Privacy Policy

Last updated August 25, 2026

TruePoint Digital ("TruePoint," "we," "us," "our") operates truepoint.agency and builds booking, deposit, and follow-up systems for automotive businesses. This policy explains what information we collect, why we collect it, who we share it with, and what control you have over it.

Who this policy covers

It covers three different groups, and the rules are a little different for each:

Visitors and prospects — anyone who browses truepoint.agency or fills out a form on it.
Clients — businesses that hire us and use a system we build and manage.
Our clients' customers — the people whose contact details sit inside a system we run for a client. We handle that data on the client's behalf, not for ourselves. See Data we handle for our clients.

Information we collect

From visitors and prospects

When you submit a form on this site, we collect what you type into it:

First name
Email address
Phone number
Business name and business type
Whether you agreed to receive text messages from us

From clients

Once you become a client, we also collect what we need to actually build and run your system: business address and service area, hours, services and pricing, deposit amounts, booking and staffing details, logins or connection access you choose to grant us (for example your Google Business Profile or a phone number you want texts sent from), and the answers you give on our onboarding form. Our onboarding form saves your progress in your own browser so you don't lose your answers if you close the tab — that copy stays on your device and is cleared once you submit.

Billing is handled by our payment processor. We see the plan, the amount, and whether a payment succeeded. We never see or store your full card number.

Automatically

Our host and our abuse-protection service keep standard server logs — IP address, browser type, the page requested, and the time — to keep the site up and to block bots, spam, and abusive traffic.

This site does not use cookies, advertising pixels, or third-party analytics. If that changes, we'll update this page before turning anything on.

How we use it

To reply to your inquiry and follow up about our booking and lead systems
To build, run, support, and improve the system we've set up for you
To send service messages — appointment confirmations, reminders, account and billing notices
To send SMS about your inquiry or your account, where you've agreed to it
To take payment and keep our own financial records
To protect the site and our systems from fraud and abuse
To meet our legal and tax obligations

We do not sell your personal information, and we do not share it with third parties for their own marketing.

SMS messaging

If you give us your phone number and agree to receive texts, we may send you SMS messages related to your inquiry or your account with TruePoint Digital. Message and data rates may apply, and message frequency varies. You can reply STOP at any time to opt out, or HELP for help. Opting out of marketing or follow-up texts does not stop essential service messages about an active account, such as a billing failure.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All other categories exclude text messaging originator opt-in data and consent — this information is not shared with any third parties.

Consent to receive text messages is never a condition of buying anything from us.

Who we share it with

We share information only with the service providers we need to run the business, and only so they can do that job for us. They are not allowed to use it for their own purposes:

HighLevel / LeadConnector — our CRM and marketing platform. Contacts, conversations, pipelines, calendars, and the automations we build all live here.
Telecom providers (including Twilio, via HighLevel) — to actually deliver calls and text messages, and to register messaging campaigns with mobile carriers as US regulations require.
Vercel — website and form-endpoint hosting.
Arcjet — bot, spam, and rate-limit protection on our form endpoints.
Resend and Google Workspace — sending and receiving email, including internal notifications when a form is submitted.
Our payment processor — to charge subscriptions and keep billing records.

We may also disclose information if the law requires it — a subpoena, court order, or valid government request — or where we need to in order to protect our rights, our clients, or someone's safety. If the business is ever sold or merged, information may transfer as part of that deal; this policy travels with it.

Data we handle for our clients

A large part of what we do is running a system that holds our client's customer list — names, phone numbers, emails, appointments, and message history.

For that data, the client is responsible for it and controls it. We only process it on their instructions to run the system they hired us to build.
We do not use a client's customer list for our own marketing, do not message it for our own purposes, and do not share it with other clients or sell it. Ever.
Getting proper consent from those customers — including consent to text them — is the client's responsibility, as set out in our Terms & Conditions.
If you are a customer of one of our clients and want your information corrected or deleted, the fastest route is to contact that business directly. You can also contact us and we'll pass the request along and act on their instruction.

How long we keep it

Prospect inquiries — kept while there's a realistic chance of doing business, then deleted on request at any time.
Client account and system data — kept for as long as the account is active. After cancellation, see the export window in our Terms & Conditions; after that we delete or return it on request.
Billing and tax records — kept as long as tax and accounting law requires, even after an account closes.
SMS opt-in and opt-out records — kept as proof of consent for as long as messaging regulations require, because deleting them would leave us unable to show consent existed.

Your rights

Whoever you are and wherever you live, you can ask us to:

Tell you what information we hold about you
Correct it if it's wrong
Delete it
Send you a copy of it
Stop marketing to you, by email or by text

Email or call us using the details at the bottom of this page and we'll handle it, normally within 30 days. We won't treat you differently or charge you more for exercising any of these rights. We may need to confirm who you are first, so we don't hand your data to someone else.

If you're a California resident: we do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we do not use it for cross-context behavioral advertising.

Security

Form submissions travel over HTTPS. Access to our CRM and hosting is limited to the people who need it and protected by strong passwords and two-factor authentication where the platform supports it. API keys and credentials are stored as environment secrets, never in our website code. No system is perfectly secure, so we don't promise it is — but if a breach affects your personal information, we'll tell you and the relevant authorities as the law requires.

Children's privacy

Our site and services are for businesses, not children. We don't knowingly collect information from anyone under 13. If you believe a child has given us information, contact us and we'll delete it.

Where your information is handled

We're based in Arizona, and our providers store and process data in the United States. If you're contacting us from outside the US, your information will be handled here.

Changes to this policy

If this policy changes we'll update the date at the top of this page. For a change that materially affects how we handle your information, we'll tell active clients directly.

Contact us

TruePoint Digital
Arizona, United States
Phone: 602-903-7259
Email: truepointdigitalbp@gmail.com