Data Handling Policy.

Who we are

Sound Automations is a business of Finsight LLC, based in Stamford, Connecticut. We run AI-powered marketing, lead generation, email outreach and custom automation for small and mid-sized businesses. This policy explains how we handle data when you visit our site and when we work for you.

When you visit or contact us

• Forms: when you book a strategy call we collect what you enter (name, email, phone, business details and your message) and use it only to respond to you.
• Analytics: we use privacy-friendly analytics that count page views without cookies or tracking you across other sites.

When we work for you

We only use the data needed for the services you've agreed to. Depending on the work, that may include:

• Your business details, brand guidelines and the messaging you approve
• Prospect lists we build for you, and replies to your campaigns
• Data in tools you ask us to connect, such as your CRM or calendar

We don't access financial records, payment details or employee records unless an automation you've asked for requires it, and then only within that scope.

People we contact on your behalf

Outreach goes to business contacts gathered from public sources (such as business registries, map listings and company websites) and from B2B data providers. Every message includes a clear way to opt out. Opt-out requests are honored promptly and those contacts are not emailed again. Anyone can ask us what data we hold about them, or ask us to delete it, using the contact details below.

Service providers

We use these kinds of providers to deliver our services:

We do not sell your data, and we don't use it to train AI models.

Google account data (Gmail)

If you connect a Gmail or Google Workspace mailbox with "Sign in with Google," our platform asks for permission to send email and read your mailbox (Google scope https://mail.google.com/), plus your email address. We use that access only to:

• Send the outreach emails and follow-ups you approved, from your mailbox
• Detect replies, bounces and unsubscribe requests to those emails, so the sequence stops and the reply shows up in your inbox in our app
• Send your replies to those prospects, in the same email thread

We only process messages that relate to your campaigns. We don't sell Google user data, use it for advertising, or use it to train AI models. People at Sound Automations don't read your email unless you ask us to for support, it's needed for security or the law requires it. Replies from prospects may be sent to our AI provider (Groq) to draft a suggested answer, which you review before anything is sent.

Sound Automations' use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The sign-in token is stored encrypted in our system keychain, never in our database. You can disconnect anytime by removing the mailbox in the app or at myaccount.google.com/permissions. When you disconnect, we delete the token right away, and you can ask us to delete related message data.

Text messages (SMS)

Sound Automations runs phone and text lines for our own business and for the businesses we serve (for example, a property's leasing or resident support line). When you call or text one of these numbers, we collect your phone number, the content of your messages and the time they were sent, and use them only to reply to you, help with your request (such as a tour, a question or a maintenance issue) and keep a record for the business you contacted.

• How you opt in: you text the number first, or you call and we miss your call and send one text so you can reach us by text. We don't send marketing texts to people who haven't asked to hear from us.
• Message frequency varies with your conversation. Message and data rates may apply.
• Opt out anytime: reply STOP and we'll stop texting you right away. Reply START to resume or HELP for help.

We do not sell, rent or share mobile phone numbers or SMS opt-in consent with third parties or affiliates for their marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third parties, except the service providers (such as Twilio) that deliver the messages for us.

How long we keep data

• Active clients: only as long as needed to run the service
• After cancellation: your data is returned or deleted within 30 days
• Logs: kept for up to 90 days for troubleshooting only

How we protect it

• All data travels over encrypted connections (TLS/HTTPS)
• Credentials and API keys are stored securely, never in plain text
• Access is limited to Sound Automations personnel who need it
• Accounts use strong passwords and two-factor authentication

Healthcare clients

If your business is subject to HIPAA, we'll sign a Business Associate Agreement (BAA) before any work begins. Please tell us during onboarding.

Your rights

You can ask us at any time for:

• A description of the data we hold about you or your business
• Deletion of that data
• A copy of this policy or a list of our current providers

Email mike@soundautomationsct.com and we'll respond within 5 business days.