Privacy Policy

1. Introduction

Power Consulting LLC (d/b/a Sales On Demand) ("Sales On Demand," "we," "us," or "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit salesondemand.io, use our web applications, or engage our services — including when you connect your Google account or other third-party accounts to our platform.

By using our website or services, you agree to the terms of this Privacy Policy.

2. Information We Collect

2a. Information You Provide Directly

• Contact information: Name, email address, phone number, and business name provided via forms, strategy calls, or onboarding.
• Business information: Website URL, industry, monthly revenue, and other details you share during onboarding or discovery.
• Communications: Messages, emails, or other correspondence you send us.

2b. Information Collected Automatically

• Pages visited, time spent on site, browser type, operating system, and referring URLs (via Google Analytics 4).
• IP address and approximate geographic location.

2c. Google API Data (OAuth Integrations)

When you connect your Google account to our platform or authorize Sales On Demand to access your Google services, we may access the following data through Google APIs. We access only the minimum data necessary to deliver the specific service you have requested.

Google API Scope	Data Accessed	Why We Access It
userinfo.email, userinfo.profile, openid	Your name, email address, and Google account ID	To authenticate your identity and associate your connected accounts with your Sales On Demand account
webmasters, webmasters.readonly (Google Search Console)	Search performance data: queries, clicks, impressions, average position, and page-level data for your verified properties	To audit your SEO performance, identify ranking opportunities, and track results of our SEO services
analytics.readonly, analytics.edit (Google Analytics 4)	Website traffic data, user sessions, conversion events, and goal completions for your GA4 properties	To measure the impact of our work on your website traffic and lead generation
adwords (Google Ads)	Campaign performance data, spend, clicks, impressions, and conversion data for your Google Ads accounts	To manage and optimize your Google Ads campaigns on your behalf
business.manage (Google Business Profile)	Your business listing details, hours, photos, reviews, and post history	To manage and optimize your Google Business Profile listing as part of our local SEO services
siteverification (Google Site Verification)	Domain and URL ownership verification status	To verify domain ownership required for Google services setup on your behalf
indexing (Google Indexing API)	Ability to submit URLs from your website to Google for crawling	To accelerate Google indexing of your website pages as part of our SEO services
gmail.send	Ability to send emails from your Gmail address	Only used when you explicitly authorize automated outreach sequences as part of our email marketing services

Important: Sales On Demand's use of Google API data is limited to the purposes described above. We do not use Google API data to develop, improve, or train generalized AI or ML models. We do not sell, transfer, or disclose Google API data to third parties except as described in Section 4 of this policy.

3. How We Use Your Information

• Respond to inquiries and schedule strategy calls
• Deliver and improve our services (websites, SEO, AI voice agents, automation, ads)
• Analyze website and campaign performance on your behalf
• Manage your Google Ads, Google Business Profile, and other connected accounts
• Send relevant communications about our services (you may opt out at any time)
• Comply with legal obligations

4. How We Share Your Information

We do not sell, trade, or rent your personal information. We may share data only in the following circumstances:

• Service providers: Trusted third-party platforms used to deliver our services, including Supabase (database and authentication, hosted in the United States), GoHighLevel (CRM), Vapi and SignalWire (AI voice), and Cloudflare (hosting and security). Each is contractually required to protect your data and may not use it for their own purposes.
• Google APIs: Data accessed through Google APIs is used only within your authorized scope and is not shared with any other party.
• Legal requirements: If required by law, regulation, or valid legal process.
• Business transfers: In the event of a merger or acquisition, your information may be transferred to the acquiring entity, subject to the same privacy protections.

5. Data Storage and Security

Your data, including any Google API data we access on your behalf, is stored in Supabase databases hosted in the United States. We implement industry-standard security measures including encrypted connections (TLS), encrypted storage for sensitive credentials, and access controls that limit data access to authorized personnel only.

Google API credentials (OAuth tokens) are stored encrypted and are never logged or exposed in plaintext.

6. Data Retention

• Client data: Retained for the duration of our engagement plus 12 months after termination, unless you request earlier deletion.
• Google API data: Retained only as long as needed to deliver active services. When you disconnect your Google account or terminate services, your OAuth tokens are revoked and deleted within 30 days.
• Analytics and usage data: Retained for up to 24 months.

7. Your Rights and Choices

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data, including any Google API data we have stored on your behalf
• Revoke Google access: Disconnect your Google account at any time via your Google Account permissions page. This immediately revokes our access to your Google data.
• Opt out: Unsubscribe from marketing communications at any time

To exercise any of these rights, contact us at privacy@salesondemand.io.

8. Cookies

Our website uses Google Analytics 4 cookies to analyze site traffic. You can opt out by installing the Google Analytics opt-out browser add-on or by adjusting your browser's cookie settings.

9. Children's Privacy

Our services are intended for business owners and professionals. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email (if you are a client) and by updating the "Last Updated" date at the top of this page. Continued use of our services after changes are posted constitutes your acceptance of the revised policy.

11. Facebook and Instagram (Meta) Data

When you connect your Facebook or Instagram business assets to Sales On Demand using the "Continue with Facebook" button, you authorize us, through Meta's Facebook Login for Business, to access and process certain information from your Meta account on your behalf. This section explains what we receive, how we use it, how long we keep it, and how you can revoke access or delete the data at any time. We only process this information as described here and in accordance with applicable law and the Meta Platform Terms.

11a. What We Collect From Your Connected Meta Account

When you grant access, we may receive and store the following, limited to the assets you select during the Meta consent screen:

• Account and identity data — your name, the Facebook User ID associated with your authorization, and the list of Facebook Pages and Ad Accounts you manage (pages_show_list, business_management).
• Page content and engagement data — Page settings, metadata, posts, and engagement metrics for the Pages you connect (pages_read_engagement, pages_manage_metadata).
• Advertising data — your ad accounts, campaigns, ad sets, ads, audiences, performance/insights metrics, and billing-related metadata needed to manage your advertising (ads_read, ads_management).
• Lead data — contact information submitted by people through your Facebook and Instagram Lead Ad forms (for example name, email, phone number, and other fields you configured in your lead form), retrieved on your behalf (leads_retrieval).
• Access tokens — the long-lived access token Meta issues so we can act on your behalf. Tokens are stored encrypted and are never displayed or shared.

We request only the permissions necessary to deliver the services you have engaged us for. You see and approve the exact permissions and the specific Pages and Ad Accounts you share on Meta's own consent screen before any access is granted.

11b. How We Use This Data

We use the information above solely to provide marketing services to you, the connecting business, including to:

• Create, edit, publish, schedule, and draft posts on your Facebook Pages;
• Create, manage, optimize, and report on your Facebook and Instagram advertising campaigns;
• Retrieve and route leads generated by your Lead Ad forms into your CRM and follow-up workflows;
• Read Page and ad performance data to produce reporting and improve campaign results.

We do not use your Meta data for any purpose unrelated to the services we provide to you, and we do not use it to build profiles for unrelated advertising.

11c. What We Do NOT Do

• We do not sell, license, or rent your Meta data or your leads' data to any third party.
• We do not use your data to make decisions about eligibility for credit, employment, housing, insurance, or similar purposes.
• We do not transfer your data to a data broker.
• We do not combine your data with other data for purposes you have not authorized.

11d. Third Parties and Sub-Processors

To operate the service we rely on a limited set of infrastructure and software providers acting as our sub-processors, who process this data only on our instructions and under contractual confidentiality and security obligations. These include our cloud hosting and database providers (Supabase, Cloudflare, and Vercel) and the CRM and automation platforms — primarily GoHighLevel — into which your leads and campaign data are delivered at your direction. We share your data with these providers only to the extent necessary to deliver the services. We do not otherwise disclose your Meta data except where required by law or to comply with the Meta Platform Terms.

11e. Data Retention

We retain your Meta data only as long as needed to provide the services or as required by law. When you disconnect your account, end your engagement with us, or request deletion, we delete the associated Platform Data — including stored access tokens, Page data, ad data, and lead data — from our active systems promptly, and from backups within our normal backup-rotation cycle (no longer than 90 days), except where retention of de-identified or aggregated data, or retention required by law, applies. We also delete data when it is no longer needed for the legitimate business purpose for which it was collected, when we stop offering the service, or when Meta requests deletion.

11f. How to Revoke Access and Delete Your Data

You are in control of your Meta data at all times. You can:

1. Revoke our access from Facebook directly — go to Facebook → Settings & Privacy → Settings → Business Integrations (or Apps and Websites), select Sales On Demand, and choose Remove. This immediately revokes our access token.
2. Ask us to delete your data — email privacy@salesondemand.io or use the contact form at salesondemand.io/contact. We will delete your Platform Data as described above and confirm completion.
3. Automated deletion — if you remove the app from your Facebook settings, Meta notifies us automatically through our Data Deletion Callback and we delete the associated data. You can check the status of any deletion request and find full instructions at salesondemand.io/data-deletion.

11g. Security

We maintain administrative, physical, and technical safeguards designed to protect your Meta data against unauthorized access, alteration, disclosure, or destruction, consistent with industry standards and the sensitivity of the data. Access tokens and lead data are encrypted at rest and in transit. In the event of a data incident affecting Platform Data, we will begin remediation immediately and notify Meta and affected users as required by applicable law and the Meta Platform Terms.

11h. Your Rights for Meta Data

Depending on your jurisdiction, you may have rights to access, correct, port, or delete your personal data, and to withdraw consent. To exercise any of these rights, contact privacy@salesondemand.io. Note that for leads generated through your forms, you are the controller of that data and we act as your processor; end-customers should direct requests to you, and we will assist you in responding.

12. Contact Us

Power Consulting LLC (d/b/a Sales On Demand)
10845 Griffith Peak Dr, Las Vegas, NV 89134
Email: privacy@salesondemand.io
Phone: +1 (949) 203-7443