Privacy policy

Who this covers

Brayton Pryce is a small technology consultancy in the United States. This policy covers three things: this website, the client portal that signed-in clients use, and the systems we build and run for clients, including the ones that send texts and emails to their customers.

When we build a system for a client, that client is the business you are dealing with. Their own policy applies to how they treat you. This page explains the rules we build into those systems and what we do with anything that passes through our hands.

What this website collects

If you send the contact form, we store your name, your email address, what you told us about your business, your message, and the name of the browser you sent it from. We use it to reply to you and for nothing else. It is not added to a mailing list.

The site sets no advertising cookies and runs no analytics scripts. The only cookie it sets is the sign-in session for clients who have an account. Our hosting provider keeps short-lived server logs, which include your IP address, for security and to keep the site running.

We do not buy, sell, rent or trade any list of people. We do not share what you send us with anyone outside the practice unless the law requires it.

The client portal

A client account is created by invitation only. We store the email address and a protected form of the password, never the password itself. Signing in sets one session cookie.

Inside the portal a client sees their own figures, invoices and requests, and nothing belonging to anyone else. That boundary is enforced in the database itself, not just on the screen.

The figures a client sees are summary totals that their own system reports to us once an hour. That feed is read only and carries no customer names, phone numbers or email addresses.

What we see during an engagement

During the free review and the build we work inside a client's own systems: their phone system, booking tool, invoicing, email, ads and books. That can mean seeing their customers' names, contact details, bookings and payments.

Every account and every system stays in the client's name. We work as a user they added and can remove, and we keep no copy of their customer data when the work is done. We use what we see only to do the work the client asked for.

Where a system we build uses an AI model, the model provider processes the text it needs for that one job, such as reading a voicemail or sorting an email. We choose providers whose terms do not allow them to train on that data, and every AI feature runs with a cap the client sets.

Business texting and email

Many of the systems we build send messages on a client's behalf: a text back when a call is missed, an appointment reminder, a quote follow-up, a receipt, a win-back offer to a past customer. These rules are built in to every one of them.

• The business is the sender. Messages go from the business's own number and email account, under the business's own name, never from ours.
• Only people who gave permission are messaged. That means customers of the business and people who called, texted, wrote in or booked with it. We never message a bought or scraped list, and we will not build a system that does.
• Every text says who it is from and how to stop. Replying STOP ends texts at once, and that choice is recorded so the system cannot message that number again. Every marketing email carries a working unsubscribe link, and unsubscribes are honored immediately.
• Marketing texts are not sent late at night or early in the morning in the recipient's local time. Reminders and replies to something you asked about are sent when they are useful.
• Consent and opt-out records are kept so the business can show who agreed and who asked to stop.
• Phone numbers and email addresses collected for messaging are used only for that business's own messages. They are never sold, shared with other businesses or used by us for our own marketing.

If you are receiving messages from a business we support and want them to stop, reply STOP to any text or use the unsubscribe link in any email. If that does not work, tell us through the contact page with the business's name and the number or address the messages reach, and we will see to it.

Brayton Pryce itself does not send marketing texts. If you write to us, we reply by email. We only text you if you ask us to.

How long we keep things

A contact form message is kept while we are talking and for a reasonable time after, then deleted. A client's portal account and its figures are kept for as long as the client is a client, and removed when the engagement ends and they ask.

Consent and opt-out records for messaging are kept for as long as the law asks, because they are the proof that the rules above were followed.

How it is protected

Data is stored with providers in the United States, encrypted in transit and at rest. Access inside the practice is limited to the person doing the work. Each client's data is walled off from every other client's at the database level, and any credential we hold for a client's system is encrypted and never written into code.

No system is perfect. If something goes wrong with your data we will tell you plainly and quickly.

Your choices

You can ask what we hold about you, ask us to correct it, or ask us to delete it. Use the contact page and say which it is. We answer within a reasonable time and do not charge for it.

If you are a customer of one of our clients, the business you dealt with is the one to ask, because the records are theirs. We will help them answer.

The site and our services are for businesses and the adults who run them. We do not knowingly collect anything from anyone under 18.

Changes to this policy

If this policy changes in a way that matters, the date at the top changes and clients hear about it directly. The current version is always the one on this page.