Privacy
Last updated November 11, 2026. This is a plain-language summary of how Cascade Local SEO works, not a formal legal document.
Who we are
Cascade Local SEO is operated by Jonathan Luis, a sole proprietor based in Bend, Oregon. Payments are billed as Cascade SEO (your card statement shows CASCADE SEO). Questions about anything on this page: jonathan@cascadelocalseo.com.
What we collect
- Audit request form: your business name, city, industry, and email address. We also log your IP address and browser type with each request. We use the IP address to limit how many requests one connection can send.
- Older audit form: an earlier version of our audit form, now closed, also asked for your name, phone number, website, and details about your business, and logged your IP address and browser type. We still hold what was sent through it.
- AI readiness check: the business name, city, state, and service you enter, which we use to run the check.
- Payments: Stripe handles checkout. We receive your name, email, business name, and what you bought. We never see or store your full card number.
- Booking a call: our booking links open a booking page on Cal.com, or on Google Calendar for some leads. We may also send you a Cal.com booking link directly. What you enter on either page goes to that service and to us.
- Emails: what you send us, and we may record whether our emails were delivered, opened, or clicked.
- Calls, texts, and direct messages: we call businesses at the phone numbers they list publicly, and we sometimes send Instagram direct messages. We only text a business when someone there agrees to it on a call. We keep a record of these calls and messages, such as the date and the outcome. We do not record calls.
- Client portal (clients only): to sign in, you enter your email address and we email you a sign-in link that works once and expires after 15 minutes. We store a scrambled (hashed) copy of the link's code and of your IP address. When you take an action in the portal, such as approving a review reply, we log it with a hashed IP address and your browser type. Messages you send through the portal are saved.
- Your Google Business Profile, website, and booking software (clients only): when you add us as a Manager on your Google Business Profile, we can see and edit your profile, including your reviews, posts, photos, and the numbers Google reports, such as calls and direction requests. We use these to do the work and build your monthly report. If you give us access to your website, we use it only to make the changes you approved, such as adding schema code. If we set up review requests in your booking software, we change only its settings and message text. We do not copy your customer list out of it.
- Healthcare practices: we do not sign HIPAA business associate agreements, and we do not accept patient information. Please do not send us patient names, contact details, or records. We do not access patient lists or patient records, so we write the review request message and a settings checklist, and your team turns it on in your own software.
- Reviews: we read the public reviews on your Google profile so we can draft replies for you to approve.
- Site analytics: we use PostHog to see which pages are visited and what gets clicked, including click and scroll heatmaps. PostHog no longer records visits to our site. We turned recording off on November 11, 2026. Recordings made before then show the pages a visitor saw, how they scrolled, what they clicked, and technical log messages from the page, and some may also include data the page sent and received, which can include what was typed into forms. We keep those recordings for up to 30 days, and then they are deleted automatically, so the last of them will be gone by about December 11, 2026. PostHog no longer receives the email address from an audit request. Before November 11, 2026, an audit request linked your visits to the email address you gave. Cloudflare serves the site and processes basic technical data such as your IP address. Google Fonts, which supplies the page fonts, also receives your IP address.
- Public business data: our audits and rankings use public information from Google search results, such as business names, ratings, review counts, and map positions.
How we use it
- To send the audit you asked for and reply to you.
- To deliver the work you paid for and send updates about it.
- To follow up on an audit with a few short emails. You can ask us to stop at any time.
- We may email or call businesses about a free audit. We find contact details on public sources, such as Google Business Profiles and business websites, and through email lookup services. Some of these addresses are an owner's personal inbox. You can use the unsubscribe link in our outreach emails, reply to the email, or email jonathan@cascadelocalseo.com, and we will stop emailing you.
- To draft the work. AI tools help us draft audits, posts, review replies, and reports. A person checks client work before it goes out.
- To see how the site is used so we can improve it.
Services that handle your data
The main providers we use to run Cascade:
- Stripe (payments), Supabase (our database), Resend (email), PostHog (site analytics, and the visit recordings we made before November 11, 2026, until they expire), and Cloudflare (hosting).
- Google Calendar and Cal.com (booking a call).
- AI model providers. We send them business names, cities, websites, public reviews, and the details needed to check how AI assistants describe a business and to draft content. We do not send them card details or patient records.
- Search data providers, which return public search results, map rankings, and keyword search volumes for the businesses and keywords we check.
- An email lookup service, which finds business email addresses from a business name or website.
- A team chat tool, where we get notices about new clients (name, email, business, and plan) and about activity in the client portal.
Each one handles data under its own privacy policy.
How long we keep it
If you are not a client, our policy is to keep your contact details and our notes for 24 months after we last contacted you, or 24 months after we collected them if we never contacted you. If you are a client, our policy is to keep your records for as long as you are a client and for 7 years after, for billing and tax records. Our policy is to check our records once a year and delete what is past these limits. Site visit recordings, which we stopped making on November 11, 2026, are kept for up to 30 days. If you unsubscribe or ask us to stop emailing you, we keep your email address on our do-not-email list, even after the rest of your record is deleted, so we do not email you again.
Do Not Track
Our site does not change how it works when your browser sends a Do Not Track signal. We do not let other companies track you across other websites through our site.
Your choices
Email jonathan@cascadelocalseo.com to ask what we have about you, to correct it, to have it deleted, or to stop getting emails from us.
Changes
If this page changes, we will update the date at the top.