Privacy

PointedTo, Ontario, Canada. Effective 2026-10-16. Written to be read, not to cover anyone.

What we collect, and why

• From the free-report form: your business name, town, province or state, trade, website and email, and the consent wording you agreed to. Used to produce your report, send it to you, and send one short follow-up about the monthly report, as the consent box says.
• From your emails: anything you choose to tell us, like the jobs you want most or the companies you lose work to. Used only for your reports.
• From public sources: what AI assistants and search engines say about your business, and what your public website and listings show. This is public information about a business, recorded on dated runs.
• From prospecting: if we wrote to you first, your business email address came from your own website, and we keep a record of where and when we found it. We do not buy lists or take addresses from directories.
• Payment: handled by Stripe. We never see your card number.
• Report opens: we count how often each report page is opened, with no IP address or device details kept. Whether a report was opened can decide whether we send one follow-up.

What we don't do

• We don't sell or rent your information. These services handle it only to run PointedTo:
  • Stripe (payments; we never see your card number);
  • Google Workspace (email);
  • Cloudflare (hosts pointedto.com, keeps free-report form requests for up to 90 days, and keeps a running count of how often each report page is opened);
  • GitHub and Notion (our private records);
  • OpenAI, Perplexity and SerpAPI (they receive the questions we ask, which name your town and trade, and for clients one question with your business name);
  • Anthropic (may draft a client's fixes from the report's findings, and gives each client report a second read before it's sent);
  • Google Fonts (serves the typefaces on our pages, so Google receives your browser's address when a page loads);
  • Google Maps Platform (looks up your public business listing);
  • MillionVerifier (checks an email address works before we write);
  • PostGrid (prints and mails postcards).
  Some of these store data in the United States.
• We don't log in to your website, Google Business Profile, Yelp, or anything else. We write words; you paste them.
• We can't promise an AI mention, a ranking, or leads. We measure and explain.

Email

Every commercial email we send identifies the sender, carries our mailing address, and has a working unsubscribe honoured within 10 business days (usually the same day). Reply "unsubscribe" to any email or use the unsubscribe page. This is how we comply with Canada's Anti-Spam Legislation and, for U.S. recipients, CAN-SPAM.

How long we keep it

If we wrote to you and you never became a client, we delete your details 2 years after our last email, sooner if you ask. An unsubscribe is kept for as long as we run PointedTo, so we never write to you again. Client billing records are kept 6 years, because Canadian tax rules require it.

Your rights

Ask us at any time what we hold about your business, to correct it, or to delete it; we'll do so within 30 days. Email [email protected]. Jordan Huzevka is responsible for privacy at PointedTo. If you're not satisfied, you can contact the Office of the Privacy Commissioner of Canada.

Terms

Price, cancellation and what we promise are on the terms page.