EXPANDACO PRIVACY NOTICE

How customer and business information is used

Expandaco collects the business and contact information you choose to provide, diagnostic answers, opportunity inputs, and—when you request and purchase implementation help—the information you provide to plan and carry out that work.

Why we collect it

We use this information to generate reports, save diagnostics, review implementation requests, prepare proposals, support onboarding and implementation, measure agreed outcomes where data is available, provide requested follow-up, and improve the service.

Implementation and onboarding information

Paid implementation onboarding may ask for your goals, the systems or tools your business currently uses, and setup or access notes needed to plan the engagement. Do not submit passwords, API keys, banking credentials, Social Security numbers, medical information, or other secrets or highly sensitive personal information. Expandaco may request an appropriate secure connection method separately when access to a third-party system is actually required.

Where it is stored

Submitted diagnostics and engagement records are stored in Expandaco's application database. While you are completing or editing the diagnostic, a draft is also stored in your browser on that device so refreshing or navigating back does not erase your work. Clearing this site's browser storage removes that local copy but does not delete a submitted server record.

Private customer links

Reports and other customer steps may use private links containing a secret access token. Anyone who has a complete private link may be able to open the associated customer page, so treat these links like private documents and do not post or forward them publicly. Where Expandaco uses hashed access tokens, only the cryptographic hash used for verification is stored.

Who can access it

Customer records are intended to be accessible through Expandaco's protected administrative tools, the systems required to operate the service, and valid private customer access created for the intended customer. We do not sell customer diagnostic or engagement information.

Third-party services

Implementation may involve services selected for the customer's agreed scope. Information should be shared with a third-party provider only when it is needed for that work and according to the provider's own terms and privacy practices. This notice should be updated as Expandaco adds material integrations or changes how customer information is handled.

Retention and removal

Customer records may be retained while they are useful for providing the service, supporting an implementation engagement, measuring agreed outcomes, and maintaining appropriate business records. To request access, correction, or removal of your information, email [email protected]. Some records may need to be retained when required for legitimate business, payment, security, or legal purposes.

Customer service and follow-up

For questions about a report, implementation request, engagement, privacy request, or other customer-service matter, email [email protected]. Expandaco typically responds within 1 business day.

This notice describes the current Expandaco diagnostic and implementation experience. It should be reviewed whenever material third-party services, integrations, or information-handling practices change.