Legal

Privacy Policy

Effective October 24, 2026 · Last updated October 24, 2026

Firmroot Digital LLC (“Firmroot Digital,” “Firmroot,” “we,” “us” or “our”), based in Phoenix, Arizona, designs and builds custom websites, web and mobile applications, AI integrations and business automations. This Privacy Policy explains how we collect, use and share personal information through our website at firmrootdigital.com and in connection with our services (together, the “Services”).

By using the Services or giving us information, you acknowledge that you have read this policy. Please also read our Terms of Service.

01Information We Collect

What we collect depends on how you interact with us:

  • Contact details: your name, email address, phone number and company when you fill out our contact form, book a call, email or call us.
  • Project information: the services you’re interested in, your budget range, the package you selected, your message, and anything else you share with us about your business or project.
  • Client materials: content, files, data, and account access you or your organization provide so we can deliver the Services.
  • Billing information: billing contacts, services purchased and transaction records. Payments are handled by third-party payment processors, and we do not store full payment card numbers.
  • Communications: the content of emails, form submissions, calls and meetings with us.
  • Technical information: when you submit our contact form we record your IP address, browser user agent and the page that referred you, which helps us prevent spam and abuse. Our hosting provider also keeps standard server logs.
  • Usage information: aggregated data about how visitors use the website, such as pages viewed, referring sites, device type and approximate country, as described in Section 5.

We collect this information directly from you, automatically when you use the website, and occasionally from third parties such as clients and referral partners.

02How We Use Information

We use personal information to:

  • Respond to inquiries, schedule calls and prepare proposals and quotes
  • Design, build, deliver, support and improve the Services
  • Invoice, process payments and manage our client relationships
  • Send service and administrative messages, and updates you have asked to receive
  • Understand how the website is used so we can improve it
  • Use automation, software tools and artificial intelligence to help us deliver and support the Services
  • Keep the website and Services secure, and detect and prevent spam, fraud and abuse
  • Comply with legal obligations, enforce our agreements and protect our legal rights

We may also create aggregated or de-identified information that no longer identifies you.

03Client Data We Process on Behalf of Clients

When we build or run websites, applications or automations for a client, we may access or process information that belongs to that client or to its customers, employees or contacts, for example records in a CRM, documents moving through a workflow, or data in a database we build. We handle that information on the client’s behalf and only as our agreement with the client allows.

The client is responsible for its own privacy practices and for giving any notices and obtaining any consents needed for us to process that information. Where a project involves protected health information, we use only tools and AI services that support HIPAA compliance and will sign a business associate agreement. If one of our clients provided your information to us, please direct privacy questions to that client.

04How We Share Information

We share personal information only as needed to run our business and deliver the Services:

  • Service providers that host, store or process information for us, including website hosting (Vercel), database hosting (Supabase), email delivery (Brevo), email, calendar and scheduling (Microsoft 365), payment processing, and AI and software tools used to deliver the Services
  • Subcontractors and collaborators who help with a project, under confidentiality obligations
  • Professional advisors such as lawyers, accountants and insurers
  • Legal and safety: when we believe disclosure is required by law or legal process, or is necessary to protect the rights, property or safety of Firmroot Digital, our clients or others
  • Business transfers: as part of a merger, acquisition, financing or sale of assets
  • With your consent or at your direction

We do not sell personal information, and we do not share it with advertisers.

05Cookies and Analytics

We use Vercel Web Analytics to understand how visitors use the website. It reports aggregated information such as pages viewed, referring sites, browser, device type and country. It does not use cookies or track you across other websites.

We do not use advertising or remarketing cookies. The admin area of this website uses essential cookies to keep authorized users signed in. If you book a call, Microsoft’s booking page may set its own cookies under Microsoft’s privacy statement.

Most browsers let you block or delete cookies in their settings. Because there is no common standard for “Do Not Track” signals, we do not respond to them.

06Email Communications

If you contact us, we will reply about your inquiry. If you opt in to news and updates, you can unsubscribe at any time by replying to any message or emailing info@firmrootdigital.com. Even if you opt out of updates, we may still send messages about an active inquiry, project or invoice.

07Data Retention

We keep personal information for as long as we reasonably need it for the purposes in this policy, including to provide the Services, keep business records, meet legal, tax and accounting requirements, resolve disputes and enforce our agreements. Inquiries that don’t become projects are kept while they are useful for following up and deleted on request. We may keep de-identified or aggregated information indefinitely.

08Data Security

We use reasonable administrative, technical and physical safeguards to protect personal information, including encrypted connections, access controls and reputable infrastructure providers. No website, transmission or storage system is completely secure, so we cannot guarantee absolute security. You are responsible for keeping any passwords or credentials you hold confidential.

09Your Privacy Rights and Choices

Depending on where you live, and subject to exceptions under applicable law, you may have the right to:

  • Find out whether we process your personal information and access it
  • Correct inaccurate personal information
  • Delete personal information we collected from you
  • Get a copy of your personal information in a portable format
  • Opt out of the sale or sharing of personal information or targeted advertising (we do neither)
  • Not be treated differently for exercising these rights

To make a request, email info@firmrootdigital.com with the subject line “Privacy Request.” We will verify your identity before acting on it, and we may decline requests where the law allows, for example when we must keep information for legal reasons. You may use an authorized agent where the law permits. If we decline your request, you can appeal by replying with the subject line “Privacy Appeal.”

10Children's Privacy

The website and Services are intended for businesses and adults and are not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact info@firmrootdigital.com and we will delete it.

11Third-Party Websites and Services

The website may link to or integrate with websites and services we don’t control, such as our booking page. This policy doesn’t apply to them, and we are not responsible for their content or privacy practices. Please review their privacy policies before sharing information with them.

12International Users

Firmroot Digital is based in the United States. Information we collect may be stored and processed in the United States or other countries where we or our service providers operate, where data protection laws may differ from those where you live.

13Governing Law

This policy is governed by the laws of the State of Arizona and applicable U.S. federal law, except where the privacy laws of your place of residence require otherwise. If you have a written agreement with us, it controls where it conflicts with this policy.

14Changes to This Policy

We may update this policy from time to time. When we do, we will post the new version on this page and update the “Last updated” date. If we make material changes, we may also notify you where the law requires.

15Contact Us

Questions about this policy, or want to exercise your privacy rights? Contact us:

Firmroot Digital LLC
Phoenix, Arizona, United States
Email: info@firmrootdigital.com
Phone: 602-351-5981