Privacy policy

Last updated

Last updated: October 4, 2026.

Who this is

Website ROI LLC. Serving Southwest Michigan and Northern Indiana. There is no street address on this website. Email z@mywebsiteroi.com. Phone (269) 431-5873.

Visits

Pages are counted with Vercel Web Analytics. That count does not use a cookie, does not build an advertising profile, and does not need a cookie banner. It records a page view so we can see which visits never became a call. It is not a sign-in and it is not sold.

We use Vercel's cookie-free analytics to count visits and page speed. It sees the page address, referrer, device type, browser, operating system, and approximate location (country and city). Vercel uses your IP address and browser to work out location and to make a daily hash, and does not store them.

We also keep our own anonymous page counts. That record is the page path and a broad referrer type such as search or social. It does not include an IP address, device details, or cookies. We keep those counts for 31 days.

When a link includes a campaign tag, we keep that tag with the visit and with a lead from that visit. Campaign tags (utm source and medium) are stored with visit and lead counts. The tag is kept in this tab's session storage until the tab closes. It is not a cookie. At checkout the tag is passed to Stripe, and Stripe keeps that checkout metadata. If you ask us to delete your information, we remove the tag from our records. That does not remove Stripe's copy.

What we collect

Contact and business details you enter: business name, website, your name, phone, email, best time to call, ZIP, business type, ticket size, weekly leads, budget range (Under $500 a month; $500 to $1,000 a month; Over $1,000 a month; Not sure yet), and answers about other decision-makers. If you name another person, share only information you have permission to share. We use that name only to plan the conversation with you.

Audit materials you choose to send: ballpark operating numbers and optional files. Those files are for the call. They are not a tax return, a legal review, or a set of books.

Chat transcripts. Consent records: whether you checked an email or text box, the wording shown, and the time. Payment status from Stripe, not your full card number. Technical data: IP address, browser type, pages requested, and timestamps in the host logs, plus the security cookie below.

Signature records store the signer's IP address and browser.

How we use it

We use it to produce your score and estimate, call or email you back when you ask, prepare proposals, provide and bill for services, keep the site secure, and meet legal obligations. We do not sell your personal information or share it for advertising.

When you ask for a call back, Z calls you personally at the number and time you gave. We do not use autodialers or prerecorded messages for these calls.

About Z and AI

Z is the name the founder uses in public. The founder portrait on this site and the animated Z in our ads and social media are AI-generated illustrations. The site chat is an assistant, not a person. When you ask for a call back, a real person, the founder Z, calls you. AI tools may help draft, design, and run a site. A person reviews the work before launch.

Replies are scripted and are not sent to an AI provider. When the sales chat is on, what you type is sent to xAI to draft replies. The transcript is saved so Z can follow up. Do not enter passwords, card numbers, or a Social Security number. This chat does not email or text you. Z contacts you only if you ask.

Texts and email

We text you only if you check the text box, and we email you about your score only if you check the email box. Neither is required to see your score or to buy. Message frequency varies. Message and data rates may apply. Reply STOP to stop texts or HELP for help. Every marketing email has an unsubscribe link, and we honor those requests promptly. We do not sell or share your mobile number or text consent for anyone else's marketing.

Email campaigns go only to people who have a recorded consent source and date.

The text box uses this wording: I agree to receive automated text messages from Website ROI LLC at the number I provided, about my request, appointments, and related service updates. Message frequency varies. Msg & data rates may apply. Reply STOP to cancel and HELP for help. Consent is not required to buy.

Who we share it with

We share information only with companies that run parts of the business for us, or if the law requires it, or as part of a sale or merger of the business.

• Stripe processes payments. We receive your name, email, billing details, and payment status. We never receive your full card number. Stripe keeps its own copy of the email, name, and description on the checkout session. Stripe's policy is at stripe.com/privacy. Deleting your data here does not delete Stripe's records.
• Resend sends lead-alert email to us, and the cancellation confirmation to the person who submitted the cancel form.
• Upstash stores form leads and chat transcripts.
• Vercel hosts the site and keeps the server logs.
• We use Vercel's cookie-free analytics to count visits and page speed. It sees the page address, referrer, device type, browser, operating system, and approximate location (country and city). Vercel uses your IP address and browser to work out location and to make a daily hash, and does not store them.
• We also keep our own anonymous page counts: the page path and a broad referrer type such as search or social. No IP address, device details, or cookies. Kept 31 days. Campaign tags (utm source and medium) are stored with visit and lead counts.
• Twilio (SMS) is an internal alert channel for lead notices, used when that channel is set up. The staff texting tool can also send a text through Twilio when those keys are set.
• Microsoft Teams (webhook) is an internal alert channel for lead notices. It is used only when that webhook is set up.
• No AI provider receives chat text unless AI is enabled. When the sales chat is on, what you type is sent to xAI to draft replies.

Ad pixels and call tracking are off. They would be named here before they are turned on.

Cookies

These are first-party cookies. The browser sends them back to this site only. None of them is an advertising cookie, and none is shared with an ad network.

• wroi_csrf is strictly necessary. It protects forms. It lasts 12 hours, uses SameSite=Lax, and path /. It is marked Secure on an https page and in production. It is not HttpOnly, because the page script reads it and sends it back with a form. It is set for every visitor.
• wroi_ref remembers a referral code. It lasts 90 days. It is HttpOnly, SameSite=Lax, and path /. It is marked Secure in production. It is set for a visitor who opens a referral link.
• wroi_preview remembers that someone passed the preview password. It lasts 12 hours. It is HttpOnly, SameSite=Lax, and path /. It is marked Secure in production. It is set only for that person.
• wroi_board_user is a staff login for the lead board. It lasts 12 hours. It is HttpOnly, SameSite=Lax, and path /. It is marked Secure in production. It is set only for the staff member who signs in.
• wroi_admin is a staff login for the admin tools. It lasts 12 hours. It is HttpOnly, SameSite=Lax, and path /. It is marked Secure in production. It is set only for the staff member who signs in.
• wroi_session is a staff account session. It lasts 8 hours. It is HttpOnly, SameSite=Lax, and path /. It is marked Secure on an https page and in production. It is set only for the staff member who signs in.
• wroi_desk remembers which staff desk is open. It lasts 8 hours. It is not HttpOnly. It uses SameSite=Lax and path /. Production staff sign-in marks it Secure. It is set only for a signed-in person.
• wroi_gritter_demo is a demo-login session cookie. It lasts 8 hours. It is HttpOnly, SameSite=Lax, and path /. On an https page it is marked Secure. It is set only for the person who signs in to that demo.

Do Not Track

This site does not respond differently to a Do Not Track signal. We do not use ad-tracking pixels, and we do not let advertising networks track you across other sites through this site.

How long we keep it

Data from people who never become clients, including leads and form and chat submissions, is kept for 3 years, then deleted. Client records are kept for 7 years for tax purposes. Anyone can ask for deletion at any time. Records the law requires us to keep, such as tax and payment records, may be kept until the 7-year period ends.

Unsubscribe, bounce, and complaint records (just the email address and date) are kept indefinitely so we never email someone who opted out. This is an exception to the retention periods above.

Email z@mywebsiteroi.com to see, correct, or delete the information we have about you, or to stop calls, texts, or emails. We may keep opt-out records long enough to honor them. Some states give residents extra privacy rights. We honor a request those laws require. This page does not claim that Website ROI LLC is covered by the California privacy law.

Changes

We will post a change on this page with a new date. For a material change, we will also note it on the home page for 30 days.