This Privacy Policy explains how Connect+ collects, uses, shares, and protects personal information in connection with the Connect+ platform, the Connect+ Marketplace App for GoHighLevel, our website at connecthq.ai, and related services (the "Service").

Connect+ provides B2B software to business customers ("tenants") who use the Service to manage their own lead intake, customer communications, and scheduling. Throughout this Policy:

• "You" generally means an individual who interacts directly with Connect+ — for example, a tenant administrator who creates an account, a website visitor at connecthq.ai, or a person who contacts our support team.
• Where we process personal information about a tenant's end customers (for example, contact records, calls, or messages that flow through a tenant's GoHighLevel sub-account), we do so on behalf of and under instructions from that tenant. In that role, Connect+ acts as a "service provider" or "data processor" — the tenant is the controller and is responsible for the legal basis, notices, and consents required for that processing.

1. Information We Collect

1.1 Information you give us directly

When you sign up for the Service, install the Connect+ Marketplace App, contact us, or otherwise interact with us, we may collect:

• Account information: name, business name, email, phone number, password, role/title.
• Billing information: billing contact, billing address, payment method details (collected and stored by our payment processor — see Section 4).
• Support and communication content: messages you send to support, survey responses, content of demo calls.

1.2 Information we collect automatically

When you use the Service or visit our website, we automatically collect:

• Device and log data: IP address, browser type and version, operating system, device identifiers, referring URL, pages viewed, timestamps.
• Usage data: features you use, configuration choices, error events, performance metrics.
• Cookies and similar technologies: as described in Section 6.

1.3 Information we process on behalf of tenants

When a tenant uses the Service to operate its business, personal information about that tenant's end customers and prospects flows through Connect+. This may include:

• Contact details (name, phone number, email, address);
• Conversation content (SMS messages, chat transcripts, voice call recordings and transcripts produced by Salesape or by tenant-configured AI agents);
• Service and booking information (service type, quotes, scheduling, job status from Housecall Pro);
• Marketing and source data (lead source, campaign, tags, pipeline stage).

Connect+ processes this information solely to provide the Service to the tenant and pursuant to the tenant's instructions. End customers should refer to the privacy notice of the tenant business they are interacting with for information about how their data is used.

1.4 Information from third parties

We may receive information about you from third parties, including:

• Authentication providers (Google) when you sign in;
• Integration platforms (GoHighLevel, Housecall Pro) when you authorize Connect+ to access your accounts on those platforms;
• Service providers that help us with analytics, security, fraud prevention, and customer support.

2. How We Use Information

We use personal information to:

• Provide, operate, maintain, and improve the Service;
• Authenticate users, prevent fraud, and secure the Service;
• Process payments and manage billing;
• Respond to support inquiries and communicate with you about the Service (including service announcements and updates);
• Send marketing communications about Connect+ where permitted by law — you can opt out at any time using the unsubscribe link in our emails or by contacting us;
• Analyze usage to understand how customers use the Service and to develop new features;
• Comply with legal obligations, enforce our Terms, and protect our rights, property, and safety and that of others.

We process personal information about tenant end customers only as described in Section 1.3 and only on behalf of the relevant tenant.

2.1 AI and automated processing

The Service uses machine learning and generative AI models to power features such as voice agent conversations, message generation, lead qualification, and routing. Unless we expressly state otherwise in writing, Connect+ does not use customer or end-customer personal information to train AI models that are made available to other customers. We may use de-identified, aggregated, or technical data (for example, error patterns, latency, model performance metrics) to improve and operate the Service.

3. How We Share Information

We share personal information only in the limited circumstances described below. We do not sell personal information.

3.1 Service providers (subprocessors)

We share personal information with third-party service providers that help us operate the Service, under written agreements that require them to handle the information consistent with this Policy. Categories include:

• Cloud hosting and database infrastructure;
• Communications infrastructure (SMS, voice, email);
• AI and machine learning model providers;
• Analytics and product telemetry;
• Payment processing;
• Customer support tools;
• Security and fraud prevention.

A current list of our material subprocessors is available at [connecthq.ai/subprocessors] (or upon request).

3.2 Tenants and their authorized users

Information about a tenant's end customers is accessible to that tenant and its authorized users through the tenant's GoHighLevel sub-account and the Connect+ dashboard. Connect+ does not share end-customer information across tenants.

3.3 Integration platforms

When a tenant connects the Service to GoHighLevel, Salesape, Housecall Pro, Google Business Profile, or other integrated platforms, personal information flows between Connect+ and those platforms as needed to operate the integration the tenant has configured.

3.4 Legal and safety

We may disclose personal information if we believe in good faith that disclosure is required by law, legal process, or government request; to enforce our Terms; to detect, prevent, or address fraud, security, or technical issues; or to protect the rights, property, or safety of Connect+, our customers, or others.

3.5 Business transfers

If Connect+ is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be transferred as part of that transaction, subject to standard confidentiality protections.

4. Payment Information

Payment card details are collected and processed by our payment processor, and are subject to the payment processor's privacy policy. Connect+ does not store full payment card numbers on its own systems.

5. Data Retention

We retain personal information for as long as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Specifically:

• Account and billing records: retained while your account is active and for a reasonable period after termination as required for tax, accounting, and audit purposes.
• Customer Data processed on behalf of tenants: retained for the duration of the tenant's account and, after termination, deleted in accordance with our Terms (subject to backup cycles and legal retention obligations).
• Logs and security records: retained for a limited period as needed for security, debugging, and audit.

6. Cookies and Similar Technologies

Our website and the Service use cookies and similar technologies to authenticate sessions, remember preferences, analyze usage, and improve the product. Categories of cookies we use include:

• Strictly necessary cookies — required for the Service to function.
• Analytics cookies — help us understand how the Service is used.
• Preference cookies — remember your settings.

You can control cookies through your browser settings. Disabling some cookies may affect the functionality of the Service.

7. Security

We implement administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. These include encryption in transit (TLS), encryption of sensitive credentials at rest, role-based access controls, webhook signature verification, audit logging, and regular review of security practices. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. International Data Transfers

Connect+ is based in the United States and may store and process personal information in the United States and in other countries where our service providers operate. If you access the Service from outside the United States, you understand that your information may be transferred to, stored, and processed in jurisdictions whose data protection laws may differ from those of your jurisdiction. We use appropriate safeguards (such as Standard Contractual Clauses) where required by applicable law.

9. Your Rights

Depending on your jurisdiction, you may have rights regarding your personal information, including the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of your personal information;
• Object to or restrict certain processing;
• Receive a copy of your personal information in a portable format;
• Withdraw consent where processing is based on consent;
• Lodge a complaint with a supervisory authority.

To exercise these rights, contact us at rvidal@connectagency.ai. We will respond within the timeframe required by applicable law. If you are an end customer of one of our tenants, please direct your request to the tenant business, since the tenant is the controller of your information; we will support the tenant in responding.

10. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you certain rights regarding your personal information, including the rights to know, delete, correct, and limit certain processing, and the right not to be discriminated against for exercising your rights. Connect+ does not sell or share personal information (as those terms are defined under California law) for cross-context behavioral advertising.

11. Children's Privacy

The Service is not directed to children under the age of 16 and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will take steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email to the address associated with your account, by notice within the Service, or by updating the "Last updated" date above. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

13. Contact

Questions, requests, or complaints about this Privacy Policy or our handling of personal information:

Email: rvidal@connectagency.ai