Privacy Policy

Ignite Web Design ("we," "us," or "our") respects your privacy and is committed to protecting any personal information you share with us. This Privacy Policy outlines what we collect, how we use it, and your rights.

1. What We Collect

We may collect personal information when you:

Fill out a form on our website
Sign up for a consultation, newsletter, or service
Contact us by email or phone
Work with us as a client

This information may include:

Name
Email address
Phone number
Business details
Website URL
Project requirements
Billing info (for paying clients)

We may also collect non-personal data such as:

IP address
Browser type
Pages visited
Time spent on site
How you found our website (referral source)

2. How We Use Your Information

We use your information to:

Respond to inquiries
Provide estimates and proposals
Deliver services you've requested
Send invoices and collect payments
Improve our website and marketing
Send occasional updates (if you opt in)

We don't sell or rent your personal information to anyone. Ever.

3. How We Store and Protect Your Data

Your data is stored securely using industry-standard tools and practices. Only authorized team members have access to it. We take reasonable steps to protect it from loss, misuse, or unauthorized access.

4. Cookies

Our site may use cookies and similar technologies to:

Help the website function properly
Analyze traffic and usage patterns
Improve your experience

You can disable cookies through your browser settings at any time.

5. Google Analytics & Google Ads

We use Google Analytics and Google Ads to understand how visitors use our site and to improve our advertising. These services may collect data like your IP address, pages visited, time on site, and interactions with our ads.

Google may use cookies or device identifiers to serve ads based on your past visits to our site or other websites.

You can opt out of Google's data collection using these tools:

For more information, visit Google's Privacy & Terms.

6. Third-Party Services

We may use trusted third-party services to help us operate our business and website — like email platforms, payment processors, or analytics providers. These providers access data only to the extent needed to perform their tasks and are not allowed to use it for other purposes.

7. Your Rights

You have the right to:

Request access to the personal data we have about you
Ask us to update or delete your data
Opt out of marketing emails at any time

To do any of the above, contact us at hello@ignitewebdesign.ca.

8. Links to Other Sites

Our website may contain links to other websites. We're not responsible for the privacy practices or content on those external sites.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with the updated date at the top.

11. Google API Services & Business Profile Data

11.1 Google API Services User Data Policy Compliance

Ignite Web Design's use and transfer of information received from Google APIs through Ignite CRM will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, data obtained from Google APIs—including data accessed via the My Business Business Information API, the Google My Business API (Google Business Profile APIs), and endpoints under https://googleapis.com—will be used only to: (1) provide the Google Business Profile review management features within Ignite CRM that the user has explicitly enabled; (2) maintain the security, integrity, and operational reliability of those features; and (3) comply with applicable law.

We will not use Google user data for any purpose outside the scope of the user-authorized integration described in our Google Business Profile Review Integration documentation.

11.2 Information We Collect from Google

When you connect your Google account to Ignite CRM, we may collect and process the following categories of information from Google APIs, subject to the permissions you grant during OAuth consent:

Account and authorization data: Google account identifier associated with the OAuth grant, OAuth refresh tokens, and short-lived access tokens
Business location data: Google Business Profile location names, location IDs, and related business information necessary to identify and manage connected listings
Review data: Review text, star ratings, reviewer display names (as provided by Google), review timestamps, unique review identifiers, and existing owner/manager replies
Reply data: Review reply content you submit through the CRM, along with publication status and timestamps returned by Google

We collect only the minimum data reasonably necessary to operate the review management module.

11.3 Data Minimization, Storage, and Retention

What we store:

OAuth refresh tokens — encrypted at rest; retained until you disconnect Google or request deletion
Cached review content and metadata — encrypted database storage; retained until account disconnection, tenant deletion, or upon valid deletion request
Review reply records — stored to reflect sync status with Google
API request logs (non-content) — limited operational logs for security and debugging, then purged

What we NEVER store:

Google account passwords or other Google login credentials
Plain-text OAuth refresh tokens or unencrypted long-lived access credentials
Unhashed authentication secrets of any kind
Google user data beyond what is necessary for the review management functionality
Review or account data for purposes unrelated to the connected CRM tenant's authorized use

Access tokens are short-lived and handled ephemerally. They are not retained in plain text after expiration.

11.4 How We Use Google Data

We use Google-sourced data solely to:

Display your Google Business Profile reviews inside Ignite CRM
Enable you to compose and publish replies to customer reviews on Google Business Profile
Synchronize review and reply status between Google and your CRM dashboard
Troubleshoot integration errors and protect against unauthorized access

We do not use Google user data to:

Serve advertisements or retargeting campaigns
Build advertising profiles or audience segments
Sell, license, or broker personal information
Train, fine-tune, or improve external third-party artificial intelligence or machine learning models
Conduct unrelated analytics, market research, or competitive intelligence beyond operating the review module for your account

11.5 Absolute Prohibition on Data Sharing

Ignite Web Design does not share, sell, rent, lease, or otherwise transfer any data retrieved via the Google Business Profile APIs to:

Third-party advertising networks or ad technology providers
Data brokers, data aggregators, or information resellers
External artificial intelligence model providers (including large language model vendors) for training, fine-tuning, or inference unrelated to your direct use of the review module
Any third party for purposes unrelated to providing Ignite CRM's review management functionality

Limited disclosures may occur only: (1) to infrastructure subprocessors that provide hosting, encryption, database, or security services under written confidentiality and data-processing obligations, and solely to the extent necessary to operate Ignite CRM; (2) when required by law, regulation, or valid legal process; or (3) with your explicit direction, such as when you instruct us to transmit a review reply to Google for publication.

Subprocessors are contractually prohibited from using Google user data for their own independent purposes.

11.6 Data Security

We protect Google-sourced data using administrative, technical, and organizational safeguards appropriate to the sensitivity of the data, including encryption of OAuth refresh tokens and sensitive credentials at rest, TLS encryption for data in transit to and from Google API endpoints, role-based access controls, tenant isolation within our multi-tenant CRM architecture, and monitoring of anomalous API access patterns.

11.7 Your Rights & Controls

You may:

Disconnect your Google account from Ignite CRM at any time through CRM settings
Revoke Ignite CRM's access via Google Account Permissions
Request access, correction, or deletion of Google-related data we store by contacting us at hello@ignitewebdesign.ca

Upon disconnection or verified deletion request, we will delete or anonymize stored Google OAuth tokens and cached Google Business Profile data within a reasonable timeframe, except where retention is required by law or necessary to resolve billing or security disputes.

11.8 Policy Updates

If our use of Google APIs changes materially, we will update this section and the Google Business Profile Review Integration page and, where required, request renewed user consent.