Privacy Policy

Who we are

This website is operated by NUDGE, an AI search visibility and AI solutions consultancy based in Boca Raton, Florida, serving Palm Beach County and South Florida. It is a lead-generation and consulting website, not a system for collecting regulated personal data.

Information we collect

We collect only what is needed to provide the free diagnostics, respond to you and, with your consent, follow up.

• Contact details you give us: name, work email, optional phone, company name and website, and the message you send through the contact form.
• AI Visibility Check inputs: your business website, business name, city, industry, main service and optionally a Google Business Profile link. Our scanner fetches only public pages of the website you enter; it never uses cookies or logins and it does not keep the fetched HTML, only the findings.
• AI Opportunity Calculator inputs: industry, company size, city, the problems you select and aggregate operating numbers such as lead volume, response time and staff hours. Please do not enter customer names, patient information, financial account information, passwords or other sensitive data.
• Usage and technical data: pages viewed, tool starts and completions, referrer and UTM parameters, approximate location derived from IP address, browser type, and an anonymous identifier stored in your browser so an incomplete session can be resumed.

We do not request Social Security numbers, payment card details, medical information, client or customer records, employee records, passwords or API credentials in any public form.

How we use it

• to run the diagnostic you requested and deliver the results page and report email;
• to reply to your message and, if you ask, to schedule a call;
• to score and prioritize inquiries so we can respond appropriately;
• to send follow-up guidance emails only if you ticked the consent box;
• to understand how the site and tools are used and to improve them;
• to protect the site against abuse, including rate limiting and bot detection.

Service providers

We use a small number of providers to run the site. Each processes data on our behalf under its own terms:

• Vercel, hosting, serverless functions and edge delivery.
• Supabase, database storage for leads, diagnostic sessions and email events.
• Resend, transactional and, with consent, follow-up email delivery.
• Google Analytics, usage analytics, when enabled (see Cookies and analytics).
• Optional AI and search providers, when the Observed AI Recommendation Sample is enabled, fixed commercial queries about your business category and area may be sent to AI or search providers such as OpenAI or Perplexity. We send the minimum necessary business or public information, never the sensitive data listed above, and we log the provider, model and version used. We do not make claims about a provider’s data-use terms beyond what its current contract settings state.
• Calendar scheduling, if you book a call, the scheduling provider linked from our booking button collects the details it needs under its own policy.

Cookies and analytics

The site uses strictly necessary browser storage (an anonymous session identifier and remembered form state) to make the tools work. If Google Analytics is enabled, it sets analytics cookies to measure page views and tool events. We configure analytics events so that they never contain your email address, phone number, name or the operating numbers you enter. Referrals from AI assistants are identified using standard referrer and UTM parameters.

Email and unsubscribing

Result emails are transactional: you requested the report. Follow-up guidance emails are sent only if you opted in with an unchecked-by-default consent box. Every marketing email includes an unsubscribe link and our sender identity; unsubscribing stops all marketing email immediately and is recorded so you are not re-added. You can also ask us to unsubscribe you by contacting the contact form.

Retention

• Lead and contact records are kept while there is an active or legitimate business relationship, then deleted or anonymized on request or when no longer needed.
• Anonymous, incomplete diagnostic sessions, sessions that were never linked to an email are deleted automatically after 30 days.
• Fetched website content is not persisted; only the findings derived from it are stored.
• Raw AI provider answers are retained only where needed for your report or our published methodology, with a timestamp.

Result pages

Your diagnostic results live at a private URL containing a random, unguessable token. Result pages are marked noindex/nofollow, excluded from our sitemap, and not listed anywhere. Anyone with the link can view the page, so share it deliberately. We never expose your submitted operating numbers in page metadata, social previews, logs or analytics.

Security and its limits

Secrets and provider keys are held server-side only. Public forms are validated on the server, rate-limited, and protected with a hidden honeypot and timing checks. Website scans are restricted to public HTTP and HTTPS targets with private-network protections, timeouts and size limits. No system is perfectly secure, and we do not promise that unauthorized access, loss or misuse can never occur; we will act promptly and tell you if an incident affects your data.

Your choices

You can ask us to access, correct or delete the personal information we hold about you, or to stop processing it for marketing, by contacting the contact form. We will respond within a reasonable period and verify your request using the email address on file.

Children

This site is intended for businesses and is not directed at children under 16. We do not knowingly collect their data.

Changes

We will update this page when our practices change and revise the date at the top.

Contact

Questions about this policy: the contact form. See also our Terms of Use.