Overview

Holtz Digital ("we", "our", "us") operates holtzdigital.com. This page explains what information we collect when you use the site, how we use it, and your rights regarding that information.

Information We Collect

Information you provide directly

Contact / inquiry form: When you submit the project inquiry form, we collect your name, email address, project type, budget range, and project details, plus your phone number if you choose to provide one. This information is used solely to respond to your inquiry.
Text message consent: If you tick the SMS consent box — on a form on this site, or on our Facebook lead form for the free website audit — we record that you consented, the date and time, and the exact wording you agreed to. We keep this record so we can demonstrate consent as required by mobile carriers and applicable law. We never sell your phone number, and we never share it with anyone for their own marketing. It is handled by the providers that deliver the messages and calls on our behalf, named under Third-Party Services below, and by nobody else. Message frequency varies. Message and data rates may apply. You can withdraw consent at any time by replying STOP to any message, or by saying “do not call” during a call. The full disclosure wording for each opt-in form, and the messages we send, are published at SMS Consent & Opt-In Evidence.
Account registration: If you create an account, we collect your name and email address.
Comments: If you leave a comment on a blog post, we collect your name and comment text.
Facebook and Instagram messages: If you send a direct message to our Facebook Page or Instagram account, we store the text of your message, the name shown on your profile, the identifier the platform gives us for you — a Page-scoped user ID on Messenger, or an Instagram-scoped user ID on Instagram. Those identifiers are specific to our app and cannot be used to look you up anywhere else, and any reply we draft or send. We do not receive your email address, phone number, or profile details, and we have no access to your Facebook or Instagram account.

Information collected automatically

Analytics: We use Google Analytics (GA4) to collect anonymized usage data including pages visited, time on site, and general geographic region. This data does not identify you personally. You can opt out via the Google Analytics opt-out browser add-on.
Cookies: Google Analytics sets first-party cookies for session tracking. We do not use advertising or tracking cookies beyond this.

Website Audits

When you request a website audit, we process the website address you submit, information retrieved from that website, measured results, and generated findings. We store the report and related records needed to operate the service, verify its results, and manage delivery. These records can include business information found on the website and technical or delivery status information.

The audit tool stores a browser identifier in localStorage under hd_visitor_id and sends it with audit requests to help apply usage limits and retrieve results. This identifier is separate from the aggregate counters described below; the audit service as a whole is not anonymous.

The report form requires an email address to request optional search information and delivery of the enriched report. We process that address and related report, contact, and delivery records. Marketing-email opt-in is separate from the request to receive your report. If you opt in, we record your consent, its time, and the wording agreed to.

Depending on the checks requested, relevant website information is processed by Google PageSpeed for performance checks, DataForSEO for optional search and ranking information, and Google Gemini to help explain audit findings. Convex provides backend storage, and Zoho handles report email delivery.

Someone with a report link can open the report without signing in. Keep that link private. Report pages are excluded from our sitemap and marked not to be indexed, but those measures are not access controls.

Aggregate Audit Measurement

When collection is enabled, we count eligible new primary audits once they pass our report delivery checks, and approximate activations of the report's “Book a free call” link. An audit must be created and first complete those checks while collection is enabled. Reopening cached reports, retrying completion of the same audit, and competitor or internal-only runs do not add completion counts. These daily totals help us understand use of the audit service. They are not report-view counts, unique visitor counts, confirmed bookings, or proof that a report email was received.

The counter records contain the day and totals, without report identifiers, website addresses, email addresses, browser identifiers, IP addresses, or user-agent records. The click counter does not create a persistent visitor identifier or send the report URL or referrer in its measurement request. We keep these counters in our application database, not Google Analytics. Google Analytics tracking is suppressed on /audit report routes. Hosting and network providers still process connection information to deliver requests; these counter safeguards do not mean the underlying audit service collects no personal or business information.

How We Use Your Information

To respond to project inquiries and communicate about potential work
To send text messages you have expressly opted in to receive, such as appointment reminders and links you asked for
To provide requested website audits, optional search information, and report delivery
To provide and improve the website
To understand how visitors use the site via aggregated analytics

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Automated Replies

Replies to messages sent to our Facebook Page, Instagram account, or support email may be drafted automatically. Where a reply was sent without a person reading it first, it says so in the message itself.

To draft a reply, the text of your message is sent to Google's Gemini API, which processes it and returns suggested wording. It is not used to train any model, is not sold, and is not shared with anyone else. A person can review and edit any reply before it is sent, and some are stopped and answered by hand.

Data Retention

Inquiry and account data is retained as long as necessary to fulfill its purpose or as required by law.

Aggregate audit counters cover the current UTC calendar day and the previous 89 UTC days, with scheduled daily cleanup of older totals. This window applies only to those daily aggregates, not to audit reports, contact information, delivery records, or consent records. Those underlying records are retained as long as needed for their purpose or as required by law; a general automatic deletion period for audit records is not currently implemented. You can contact support@holtzdigital.com to request access to or deletion of information associated with your audit.

Messages sent to our Facebook Page or Instagram account are kept for 24 months from the date you sent them, and are then deleted. We keep them that long because a business enquiry can go quiet and resume, and the earlier conversation is what makes the later one make sense. Drafts and replies are deleted with the message they belong to.

You may request deletion of your data at any time, before that period is up — see Deleting Your Data for how to ask and what we remove. We aim to complete requests within 30 days.

Third-Party Services

The site uses the following third-party services, each with their own privacy policies:

Google Analytics — anonymized site analytics
Convex — database and backend infrastructure
Google Gemini API — drafts replies to messages you send us and helps explain website audit findings
Google PageSpeed — website performance checks for requested audits
DataForSEO — optional website search and ranking information
Meta — delivers the Facebook and Instagram messages you send to us
Zoho Mail — email correspondence and requested audit report delivery
Twilio — places the phone calls and delivers the text messages you have consented to receive
ElevenLabs — powers Jessica, our automated voice assistant, and produces the transcript of a call

Your Rights

You have the right to:

Request access to the personal data we hold about you
Request correction or deletion of your data
Withdraw consent at any time where we rely on consent to process data

To exercise any of these rights, contact us at support@holtzdigital.com. For deletion specifically, Deleting Your Data sets out exactly what we remove and how long it takes.

Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the site after changes are posted constitutes acceptance of the updated policy.

Contact

Questions about this privacy policy? Contact us at:
support@holtzdigital.com
(716) 514-9518
Buffalo, NY

Privacy Policy