Privacy Policy

Overview

This Privacy Policy explains what we collect, how we use it, and your choices. It applies to marshland.software and all Marshland services, including hosting, Managed Care plans, SEO add-ons, email marketing, and the tools we make available on our site.

Information We Collect

• Contact & account data you provide (name, email, business details, messages).
• Operational data needed to run your site (domain details, plan selection, DNS settings, support requests, usage/bandwidth metrics).
• Managed Care & SEO data that you or your team share so we can deliver those services (for example: content briefs, analytics or Google Business Profile access, change requests, task history, and reporting preferences). We only access third‑party accounts (Search Console, GA4, GBP, email service providers, etc.) with your permission.
• Email marketing data including subscriber lists, email addresses, campaign content, deliverability stats, send volumes, automations, and engagement metrics when you use our email marketing services.
• Usage data such as basic analytics from privacy‑friendly tools (e.g., page views). We do not sell your data.
• Payment data is processed by Stripe. We do not store or have access to full payment details.

How We Use Information

• To provide, operate, and support your website and account.
• To deliver Managed Care services (scheduled backups, performance monitoring, monthly reports, and included content/design edits) and any SEO retainers you authorize (keyword research, local listings work, reporting, and implementation tasks).
• To deliver email marketing services including managing subscriber lists, sending campaigns, and providing analytics.
• To communicate about service, billing, and updates (including renewal notices).
• To maintain security, comply with anti-spam obligations (CAN-SPAM, CASL, GDPR), and enforce our Terms of Service and Acceptable Use Policy.
• To improve our services, troubleshoot, and protect against abuse.

AI Assistance

We may use AI tools to help scaffold site content or HTML, but a human reviews and approves all final content before it goes live.

Password Generator & Domain Checker

If you use our built‑in password generator, we do not store the generated passwords; they are created locally in your browser and are never sent to our servers.

We do not warrant that any generated password is more secure than alternatives, and we accept no responsibility or liability for any breach, compromise, or loss arising from your use of a generated password. You are responsible for choosing strong, unique passwords and for protecting them (e.g., via a password manager and multi‑factor authentication). See our Terms of Service for additional disclaimers.

If you use our domain checker tool, we process your query to check availability and provide suggestions. We may temporarily cache results to improve performance, but we do not sell or share your domain search history with third parties, except as necessary to perform the lookup through our registrar partners.

Domain checker results are informational only and not a purchase mechanism. Availability and pricing can change at any time; we do not guarantee present or continuing availability. See our Terms of Service for additional disclaimers.

Sharing

We share data only as needed to deliver our services (for example, payments via Stripe, hosting/CDN providers, managed support tooling, SEO vendors, and email delivery via Sendy + Amazon SES), to operate analytics, or when required by law. When we act as your processor (Managed Care, SEO, or email marketing), we limit disclosures to the sub‑processors listed below and bind them to confidentiality and security obligations.

• Analytics: We use Google Analytics (gtag/GA4) to collect aggregated and pseudonymized usage metrics (for example: page views, events, device/browser information). Google may collect and process analytics data on our behalf; please see Google’s Privacy & Terms for details on how they process data.
• Email marketing delivery: Our self-hosted Sendy platform stores subscriber lists and campaign metadata. Email sends route through Amazon Web Services (Simple Email Service), which processes recipient addresses, bounce/complaint feedback, and deliverability diagnostics to send your campaigns.
• Infrastructure & support: We use hosting, DNS, backup, uptime monitoring, and content delivery providers (for example, managed cloud platforms, CDN vendors, and domain registrars) to keep sites performant and secure. These providers receive only the data required to operate the service.
• Managed Care & SEO tooling: With your authorization we may access Google Analytics, Search Console, Google Business Profile, citation platforms, or similar tools to perform the agreed work. You can revoke access at any time from those services.
• Opt‑out: You can opt out of non‑essential analytics by disabling cookies in your browser, using the Google Analytics opt‑out browser add‑on, or choosing to decline non‑essential cookies in our cookie notice where available.
• Third‑party processors: We only share the minimum data necessary with service providers and require them to maintain appropriate security and privacy practices under contract; if a provider no longer meets our requirements we will transition or terminate their access.

Attribution & portfolio: We may include a small "Built by Marshland Software" link or attribution on sites we build as part of our portfolio and attribution practice. If you prefer your site to not include such attribution, please contact support to discuss options; removal may require a paid opt‑out or separate licensing agreement.

Retention

• Backups of site assets: retained for 30 days.
• Email marketing data: subscriber lists and campaign data retained for the duration of your service and up to 90 days after termination to allow for data export and transition.
• Managed Care & SEO work logs, reports, and related assets: retained for the duration of the engagement and for up to 12 months after termination so we can answer follow-up questions, unless you request earlier deletion (subject to legal obligations).
• Account/billing records: retained for the duration of your service and up to 30 days after termination to facilitate off‑boarding; some records may be kept longer if required by law.

Your Choices

• You can update or request deletion of your personal data by emailing privacy@marshland.software.
• You may opt out of non‑essential communications.
• You can unsubscribe from marketing emails using the unsubscribe link in each campaign or contact us to remove a subscriber list from our Sendy platform.
• You may revoke our access to third‑party services (e.g., Google Analytics, Google Business Profile, citation platforms) at any time from within those services; we will honor revocations promptly.

Security

We use reasonable technical and organizational measures, including SSL/TLS, encrypted credential storage, monitored access logs, and least‑privileged access controls. Managed Care, SEO, and email marketing workspaces are limited to team members with a business need. No method of transmission or storage is 100% secure.

Ownership & Processing Roles (Summary)

• You own your content: You retain ownership of the custom content you supply (text, images, trademarks, and other materials). We act as a service provider to process and host this content on your behalf. Clients receive a downloadable copy of the front-end client code upon off-boarding as described in the Terms of Service, once outstanding charges are settled. Proprietary non-frontend features remain the property of Marshland and are licensed for use only during an active hosting term. See our Terms of Service for full details.
• Proprietary non‑frontend features: Backend components we provide (for example, email forwarding or form‑forwarding relays) are proprietary to Marshland and are licensed for use only during an active hosting term. Continued access or separate licensing may be required after termination; these components are not part of the downloadable front‑end deliverable.
• Operational copies & backups: We may create temporary, cached, or archival copies of your site and content for operations, security, troubleshooting, and backup. Backups of site assets are typically retained for 30 days.

Children

Our services are not directed to children under 13, and we do not knowingly collect data from them.

Off‑Boarding (Summary)

Upon termination, we can provide a zip of your front‑end site assets and a DNS zone file with your records. Proprietary non‑frontend features are not included, and we do not guarantee front‑end functionality without them. For email marketing customers we will export subscriber lists and campaign data on request within 90 days of termination. Additional assistance is available at our standard rates. See the Terms of Service for the authoritative terms, including any special provisions regarding free website builds and first‑year hosting commitments.

Legal & Disputes

For consistency with our Terms of Service, the following summarizes key legal points related to delinquent accounts and dispute resolution:

• Delinquent accounts: An account is delinquent when payments are more than 60 days past due. If an account is delinquent for 60 days, we may disable DNS, suspend hosting, or take the site offline. Once all past‑due amounts are received, we will either restore the site or provide a downloadable zip of the front‑end client code as described in the Terms of Service.
• Governing law & dispute resolution: These Terms are governed by Arizona law. For individual claims not exceeding the then‑applicable Arizona small‑claims limit (currently $3,500), the parties agree to resolve disputes in the Small Claims Division of the Maricopa County Justice Court (Phoenix, AZ) as described in the Terms of Service. Claims above that amount will be resolved by binding arbitration in Maricopa County, Arizona. The parties agree to waive the right to a jury trial and to participate in class, collective, or representative actions; disputes are brought on an individual basis.
• Where to find full terms: This policy is a summary; the Terms of Service contain the full legal text and prevail in the event of any inconsistency.

Changes & Contact

We may update this policy; we’ll post the new version with an effective date. Contact: privacy@marshland.software

Effective date: August 13, 2025