1. Who We Are
YelloPost AI is a service of YelloPost Media Group, operated by Brandon Smith (Founder, COO/CFO) and Rob Dohlke (CEO). We provide bundled web presence services to local service businesses.
We are the “data controller” for the personal information we collect about visitors to yellopost.ai and prospective or current clients.
- Email: [email protected]
- Postal: YelloPost AI, c/o YelloPost Media Group
2. Information We Collect
2.1 Information You Provide Directly
- Contact form submissions: name, email, phone, business name, message content, optional fields you complete
- Chatbot conversations: messages you send to our AI chatbot and any context the AI captures during the conversation (which may include name, contact information, business details, and problem description)
- Free audit requests: website URL, name, email, phone, notes about your business
- Pricing recommender quiz: aggregated, anonymized response patterns
- Client onboarding data: business information, service descriptions, hours, service area, brand assets
2.2 Information Collected Automatically
- IP address and approximate geolocation: used for spam filtering, geo-fencing, and aggregated analytics
- Device and browser information: browser type, device type, operating system, screen size, language preference
- Usage information: pages visited, time on page, referring URL, click events, scroll depth
- Cookie identifiers: see Section 5
2.3 Information from Third Parties
If you arrive via a paid ad, we may receive click attribution information from Google Ads. If you authenticate via a third-party service, we receive only the data you authorize.
3. How We Use Your Information
We use collected information for these purposes:
- Respond to your inquiries and provide the services you request
- Route lead notifications to our internal team (Brandon, Rob)
- Operate, maintain, and improve our website and services
- Analyze website performance, conversion patterns, and content effectiveness (aggregated)
- Detect, prevent, and respond to spam, fraud, security threats, and abuse
- Comply with legal obligations and respond to lawful requests
- Send transactional communications related to active engagements
- With explicit consent, send newsletter or product update communications
We do not use your information for behavioral advertising profiles or for sale to third parties.
4. Third-Party Services
We use the following third-party services. Each has its own privacy policy governing its use of your data:
4.1 Anthropic Claude API
Our AI chatbots are powered by Anthropic Claude models. Messages you send to our chatbot are transmitted to Anthropic for processing under Anthropic’s privacy policy. We have configured our API integration to opt out of training data usage.
4.2 Cloudflare
We use Cloudflare for content delivery, DDoS protection, and bot mitigation. Cloudflare may process request metadata and IP addresses. See Cloudflare’s privacy policy.
4.3 Zoho Mail (SMTP)
Lead notification emails route through Zoho Mail SMTP to our internal team. Zoho processes email metadata and content for delivery. See Zoho’s privacy policy.
4.4 Google Analytics 4
We use Google Analytics 4 for aggregated, anonymized site usage analytics. GA4 may process IP addresses (anonymized) and behavior data. See Google’s privacy policy. California residents may decline GA4 via our cookie consent banner.
4.5 Google Tag Manager
Tag management infrastructure for conversion tracking. Operates under Google’s privacy framework.
4.6 AdaWebPro Accessibility Widget
The accessibility widget on our site is operated by AdaWebPro (an affiliated company we partially own). Widget preferences are stored locally in your browser only and are not transmitted to AdaWebPro servers.
4.7 Hosting Providers
Our site is hosted in the United States. Server logs may temporarily record IP addresses and request metadata for security and operational purposes.
5. Cookies & Tracking
5.1 Cookies We Use
We use the following categories of cookies:
- Essential cookies: required for the site to function. Examples: your cookie consent choice, accessibility widget preferences, session state. These cannot be disabled.
- Analytics cookies: Google Analytics 4 cookies for aggregated site usage measurement. Can be declined via our cookie consent banner.
5.2 Cookies We Do Not Use
We do not use advertising cookies, retargeting pixels, social media tracking pixels, or third-party behavioral profiling cookies on this site.
5.3 Managing Your Cookie Preferences
You can manage cookies through our cookie consent banner (shown on first visit). You can clear cookies and preferences at any time through your browser settings.
5.4 Do Not Track
We respect browser Do Not Track signals where technically feasible. When DNT is enabled, we disable Google Analytics 4 tracking.
6. California Privacy Rights (CCPA / CPRA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
6.1 Right to Know
You have the right to request what personal information we have collected about you in the past 12 months, the sources, the purposes for collection, and the categories of third parties with whom we share it.
6.2 Right to Delete
You have the right to request deletion of your personal information, subject to certain exceptions (legal obligations, active service delivery, security/fraud prevention).
6.3 Right to Correct
You have the right to request correction of inaccurate personal information we hold about you.
6.4 Right to Opt-Out of Sale or Sharing
We do not sell or share personal information for cross-context behavioral advertising. You can confirm this status in writing.
6.5 Right to Limit Use of Sensitive Personal Information
You can request that we limit the use of any sensitive personal information you share with us.
6.6 Right to Non-Discrimination
We will not discriminate against you or charge different prices for exercising any of these rights.
6.7 How to Exercise Your Rights
Email [email protected] with subject line “CCPA Request”. We will respond within 45 days as required by law. We may verify your identity before fulfilling the request.
6.8 Authorized Agents
You may designate an authorized agent to make a request on your behalf. The agent must provide signed permission and we may verify your identity directly.
7. Data Retention
We retain personal information only as long as necessary for the purposes for which it was collected, subject to legal obligations:
- Contact form submissions: 24 months from submission
- Chatbot conversations: 24 months from session end
- Free audit data: Duration of active engagement plus 12 months
- Client engagement records: 7 years (financial/tax record retention)
- Google Analytics 4 data: 26 months (GA4 default; we do not extend)
- Server logs: 30 days for security and operational purposes
You may request earlier deletion at any time, subject to applicable exceptions.
8. Security
We implement industry-standard security practices:
- Encryption in transit: All site traffic uses TLS 1.2 or 1.3
- Hardened forms: Spam filtering, CSAM detection, geo-fencing, honeypots, TLD blocklisting, disposable-email rejection
- Geographic filtering: US/Canada-only intake on contact forms, reducing exposure to international threat actors
- Access control: Internal access limited to Brandon and Rob; no third-party staff or contractors
- Minimal data retention: We discard data when it no longer serves a legitimate purpose
- No credit card storage: Payments are processed by third-party processors under PCI-compliant terms; we do not store card numbers
No security system is perfect. In the event of a data breach affecting your personal information, we will notify you in accordance with applicable law.
9. Children’s Privacy
YelloPost AI is not directed at children under 13 (or 16 in some jurisdictions). We do not knowingly collect personal information from children. If a parent or guardian learns that a child has provided personal information without consent, please contact us and we will delete it.
10. International Users
YelloPost AI is operated from the United States and our services are intended for U.S.-based businesses. If you access our site from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your country.
By using our services, you consent to such transfer and processing.
11. AI & Automated Decision-Making
We use AI tools (including but not limited to Anthropic Claude models) for:
- Operating chatbots that converse with site visitors
- Drafting content for our site and client sites
- SEO analysis and topic research
- Accessibility auditing
- Conversion pattern analysis
None of our use of AI involves fully automated decisions that have legal or similarly significant effects on individuals. Human judgment is applied before any consequential decision (such as accepting or declining a client engagement).
If you communicate with our AI chatbot, you can request to speak with a human at any time by saying “please connect me to a human” or similar.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be:
- Reflected in the “Last updated” date at the top of this page
- Announced via email to active clients
- Highlighted via a notice on our website for 30 days following the change
Continued use of our services after the effective date constitutes acceptance of the updated policy.
13. Contact Us
For any privacy concerns or requests:
- Brandon Smith (Founder, COO/CFO): [email protected]
- Rob Dohlke (CEO): [email protected]
- Postal address: YelloPost AI, c/o YelloPost Media Group
We aim to respond to privacy inquiries within 5 business days and to formal CCPA requests within the 45-day statutory window.