Privacy Policy

Effective Date: November 7, 2026

1. Information We Collect

When you use the EmailMeNow IT Consulting Compliance Audit tool or fill out a form on our website, we may collect business contact information (name, email, domain name). We do not collect or store sensitive law firm data, client files, or internal network information.

2. How We Use Your Information

When you run a scan, we use your domain to query public DNS records, mail settings, and security headers, then build your report. We keep the domain you scanned, the scores, and the full report HTML for about 180 days. We also keep the domain and scan scores in our database over time so we can show how results change when you scan again. If you unlock a paid report or subscribe to a Watch plan, we keep the data needed to deliver that product (including contact details and report data) for as long as we need it for service delivery, monitoring, and business records. Checkout and order records are kept for about one year. We do not sell domain lookup data to third parties.

3. Questions About Your Data

Email us through the contact form if you have questions about data we hold. We will respond as we reasonably can, but we do not promise automatic deletion by a specific date.

4. Payment Processing

If you unlock a detailed audit report or subscribe to cybersquat domain monitoring, payment is processed securely via Stripe. EmailMeNow IT Consulting does not capture, route, or store your credit card information on our servers. For monitoring subscriptions we store your email, brand domain, and Stripe customer/subscription IDs so we can deliver weekly reports and honor cancellations.

5. Texas SB 2610 (educational context)

Our audit tools are designed to help Texas law firms assess their security posture in accordance with TDRPC Rule 1.05 and Texas SB 2610. SB 2610 may help limit exemplary damages for eligible businesses that maintain a documented cybersecurity program; not legal advice or a guarantee.

6. Site Analytics

Public pages load Google Analytics and Ahrefs Web Analytics so we can see which pages are used. Ahrefs Web Analytics does not use cookies or collect personal data by default. Google Analytics may set cookies. Both scripts are limited by the site content-security policy to their own hosts. Audit, contact, and payment data are not sent to those analytics tools.

7. Analytics Reader privacy notice

This notice describes the planned EmailMeNow Analytics Reader, separate from the website’s public audit and monitoring products. The Reader is not yet connected to live Google Analytics data.

EmailMeNow IT Consulting intends to request only Google’s analytics.readonly permission to prepare owner-authorized traffic, landing-page, and configured key-event reports for emailmenow.com’s designated GA4 property. That account-level permission may authorize access to other Analytics properties available to the signed-in account; the Reader’s intended queries are limited to emailmenow.com. We do not intend to write or change Analytics settings.

Google’s Analytics MCP connector will process results on a Cursor-hosted Grok Bot computer. The assistant will use the results to prepare reports stored on the reporting platform. Other bots belonging to the same owner share that computer; processing is not local-only. We intend to use and share Google data only as necessary to provide the requested reports, protect security, or meet legal obligations—not for advertising, sale, or general-purpose model training. We will review the applicable provider settings and obligations before live use.

Our intended retention period for downloaded Analytics data and saved reports is one year from first collection. Automatic cleanup is not active. For access, deletion, or retention questions, email support@emailmenow.com. We will handle requests for copies we control and request removal of provider-held copies through the provider’s available process; provider-retained copies remain subject to applicable policies and legal or security exceptions. We do not promise immediate erasure of all backups.

Credentials would be retained only while access remains enabled. You can revoke authorization through your Google Account’s third-party connections settings. Revoking access stops future authorized retrieval but does not itself delete existing reports, conversations, or downloaded copies; credential removal and report cleanup are separate steps.

The Reader is being prepared to adhere to the Google API Services User Data Policy, including its Limited Use requirements. Live use will begin only after the applicable data-handling procedures are in place.