” and “us” mean Acetrio Consulting LLC.
What this notice covers
Two different kinds of information, handled under different rules:
- Information you send us through this website — the contact form.
- Information we access on behalf of a client whose marketing we operate, including data from the Google, Meta, and Apple business platforms.
Sections 1 and 2 below cover the first. Sections 3 through 6 cover the second.
1. Website enquiries
We collect only what you choose to send through our contact form: your business name, your name, email address, phone number (optional), business type, city, the tier you are interested in (optional), and your message.
We use it to reply to your enquiry and to discuss whether we can help. That is the only reason we ask.
When you submit the form, it goes to a small function running on this site, hosted by Cloudflare. That function checks the fields and hands the message to Resend, our email delivery provider, which sends it to our inbox. We may also send you a short email acknowledging that we received it. The website itself stores nothing.
2. Cookies and analytics
This website uses no advertising cookies and no third-party analytics cookies. If that changes, we will update this page and ask for consent where required.
3. Client data and our role
When you engage us, you authorise us to act on your behalf on marketing platforms you control. You remain the owner of your business information. As between us, you are the controller of that data and we are a processor acting on your documented instructions.
Where we manage profiles for more than one client, each client’s data is used only to deliver that client’s services. We do not combine, benchmark, or disclose one client’s data to another client.
4. Google Business Profile API data
We access the Google Business Profile APIs only to manage business profiles that a client has expressly authorised us to manage. Access is granted through Google OAuth by an account holding owner or manager permission on that profile. We never ask for, receive, or store any client’s Google Account password.
Through these APIs we may access location details, business hours and attributes, posts, customer reviews, and profile performance metrics — solely to perform the profile management services the client has engaged us to perform.
Limited Use. Acetrio’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Caching and the 30-day limit
Content retrieved from the Google Business Profile APIs is not pre-fetched, indexed, or stored for use outside our Business Profile project. Where we temporarily store limited amounts of such Content, we do so only to improve the performance of our project, we store it securely, and we delete or refresh it within 30 calendar days. We do not manipulate or aggregate stored Google API Content, and we do not store Content in order to prevent Google from tracking usage of our project.
5. Meta (Facebook and Instagram) Platform Data
Where a client authorises us to manage their Facebook Page or Instagram professional account, we access Meta Platform Data through Meta’s APIs under that client’s authorisation, and only to deliver the services they have engaged us to perform.
We delete Platform Data when a client asks us to, when Meta instructs us to, and when our engagement with that client ends. Anyone may request deletion at any time — see Data deletion, which is our published deletion route.
6. Apple Business Connect data
Where a client registers with Apple Business Connect and delegates management of their locations to us as a third-party partner, we access and update that client’s location data on their behalf, and only for that purpose. The client may withdraw the delegation at any time from their own Apple Business Connect account.
7. We do not sell your data
We do not sell, rent, or trade client or visitor data. We do not share it with third parties except: (a) sub-processors listed below, acting on our instructions; (b) where you direct us to; or (c) where the law requires it.
8. Sub-processors
We use the following third-party services to deliver ours. Each acts on our instructions, and each is bound by its own terms and security obligations.
| Sub-processor | What it does for us |
|---|---|
| Cloudflare | Hosts this website and runs the function that receives your contact-form message |
| Resend | Delivers that message to our inbox by email |
| Google Workspace | Our email and calendar, including our booking page |
| Google Cloud Platform | Hosts the project through which we call the Google Business Profile APIs |
9. Security
We hold as little as possible, for as short a time as possible. Concretely:
- This website is static. Its one piece of server code is the function that receives the contact form, and it stores nothing — it validates the message and hands it straight to our email provider.
- Access to a client’s business profile is granted through OAuth. We never ask for, receive, or store a client’s platform password.
- Credentials and API keys are held outside our source code, and our repositories are checked automatically to keep them out.
- Cloud API keys are restricted to the specific APIs they need, and access to our cloud project follows least privilege.
- Data is encrypted in transit. This site is served over HTTPS only.
- Access to client data is limited to the people delivering that client’s work.
We do not claim any security certification, and we hold none. If that changes we will say so here.
10. Keeping and deleting information
We keep enquiry messages for as long as we need them to respond and for our records. Platform API data is held only as long as needed to deliver the service, and Google Business Profile Content is subject to the 30-day limit in section 4.
You can ask us to access, correct, or delete your information at any time. The full route, including how to revoke our access to your profiles yourself, is on our Data deletion page.
11. Your rights
Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. To exercise any of them, email privacy@acetr.io.
We confirm receipt within 10 business days and complete your request within 45 calendar days. If a request is unusually complex we may extend that once, by a further 45 days, and we will tell you why before the first period runs out. We will never charge you for a request, and we will not ask you to justify one.
12. Children
Our services are directed to businesses. We do not knowingly collect information from anyone under 16.
13. Changes
We will update this page and revise the date above when this notice changes. Changes that materially affect how we handle client data will be communicated to affected clients directly.
14. Contact
Acetrio Consulting LLC, a Virginia limited liability company.
Privacy and data-deletion enquiries: privacy@acetr.io