Privacy Policy

Last updated: October 4, 2026 · Version: 2026-10-v1

This policy explains how Bone Marketing LLC ("Bone Marketing," "we," "us") collects, uses, shares, and protects information through bonemarketing.net (the "Site"), our client portal and tools (the "Platform"), our phone and text lines, and our services.

1. Two kinds of information

A. Information about you as a visitor, prospect, or client. We collect this when you visit the Site, contact us, book a call, or become a client. We control this information.

B. Information our clients keep in the Platform about their own customers and leads. For example: a homeowner who requested a quote from a deck builder, received a text, or paid an invoice. We process this on behalf of that business, under our agreement with them.

If you're one of their customers, that business's own privacy practices also apply.
You can contact the business directly. If you contact us, we'll pass your request to them and help them respond.

2. What we collect

Information you give us

name, phone, email, business name, trade, service area, and form answers
messages you send us, and booking details
for clients: account details, team members' names and emails, billing contacts, business registration details needed for carrier texting approval (such as legal name, address, and EIN), and onboarding answers (like average job value)
card details for our fees are handled by our payment processor. We don't store full card numbers.

Connected-account data (clients)

When a client connects Google, Meta, or another service, we receive the data that service makes available:

ad spend and performance
listing calls and reviews
search queries and rankings
website analytics

We use it only to show reports and run the features the client turns on.

Platform activity (clients and their customers)

contacts, leads, messages, call logs, quotes, invoices, and payment status (not full card numbers)
review requests, and the consent records for texting

Calls and texts

When you call or text a number we manage: phone numbers, time, duration, message content, and delivery status.
Calls are recorded only where a recording notice is played.

Automatic information

IP address, device and browser type, pages viewed, referring page, and cookie or pixel data (Section 8).

3. How we use information

To answer requests, book calls, and provide our services and the Platform.
To run the reports, inbox, quotes, invoices, review requests, speed-to-lead, and other features clients turn on.
To register clients' business texting with carriers.
To send service messages (account, security, billing, reports, and updates), and marketing messages if you agreed (you can opt out anytime).
To measure and improve our ads, Site, and Platform.
To secure the Platform, prevent fraud and abuse, and comply with the law.

We may use AI tools to help draft content and summaries. We don't use clients' private data or their customers' data to train public AI models.

4. How we share information

We don't sell personal information. We share it only as follows.

With service providers who help us run the business, under contracts that limit their use:

hosting and infrastructure (Vercel)
database, authentication, and file storage (Supabase)
texting and calling (Twilio, and GoHighLevel while clients are being moved off it)
email delivery (Resend)
forms (Formspree)
scheduling (Calendly)
billing for our fees (Commas)
payment processing for clients' customers (Stripe)
advertising and analytics (Google, Meta)

With others, only when needed:

The client business that a customer's or lead's information belongs to.
Third-party services a client chooses to connect, as needed to make the connection work.
Phone carriers and registration services, for business texting approval (A2P 10DLC).
When the law requires it, or to protect rights, safety, and security.
In a business transfer, such as a merger or acquisition. This policy continues to apply.

Stripe. When you provide personal data in connection with Bone Marketing's payment features, Stripe receives that personal data and processes it in accordance with Stripe's Privacy Policy.

5. Text messaging (SMS)

If you give us your mobile number and agree, we may text you about your request, appointments, and our services. Message frequency varies. Message and data rates may apply. Reply STOP to opt out, or HELP for help. See our SMS Terms.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
Texts sent by our client businesses through the Platform go out in their name, under their own consent and opt-out obligations. Reply STOP to any of those messages to stop texts from that business.
We honor opt-out requests made by any reasonable means, not only by text reply.

6. Google user data

Bone Marketing's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

When you click “Connect Google” in the client portal, we ask for read-only access to:

Your Google name and email (openid, email, profile), to show which account is connected.
Google Search Console (webmasters.readonly), to show the searches, clicks, impressions and average position for the website you pick.
Google Analytics (analytics.readonly), to list your Analytics properties so you can pick the one we report on.

We can't change anything in your Google account. Access tokens are encrypted at rest, only your business and our team can see the reports, and you can disconnect at any time.

We use Google data only to provide the reporting and features a client has turned on, and request read-only access where possible.
We don't use it for advertising, we don't sell it, and we don't use it to train AI models.
People on our team view it only to provide support, for security, to comply with the law, or with the client's permission.

7. Meta data

We use Meta Platform data (ad performance, lead form submissions, and Page information) only to provide services to the client who connected it, consistent with Meta's Platform Terms.

8. Cookies, pixels, and analytics

The Site uses cookies and similar tools, including the Meta Pixel and Google Analytics and Ads tags, to measure visits and to learn whether an ad led to a page view or a form submission. You can limit this through:

The Site doesn't currently respond to "Do Not Track" signals. The Platform uses only the cookies needed for login and security.

9. How long we keep information

Inquiries and prospects: up to 3 years after the last contact, or until you ask us to delete them.
Client account and Platform data: while the account is active, then 30 days for export, then deleted within 90 days. Billing and tax records are kept as long as the law requires.
Consent and opt-out records: as long as needed to prove consent. Opt-outs are kept so we don't contact you again.
Backups: deleted data may remain in backups for up to 35 days before it's overwritten.

10. Security

We use reasonable safeguards:

encryption in transit, and encryption of access tokens and sensitive identifiers at rest
role-based access, with separation between client accounts
two-factor login for staff
vendor review

No system is perfectly secure. If a breach affects your personal information, we'll notify you as the law requires, including Arizona's breach-notification law (A.R.S. § 18-552).

11. Your choices and rights

Access, correct, or delete your information: email admin@bonemarketing.net with "Privacy request" in the subject. We'll verify your request and respond within 30 days, or sooner if your state's law requires it.
Marketing opt-out: reply STOP to texts, use the unsubscribe link in emails, or email us.
State privacy rights: depending on where you live, you may have extra rights, such as access, deletion, correction, portability, and opting out of targeted advertising. Contact us to use them. We won't treat you differently for using them. You can appeal a decision by replying to our response.

Data deletion (including data from Google and Facebook/Meta logins):

1. A client account owner can disconnect the service in Portal → Account → Integrations.

2. Then email admin@bonemarketing.net asking us to delete the stored data. We confirm deletion within 30 days.

3. You can also remove our access in your Google Account (Security → Third-party access) or in Facebook (Settings → Business Integrations).

12. Children

Our Site and services are for businesses and adults. We don't knowingly collect personal information from children under 13. If you think we have, contact us and we'll delete it.

13. Changes

We'll post updates here with a new "Last updated" date. For material changes, we'll notify clients by email or in the Platform.

14. Contact

Bone Marketing LLC · Mailing address available on request: admin@bonemarketing.net · admin@bonemarketing.net · (928) 699-0028