What we collect, why we have it, and who else ever sees it.
This describes how the store actually works today. The highlighted values still need filling in, and it should be read by a lawyer before it goes live — particularly the messaging-consent section, which carriers read during 10DLC review.
This policy covers [LEGAL ENTITY NAME] ("AMV", "we") and this storefront. It describes how we handle information about the agencies who buy from us and the people at those agencies.
It is not the privacy policy for any site we build for you. A site we deliver is yours, published under your name, and needs its own policy.
After checkout the thank-you page asks for the brief: your agency name, email, phone, order number, which service you bought, your client's business name, the city or market they serve, their trade, a link to assets, and anything else you want to tell us.
Your name, agency name, email, phone, the topic, and your message.
Stripe collects and processes payment details. We receive a confirmation and a record of what was bought — see section 5.
Standard technical data when you browse: IP address, browser and device type, pages viewed, and the site that referred you.
We don't ask for and don't want sensitive categories of personal data. Please don't put them in a form field.
Where the law requires a lawful basis, ours is performing our contract with you, our legitimate interest in running the business, your consent where we ask for it, and compliance with legal obligations.
Our forms ask you to agree to be contacted by email, phone or text about your order. Ticking that box is consent to receive those messages at the number you gave us.
Consent to receive text messages is not a condition of purchase.
We do not share mobile numbers or SMS consent with third parties or affiliates for their own marketing. Numbers are shared only with the messaging providers who deliver our messages, and only to deliver them.
Carriers read exactly this language during 10DLC registration, and a missing opt-out or sharing statement is a common rejection reason. Since AMV sells A2P numbers, this page has to hold up to that review.
Payments are processed by Stripe. Card details go to Stripe directly and we never see or store your full card number.
We keep what we need for accounting: what was purchased, the amount, the date, and the last four digits with the card brand. Stripe handles the rest under its own privacy policy.
Delivering the work usually means handling information about your client's business, and sometimes about people who contact your client — leads from a form or a campaign we run.
For that information you are the controller and we act on your instructions. We use it only to do the work you've asked for, we don't use it for our own purposes, and we don't market to your client or to their leads.
You're responsible for having the right to give us that data and for the privacy notice your client shows their own customers.
We don't sell personal information and we don't share it for cross-context behavioural advertising, as those terms are defined under California law.
Order and billing records are kept for [RETENTION PERIOD] to meet tax and accounting requirements. Briefs, support messages and project files are kept while you're a customer and for [PROJECT RETENTION] afterwards, so we can pick work back up or answer a question about it.
Ask us to delete something sooner and we will, unless we're required to keep it.
Access is limited to the people who need it, data moves over encrypted connections, and payment data stays with Stripe rather than with us.
No system is perfectly secure, and we won't claim otherwise. If a breach affects your data we'll tell you and the relevant regulator as the law requires.
Depending on where you are, you can ask us to:
Email [PRIVACY EMAIL] and we'll respond within the period the law allows. We won't treat you differently for asking.
The store uses cookies and similar technology to keep the site working, to remember choices you make (such as monthly or one-time pricing), and to understand how the store is used.
Your browser can block or delete cookies. Blocking the essential ones will break parts of the store.
This is a business-to-business service and isn't directed at children. We don't knowingly collect information from anyone under 16, and we'll delete it if we learn we have.
If this policy changes, the date at the top changes with it. Material changes get told to you directly rather than quietly published.