Legal
Privacy policy
What we collect, why we collect it, and what you can tell us to do with it.
The short version
We are Immaculate AI Systems LLC, a Utah limited liability company based in Lehi, Utah. This policy covers immaculateaisystems.com, the findability audit at /the-audit, and the onboarding forms we send to clients who have signed with us.
We do not sell your information. We do not run advertising trackers on this site. We collect what you type into our forms, plus the technical information any web server receives, and we use it to run the audit you asked for and to talk to you about it.
If you would rather we did not hold anything about you, tell us and we will delete it.
Who we are, and who this is about
Immaculate AI Systems LLC is a separate legal entity registered in Utah. It is not a trade name of any other company. Where this policy says we, us or our, it means Immaculate AI Systems LLC.
Our founder also owns Immaculate Contracting LLC, whose websites we built and show as work on our results page. That relationship is disclosed there. It is mentioned here because the two businesses share a phone number: if you call us, you may reach a person who answers for both. Your information is not passed between the two companies for marketing.
What we collect
When you run the findability audit
The audit form asks for your business name, your city, your trade or industry, your website address, and whether you are a service-area business. None of that has to be personal information, and you are free to describe a business without naming a person.
The free check runs on that alone. If you ask for the full report, we also ask for your email address, and at that point we keep a record of the enquiry containing everything above, the score we calculated, the time, and the IP address the request came from.
We also record a per-day count against your IP address so that one connection cannot run the audit an unlimited number of times. That counter is automatically deleted after roughly 24 hours.
What the audit does with the website you name
When you give us a website address, our system fetches a small number of pages from it — the homepage, robots.txt, sitemap.xml, llms.txt, and the privacy policy if the homepage links to one. It reads only what is already published for anyone to see. It does not log in, submit forms, or attempt to reach anything private.
Only enter a website you own or are authorised to check. If you enter someone else's site, you are asking us to fetch it on your behalf.
To produce parts of the full report we may send your business name, city and website address to Google, so we can look up your Google Business Profile and measure how fast your site loads. See who we share information with.
When you fill in a client onboarding form
Our onboarding pages are sent only to businesses that have signed with us. They collect the answers you give about your business — contact name, email, and the details needed to build what you have asked for — along with which access steps you have marked as done, and the IP address the submission came from.
Never type a password, API key or bank detail into those forms. They have no password field, and they say so on the page. We run an automatic check that flags a submission which appears to contain a credential so that a person can remove it — that check is a safety net and not a guarantee, so please do not rely on it.
While you are filling those forms in, your answers are saved as a draft in your own browser so that a closed tab does not cost you the work. That draft stays on your device and is cleared once the form has been successfully submitted. You can clear it yourself at any time by clearing your browser's site data.
When you contact us
If you email or call us, we keep what you send and our reply, so we have a record of the conversation.
Automatically, as with any website
Our host records the technical details of each request — IP address, the page requested, the time, your browser's user agent, and similar — and uses them to serve the site and to protect it from attacks and automated abuse.
This site sets no advertising or analytics cookies. Our fonts are served from our own domain rather than a font network, and there is no advertising tag, session recorder or cross-site tracking pixel anywhere on it. Our hosting provider may set a small number of strictly necessary cookies for security and bot protection.
One script does load from our hosting provider: Cloudflare Web Analytics, which records that a page was viewed and how quickly it loaded. It is how we know whether the site is working. It sets no cookies, stores nothing on your device, does not fingerprint you by IP address or browser, and does not follow you to any other website. Cloudflare strips the IP address at its network edge rather than storing it, so we never see one from it, and we cannot pick you out of the numbers it gives us.
Why we use it
- To run the audit you asked for and send you the report.
- To reply to you, and to follow up about work you have asked about.
- To deliver and support the services a client has engaged us for.
- To keep the site working and to stop abuse — the rate limits above exist because a public tool that spends money on each request has to be capped.
- To meet our legal, accounting and tax obligations.
We do not make automated decisions about you that produce legal or similarly significant effects.
How we contact you
If you give us your email address, we will use it to send you the report you asked for and to follow up about it. If you tell us to stop, we will stop — reply to any message and say so, or use the contact details below.
If you give us a phone number, we may use it to reach you about your enquiry or the work we are doing for you.
Who we share it with
We do not sell your personal information, and we do not share it with anyone for their own marketing.
We use a small number of service providers who handle information on our behalf, under contract, and only to provide their service to us:
- Cloudflare — hosts this website and runs the audit. Enquiry records and onboarding submissions are stored on Cloudflare's infrastructure. Cloudflare also provides the cookieless page-view analytics described above.
- Google — when we run a full report, we query Google's public APIs for your Business Profile listing and your site's loading speed. Google also provides the email service the address below is served by.
- HighLevel — the customer relationship system we use to keep track of enquiries and client work.
We will also disclose information if the law requires it, or where we need to establish or defend a legal claim. If the business is ever sold or merged, records may transfer with it, and this policy would continue to apply to them until you were told otherwise.
Where it is held
We are in the United States and our providers operate globally, so information may be stored or processed outside the country you are in.
How long we keep it
We keep enquiry and client records for as long as we need them for the purposes described above — for an enquiry, that means while there is a realistic prospect of working together; for a client, for the length of the engagement and for as long afterwards as our tax and accounting obligations require.
The per-IP rate-limit counters described above expire automatically after about a day. Everything else is deleted on request.
Your choices
Wherever you live, you can ask us to:
- tell you what we hold about you;
- correct it if it is wrong;
- delete it;
- stop sending you anything.
Ask using the contact details below and we will deal with it. We will not charge you, and we will not treat you differently for asking.
Depending on where you live — including under the Utah Consumer Privacy Act, the California Consumer Privacy Act and similar state laws — you may have those rights by statute rather than by our choice, along with the right to appeal if we refuse. We may need to confirm who you are before we act, so that we do not hand your information to somebody else.
Security
We keep the number of places your information lives deliberately small, we use providers who encrypt it in transit and at rest, and the site itself is served only over HTTPS. No system is perfectly secure, and we will not pretend otherwise.
Children
This site sells services to businesses. It is not directed at children, and we do not knowingly collect information from anyone under 18. If you believe a child has sent us something, tell us and we will delete it.
Other people's websites
Our audit reports and our pages link to sites we do not control, including the site you asked us to check. This policy does not cover them.
Changes
If we change this policy we will change the date at the top. If the change is significant and we hold your contact details, we will tell you directly rather than leaving you to notice.
Contact us
For anything in this policy — including a request to see or delete what we hold — reach us at: