Privacy Policy

1. Scope and our role

Foray controls personal information collected through our main website, sales process, accounts, billing, and administration of the Services. When you submit a contact form, booking request, chat message, or payment request on a website operated for a local business, that business also receives and controls the information for its own customer relationship. Foray processes that information to host and support the website. The local business may have its own privacy practices, and privacy requests about its use of your information should also be directed to that business.

This policy does not govern third-party websites, applications, or services linked from the Services.

2. Information we collect

Depending on how you use the Services, we collect:

• Contact and business information: name, business name and category, email, phone number, address or service area, website, business hours, and request details.
• Account and security information: account email, password hash, session records, password-reset records, multi-factor authentication settings, role, and security and audit logs.
• Website content: logos, images, business descriptions, services, prices, blog content, reviews, domain settings, and other materials submitted or approved for publication.
• Lead, booking, and communication information: form and chat content, customer contact details, appointment information, CRM notes, email or SMS delivery records, consent confirmations, opt-out status, and limited excerpts and metadata from replies routed through the platform.
• Transaction information: selected services, price, currency, billing status, payment-provider customer and transaction identifiers, and receipts. Payment card details are collected and processed by the payment provider, not stored by Foray.
• Device and usage information: IP address where needed for security, form protection, or lead records; browser or device information; page path; referrer path; campaign source; feature interactions; date; and a hashed user-agent or IP-derived deduplication value. We do not use this data for cross-site behavioral advertising.
• Public and provider information: business contact details, public profile information, ratings, and reviews from public sources or integrations such as Google Business Profile and Yelp.

We collect information directly from you, from local-business customers and their website visitors, automatically from browsers and devices, from service providers, and from lawful public sources.

3. How we use information

• Provide, personalize, host, maintain, and support websites and platform features.
• Respond to requests, create website drafts, manage leads and bookings, and deliver requested communications.
• Authenticate users, secure accounts, prevent fraud and abuse, troubleshoot, and enforce our terms.
• Process purchases, subscriptions, receipts, cancellations, and website-transfer requests.
• Measure site and feature performance, attribute outreach, improve the Services, and create aggregated reports.
• Send operational notices and, where permitted, marketing or follow-up messages. You may opt out of promotional messages at any time.
• Comply with law, protect rights and safety, resolve disputes, and maintain appropriate business records.

Where a law requires a legal basis, we rely as applicable on performing a contract, your consent, compliance with legal obligations, and our legitimate interests in operating, securing, and improving the Services.

4. How we disclose information

We disclose personal information only as reasonably necessary:

• Local businesses and account users. Leads, bookings, payments, analytics, and website-management information are available to the relevant business and authorized account users.
• Service providers. Vendors may provide hosting, databases, object storage, email, SMS, payments, maps, reviews, domain and security services. Current integrations may include Stripe, Resend, Twilio, Google, Yelp, and infrastructure providers.
• Legal and safety recipients. We may disclose information to comply with valid legal process or to protect users, the public, Foray, and the Services.
• Business transactions. Information may be transferred as part of a merger, financing, reorganization, sale, or transfer of all or part of the business, subject to appropriate protections.
• At your direction. We disclose information when you request or consent to the disclosure.

We do not sell personal information for money or share it for cross-context behavioral advertising. We may publish business information and content that a customer directs us to make public on its website.

5. Retention and security

We keep personal information only as long as reasonably necessary for the purposes described above, including to provide an active account or website, honor opt-outs, complete transfers, maintain security and audit history, satisfy tax or accounting duties, and establish or defend legal claims. Retention varies by record and legal requirement. By default, identifiable visit events are retained for up to 180 days, feature-usage events for up to 365 days, and daily aggregate analytics for up to 730 days; deployment settings may shorten or extend these periods where permitted.

We use administrative, technical, and physical safeguards appropriate to the nature of the information, including access controls, encrypted transport, hashed session credentials, limited provider access, and security logging. No system is completely secure, so we cannot guarantee absolute security.

6. Your choices and privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, or a portable copy of personal information; to object to or restrict certain processing; to withdraw consent; and to appeal a denied request. You may also opt out of marketing email using its unsubscribe method and revoke consent to automated messages through any reasonable method, including contacting us. We will not discriminate against you for exercising a privacy right.

Send a request to support@foraybusinessconsulting.com. Describe your request and the account, business, or website involved. We may need to verify your identity and authority before acting. Authorized agents may submit requests where permitted by law. We will respond within the period required by applicable law.

Some information may be exempt from a request or retained where required for security, legal compliance, transactions, or legal claims. If your request concerns a local business’s independent use of information, we may direct you to that business.

The Services are intended for businesses and general audiences, not children under 13. We do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided information.

7. International use and policy changes

Foray and its providers may process information in the United States and other countries where privacy laws may differ from those in your location. Where required, we use appropriate safeguards for international transfers.

We may update this policy as our Services or legal obligations change. We will post the revised version here, change the “last updated” date, and provide additional notice when required. Your continued use after an update is subject to the revised policy, but we will obtain consent where the law requires it.

8. Contact us

For questions, complaints, or privacy requests, email support@foraybusinessconsulting.com. Please do not send passwords, payment-card numbers, or other sensitive information by email.