Privacy policy

Last updated October 30, 2026

This policy describes what Narsil Creative collects on narsilcreative.com, why, and who else sees it. We wrote it to match what the site actually does rather than to cover every hypothetical, so if a practice is not listed here, we are not doing it.

Narsil SEO, our software

This policy covers narsilcreative.com: the site, its free tools and kits, and the contact details and calls that come through it. Narsil SEO, the software at app.narsilcreative.com, has its own privacy policy, because it handles different data: your account, the sites you audit, and any Google services you connect. That policy says what we read from Google Analytics, Search Console and Business Profile, why, how we protect it and how to disconnect.

Narsil SEO's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

What we collect, and when

When you unlock a free kit. We collect the email address you type, which kit you unlocked, and the page you unlocked it from. That goes to HubSpot, our customer relationship platform, which stores it for us. We also set a cookie on your browser so the kit stays unlocked for you. That cookie holds a timestamp and a signature, nothing about you, and it expires a year after it is set.

When you email or book a call. Our contact links open your own email client. The scheduler on our contact page is Calendly's, embedded in the page rather than linked, so it loads and can set its own cookies for anyone who opens that page, whether or not they book. Whatever you write goes to us (and, for scheduling, to Calendly) and lives in our email and calendar.

When you use the free tools. The AI Visibility Audit, Content Analyzer, Branded Regex Generator, Schema Markup Generator, Open Graph Tag Generator, SERP Preview, Brand vs Non-Brand Splitter, and Google Ads Viability Gate run entirely in your browser. What you type into them never reaches our servers, and we could not read it if we wanted to. The Page Audit is the one exception: it sends the URL you enter to our server so the page can be fetched and scored. We do not store the URL or the report.

When you just read. We use Google Analytics to see which pages get read, where visitors arrive from, and whether a visit ends in a call booked through our scheduler or a purchase. For a purchase it gets what was bought, the amount and Stripe's order number, never your name, email or card. It sets cookies and processes usage data including an abbreviated IP address. We also use Microsoft Clarity, which records how people move through a page (clicks, scrolling, mouse movement) and lets us replay a visit to see where the page loses people. It sets cookies too. What you type into form fields stays masked in those recordings, on every setting Clarity offers. Our host, Vercel, keeps standard server logs, which include IP addresses, to run and secure the site.

Google's button in the footer. The footer carries Google's “Add to Preferred Sources” button, and Google's script draws it. When the site loads, your browser fetches the button from news.google.com and www.gstatic.com, which tells Google your IP address, your browser and that you're on this site. It sets no cookies or storage on this site. If you're signed in to Google and your browser allows third-party cookies, those requests can carry your Google cookies, so Google can connect the visit to your account. Clicking the button opens a Google window with the address of the page you were on, and Google's privacy policy covers what happens there. If you turn analytics off, the footer shows a plain link to Google instead, which sends Google nothing until you click it.

The cookies, and how long they last. They come from four places: our own kit unlock, Google Analytics, Microsoft Clarity, and Calendly on the contact page, and they last from a day to two years. The cookie page lists every one with what it does and how long it lasts, so this page does not carry a second copy to fall out of date. We show a cookie banner on your first visit. Analytics is on when you arrive; choosing to turn it off stops Google Analytics and Microsoft Clarity loading at all and expires the ones we set. It also swaps Google's button in the footer for a plain link. The Calendly scheduler is not covered by that choice, because turning it off would break the page people open in order to book.

If you buy from us

At checkout. Payments run through Stripe Checkout. Stripe collects your email address, your card details and the other details it asks for, such as your name and billing address, and Stripe holds the card: we never see or store your card number. Stripe sends us a record of the purchase (your email address, what you bought, the amount and Stripe's reference numbers). If you cancel a subscription, it sends a record that day, with the date the subscription ends and the reason and comment you give in Stripe's billing portal, if any. It sends another if you take the cancellation back, and one when the subscription ends. All of them go to HubSpot.

After you pay. The thank-you page carries the onboarding form, which asks, for each location, for the facts we work from, and goes to HubSpot. Every version asks for the business details, the old names, addresses and phones to look for, which directory accounts exist and who manages them, any former agencies or staff who may still manage a listing, who receives verification calls, the main contact's name and email, and what your listings should show, which can include a contact name, email, mobile and fax number (all optional, and only for someone who has agreed to appear on your listings), your payment methods, services and social profile links. If you subscribe to Reputation and Review Management, it also asks for the owner's name, who approves changes, a link to your photos, and how you want reviews answered; for our one-time listings service, a link to your photos and videos. Each form ends with you confirming that you own the business or are authorized to act for it. None asks for a password, and we never want one. Until you send it, the form saves your answers in your own browser, so you can close the page and finish later; we see nothing until you send it. Sending replaces them with a note that the form went, and anything saved is cleared after 30 days. We also email you a link to the form, through Resend, so you can come back to it from any device. Your purchase comes with a folder in our Google Drive for the photos and videos you send us. We share it with the email address you paid with, and the same email carries a link for uploading without a Google account. Our team sees what you upload, and so can anyone you share that folder with.

While we work. If you subscribe to Reputation and Review Management, we work with the access you grant, in your Google Business Profile as a manager you invite. The rest of the work runs in My SEO Connections, the software we use to monitor your reviews, measure your place on the map, build and manage your directory listings, and produce your monthly report. It holds your business details, your profile's reviews, your map results and those listings. Our one-time citation services need no access to your Google profile: My SEO Connections holds the business details and the listings we build or correct, and the photos and videos you send for them. For a cleanup, it provides an email address in your business's name that we use to ask directories to correct your listings, and it keeps those messages; you get that address's login when the work ends. We set up each directory account with an email and password and share the logins with you through a password manager. The work involves the people who review your business: we read their public reviews and reply as your business, and we never repeat anything about a reviewer that they didn't write themselves. We don't receive your customer list. Your own team sends review requests from your own systems.

Why we collect it

To send you the kit you asked for and tell you when it gets updated, to answer you when you write to us, to schedule calls, and to understand which of our work is worth reading. We also use the fact that you downloaded something as a signal that you might want to hear from us about the related service. If you would rather not, say so and we will stop. If you buy from us, we also use what you give us to deliver the service, bill you, and keep the records tax and accounting law requires.

Who else sees it

HubSpot, which stores contacts and sends our email
Stripe, which processes payments and holds card details
Resend, which sends the email with the link to your onboarding form
Google Drive, where the photos and videos you upload are stored
Google, where we work on your Business Profile with the access you grant, if you're a client
My SEO Connections, the software we use to deliver our services, your directory listings included, if you're a client
The directories, maps, apps and photo, video and social sites that publish your listings, if you're a client
Google Analytics, for site usage measurement
Microsoft Clarity, for session recordings and heatmaps
Vercel, which hosts the site and keeps server logs
Calendly, whose scheduler is embedded on our contact page
Google, whose “Add to Preferred Sources” button is in the footer of every page

That is the whole list. We do not sell your personal information, we do not share it with advertisers, and we do not buy contact lists.

How long we keep it

Contact records stay in HubSpot until you ask us to delete them or until they have been inactive for three years, whichever comes first. Analytics data follows Google's retention settings. Clarity recordings follow Microsoft's retention schedule. Server logs roll off on our host's schedule.

If you buy from us, purchase and billing records are kept as long as tax and accounting law requires. What you tell us on the onboarding form is deleted 90 days after your subscription ends, or after a one-time service is finished, or sooner if you ask. Your upload folder and its photos and videos are deleted at the same point, so download anything you want to keep. My SEO Connections keeps what it holds about your business for one year after the same point, or until you ask us to delete it.

Your choices

Email hello@narsilcreative.com and ask us to send you a copy of what we hold, correct it, or delete it. We will do it, and we will not make you prove you live in a particular state first. Every marketing email we send has an unsubscribe link that works. You can block cookies in your browser settings, and browser extensions can block Google Analytics and Microsoft Clarity entirely; the site works fine either way.

If you're a client, a deletion request covers what My SEO Connections holds about your business too, and we remove it within 30 days. Two limits apply: a deletion request can't remove the billing records the law makes us keep, and deleting your onboarding details while you're subscribed means we can no longer do the work.

Children

This is a business-to-business site and it is not directed to children under 13. We do not knowingly collect their information.

Changes, and how to reach us

When this policy changes we update the date at the top. Narsil Creative is based in Atlantic Beach, Florida, in the Jacksonville metro. Questions, requests, or complaints: hello@narsilcreative.com.