Privacy Policy

Overview

This policy describes how ASR Enterprises LLC ("we," "us," "our") collects, uses, and protects information through alexreynolds.com, tools and applications we operate, and consulting services we provide. ASR Enterprises is a consulting firm based in Greenville, South Carolina.

We collect different types of information depending on how you interact with us. This policy is organized by those interactions so you can find what applies to you.

Website Visitors

When you visit alexreynolds.com, we use Google Analytics (GA4) to understand how people use our site. GA4 collects individual-level session data including your IP address, device type, browser, pages visited, and general location. This data is transmitted to and stored by Google. We use it to understand traffic patterns and improve our site. We do not combine analytics data with other information to identify you personally.

GA4 sets cookies on your browser (including _ga and _ga_* cookies) to distinguish sessions and users. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on, or by disabling cookies in your browser settings.

We honor Global Privacy Control (GPC) signals. If your browser sends a GPC signal, we treat it as a request to opt out of any data sharing covered by applicable state privacy laws.

We use Cloudflare Turnstile on forms to distinguish human visitors from bots. Turnstile processes browser signals to verify you are a real person. It does not use traditional tracking cookies. For details on how Cloudflare processes this data, see Cloudflare's Privacy Policy.

Contact Form Submissions

If you submit a contact form on our site, we collect the information you provide: your name, email address, organization (if provided), and message. This information is delivered to us via email through Resend, our email delivery service. We do not store form submissions in a database. Your information exists in our email inbox and is used only to respond to your inquiry.

Public Research Tools

We offer free research tools on our site, including a Greenville County property search and a South Carolina elections and campaign finance lookup. These tools are powered by artificial intelligence. When you use them, your search queries are sent to OpenAI's API for processing.

Your queries are not stored by us. Sessions are entirely ephemeral and are gone when you close the page. OpenAI processes API data under their enterprise privacy commitments: API inputs are not used to train their models and are retained for up to 30 days for abuse monitoring before being deleted.

These tools query publicly available government data (county property records, state election filings). We do not add to, modify, or independently verify this data.

Client Services and Data Processing

As a consulting firm, we provide operational, marketing, and technology services to businesses, nonprofits, and political campaigns. In the course of this work, we may process data on behalf of our clients in several ways:

• Hosted forms and systems. We build and maintain data collection tools (such as intake forms and ticketing systems) on platforms like Airtable for our clients. When you submit information through one of these forms, the data is collected on behalf of the client we built it for, not for our own use. We act as a data processor in these cases.
• Platform access. Clients may authorize us to access their business platforms (CRM systems, email marketing tools, website management) to perform work on their behalf. We access only the data necessary for the authorized task. In some cases, we export reports or data for analysis on encrypted local devices.
• Political campaign data. For campaign clients, we work with voter data obtained from licensed data vendors and public records. This data is downloaded for processing (audience building, targeting) and uploaded to advertising platforms. Local copies are retained for the duration of the campaign engagement and deleted afterward. Voter data is used only for the specific campaign it was obtained for.

Our obligations when processing data on behalf of clients are governed by our Data Processing Addendum.

Data Sharing

We do not sell your personal information. We share data only with the third-party services necessary to operate our website and provide our services:

When we process personal data on behalf of clients, we may share it with the subprocessors listed on our Subprocessors page. The platforms involved depend on the services we provide to that client.

Data Security

We store credentials and access tokens on encrypted devices under our physical control. We do not store tokens or credentials in shared cloud databases. Client data that is exported for analysis is kept on encrypted local storage and deleted when no longer needed for the engagement.

We use OAuth 2.0 for authorized connections to client platforms. Access tokens are refreshed automatically and old tokens are not retained. You can revoke our access to any connected service at any time through that service's account settings.

Data Retention

• Website analytics: Retained per Google Analytics default settings (up to 14 months).
• Contact form submissions: Retained in our email inbox indefinitely unless you request deletion.
• Research tool queries: Not retained. Sessions are ephemeral.
• Client engagement data: Retained for the duration of the engagement. Upon termination, data is deleted or returned within 30 days of written request, as outlined in the Data Processing Addendum.
• OAuth tokens: Retained only while the integration is active.

Your Rights

You may request access to, correction of, or deletion of any personal information we hold about you. If you submitted data through a form we operate on behalf of a client, we will coordinate with that client to fulfill your request. You can also revoke access to any connected service at any time through that service's own account settings.

In the event of a data breach affecting your personal information, we will notify affected individuals and relevant authorities as required by applicable law, including the South Carolina Identity Theft Protection Act.

Children's Privacy

Our services are not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has submitted information through our site or tools, contact us and we will delete it promptly.

Changes to This Policy

We may update this policy from time to time. Material changes will be noted with an updated effective date at the top of this page.

Contact

For questions about this policy, to request data deletion, or to exercise any of your rights, contact a@alexreynolds.com.