Newrise Privacy Policy
DRAFT draft-2026-11 — for lawyer review. Not legal advice. Effective [EFFECTIVE DATE].
This policy explains how [LEGAL NAME], doing business as Newrise ("we", "us"), handles personal information. Questions: hello@newrise.agency or [MAILING ADDRESS].
We provide content services to businesses. We are not a consumer service and we do not sell personal information.
What we collect
| From | What | Why |
|---|---|---|
| Our clients | Business name, contact name, email, billing details (held by Stripe; we see only the last 4 digits and card brand), onboarding answers, material you send us | To provide and bill for the Services |
| Public reviews of our clients | The reviewer's public display name, star rating, review text and date, as shown on the review platform | To draft replies for our client |
| Businesses we contact about our services | Business name, public business details (address, phone, website, rating and public reviews from Google), a business contact email, and whether they replied or unsubscribed | To send a small number of relevant emails and honor opt-outs |
| Website visitors | Basic server logs (IP address, browser, pages, time) | Security and fixing problems |
We do not want sensitive information, including health information. Clients agree not to send it (Client Terms §6). If we receive it by mistake we delete it.
Google user data
If a client gives our Google account Manager access to their Google Business Profile, we use the Google Business Profile API only to read that client's reviews so we can draft replies for them. We do not post, change the profile, or use the data for any other purpose, for advertising, or to train AI models. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
Who we share it with
Only service providers that help us run the Services, under their own terms and security commitments:
| Provider | What for |
|---|---|
| Amazon Web Services (Lightsail, S3) | Hosting, database and encrypted backups (US) |
| Venice.ai | AI drafting (inputs not used to train models) |
| Stripe | Payments and billing |
| Resend | Sending service emails |
| Instantly | Sending outreach emails and managing opt-outs |
| Business Profile and Places data | |
| Telegram | Internal notices to our own staff (contain only business names and job status, not client materials) |
| Cloudflare | Domain name service |
We may also disclose information if the law requires it, or to a buyer of our business, who must keep this policy's protections.
How long we keep it
- Client materials and deliverables: for the life of the agreement, then deleted within 90 days of it ending (backups roll off within a further 30 days).
- Billing records: as long as tax law requires (generally 7 years).
- Outreach records: kept so we honor opt-outs; an opt-out is kept permanently.
- Server logs: up to 30 days.
Your choices
- Outreach: every email we send about our services has an unsubscribe link. We honor opt-outs right away and never email that address again.
- Access, correction, deletion: email hello@newrise.agency. We will respond within 30 days. If you left a public review of one of our clients, you can edit or delete it on the review platform.
- Clients can ask us to delete their materials at any time.
Security
Data is stored in the United States on access-controlled servers, encrypted in transit, with encrypted offsite backups. No system is perfectly secure; if a breach affects your information we will tell you as the law requires.
Changes
We will post changes here with a new effective date, and email clients about material changes.