Privacy Policy

This Privacy Policy explains how Good Ground Serves LLC, the legal provider of its flagship SiteHeros product and service (“SiteHeros,” “we,” “us,” or “our”), collects, uses, discloses, retains, and protects personal information in connection with our websites, forms, sales, agreements, checkout, payments, accounts, hosting, managed services, support, communications, and related business operations.

This Policy applies when SiteHeros decides why and how personal information is processed. When we process personal data solely on a customer’s documented instructions, our Data Processing Addendum and that customer’s privacy notice may also apply.

1. Information we collect

We may collect:

• Identity and contact information, such as name, business name, title, postal address, email address, telephone number, username, and authorized contacts.
• Account and transaction information, such as selected service, order, agreement acceptance, signature evidence, invoices, billing address, payment status, subscription, renewal, cancellation, refund, chargeback, and tax-related records. Payment-card details are processed by payment providers; SiteHeros should not intentionally store full card numbers or security codes.
• Prospect and intake information, such as website, organization type, goals, service needs, budget range, timeline, answers, recommendations, communications, and sales status.
• Customer content and service data, such as website files, text, images, code, forms, databases, domain/DNS information, hosting configuration, support requests, technical logs, security alerts, backups, migration data, integrations, approvals, and project records.
• Device, usage, and network information, such as IP address, browser, device type, operating system, referrer, pages or features used, timestamps, cookie identifiers, approximate location inferred from IP, and diagnostic events.
• Communications, such as emails, form submissions, call or meeting notes, support messages, feedback, complaints, privacy requests, and records of consent or preferences.
• Professional and business information, such as industry, job role, company size, vendor or contractor relationship, and business requirements.
• Security and compliance information, such as authentication events, access levels, incident details, abuse reports, legal requests, audit evidence, and identity/authority verification.
• Inferences and recommendations created from the information above, such as a recommended service tier or risk/suitability flag. Material decisions require human review.
• Other information you choose to provide.

Please do not send sensitive or regulated information—including full payment-card data, Social Security or government identification numbers, protected health information, credentials, children’s data, precise location, or highly sensitive personal information—unless SiteHeros has expressly approved a secure, lawful method and purpose in writing.

2. Sources

We collect information:

• directly from you, your organization, and authorized users;
• automatically from websites, accounts, and systems;
• from service providers and integrations you direct us to use;
• from public business sources;
• from payment, hosting, domain, analytics, CRM, email, security, support, and platform providers; and
• from customers when we act on their instructions.

3. Why we use information

We may use information to:

• respond to inquiries and recommend services;
• prepare proposals, agreements, orders, signatures, and accounts;
• process payments, subscriptions, renewals, refunds, disputes, and taxes;
• provision, host, migrate, design, develop, manage, secure, monitor, back up, support, and improve services;
• communicate operational, transactional, security, legal, and account information;
• send marketing where permitted and honor opt-outs;
• authenticate users, manage access, detect fraud and abuse, investigate incidents, and protect rights and systems;
• maintain records, enforce agreements, handle complaints and legal requests, and comply with law;
• analyze performance, troubleshoot, test, plan capacity, and improve operations;
• use supervised automation and AI-assisted tools for bounded business work, subject to approved data-handling and human-review controls; and
• establish, exercise, or defend legal claims.

4. Legal bases for EEA/UK/Swiss processing

Where applicable, we rely on one or more of:

• contract or steps requested before a contract;
• legitimate interests, such as operating, securing, improving, documenting, and defending our business, balanced against individual rights;
• consent, including where required for non-essential cookies or marketing;
• legal obligation; and
• protection of vital interests in a genuine emergency.

We do not rely on consent where it is not freely given or where another basis is more appropriate. You may withdraw consent prospectively, but prior lawful processing remains valid.

5. How we disclose information

We may disclose information to:

• hosting and website infrastructure providers, including WPMU DEV (Incsub, LLC) for the hosting, client Hub, content-delivery and website-operation functions actually used, and its relevant infrastructure partners;
• payment providers, including Stripe for applicable Elite transactions and WPMU DEV or its payment flow for Hosting+ checkout;
• Google Workspace and related Google services for business email, documents, calendars, analytics, authentication, and operations where enabled;
• HubSpot for CRM, forms, communications, or marketing where actually enabled;
• website and plugin providers, including WordPress.org, Elementor, Brainstorm Force and WPMU DEV, only to the extent a networked feature, licensing, support or integration actually sends information to the relevant provider; locally running software is not by itself a separate recipient;
• OpenAI/ChatGPT for approved supervised business use only where the account, contract, data category, and use case are authorized;
• email/SMTP, domain, DNS, CDN, security, backup, monitoring, support, professional, insurance, accounting, and legal providers actually used;
• contractors and specialists bound by appropriate duties;
• authorities, courts, counterparties, insurers, and advisers when reasonably necessary for law, safety, fraud, claims, or transactions; and
• a successor in a merger, financing, reorganization, or sale, subject to appropriate protections.

Customers may request their service-specific subprocessor schedule and available data-protection information at legal@siteheros.com. The applicable Data Processing Addendum governs processing on a customer’s behalf.

Official provider privacy, terms and software-license references are available in the Website Disclaimer. The references distinguish infrastructure and business systems from software, assets and conditional services; they are not a customer-specific subprocessor authorization.

6. Sale, sharing, targeted advertising, and financial incentives

SiteHeros does not sell personal information for money. SiteHeros will not sell or share personal information for cross-context behavioral advertising or process it for targeted advertising unless the practice is specifically disclosed and any legally required opt-out mechanism, including recognized universal opt-out signals, is operational.

SiteHeros does not offer a financial incentive or price/service difference for personal information unless a separate compliant notice is provided.

7. Cookies and similar technologies

Technologies depend on the functions you use and are described in the Cookie Policy. The WPMU DEV Dashboard analytics integration on SiteHeros.com is temporarily disabled. Before enabling non-essential Technologies where consent is required, we will provide the applicable information and choice and keep those Technologies off until valid consent is recorded. Any required rejection and withdrawal choices must be available for the relevant enabled processing.

8. Marketing and communications

You can opt out of marketing email by using the unsubscribe link or contacting us. We may still send non-marketing messages concerning transactions, security, service, legal terms, or account status. Consent to electronic records or a service agreement is not consent to telemarketing or marketing text messages.

We will maintain suppression records as necessary to honor opt-outs.

9. Retention

We retain information only as long as reasonably necessary for the purposes described, including service delivery, security, records, tax, accounting, disputes, legal obligations, and claims. Retention depends on the data, relationship, law, contract, provider capability, backups, and legal holds.

Deletion may take additional time in encrypted backups or provider systems and may be limited by legal/security requirements. We will document material exceptions.

10. Security

We use administrative, technical, and physical safeguards designed for the nature of the information and service. These may include access controls, individual accounts, multifactor authentication where configured, encryption provided by platforms, logging, backups, vendor review, incident response, minimization, and secure transfer methods.

No method is completely secure. Do not use ordinary email or forms to send credentials or highly sensitive data unless expressly instructed through an approved secure process.

11. International transfers

SiteHeros is based in the United States and may use providers that process information in multiple countries. Where a law requires safeguards, we will use an applicable mechanism such as adequacy decisions, the EU Standard Contractual Clauses, the UK Addendum or International Data Transfer Agreement, contractual safeguards, or another valid basis.

12. Your privacy rights

Depending on where you live and whether a law applies, you may have rights to:

• know or access personal information;
• correct inaccurate information;
• delete information;
• obtain a portable copy;
• restrict or object to processing;
• withdraw consent;
• opt out of sale, sharing, targeted advertising, or certain profiling;
• appeal a denied request;
• receive information about automated decision-making; and
• complain to a regulator.

These rights are not absolute. We may deny or limit a request where permitted, such as when information cannot be verified, is required for security/records/legal claims, concerns another person, is processed solely for a customer, or an exemption applies.

13. Requests and verification

Submit a privacy request at legal@siteheros.com. See the Privacy Rights Request Notice for the information to include, verification, appeals and complaints.

Describe the right, your relationship with SiteHeros, relevant email/account, and state/country. Do not send unnecessary identity documents initially. We will use information reasonably necessary to verify identity and authority. Authorized agents may be required to provide signed authority and direct confirmation from the individual where permitted.

If we process the data for a customer, we may direct the request to that customer and assist under our contract. We will respond within the legally required period and provide appeal instructions where applicable.

14. Children

SiteHeros services are not directed to children under 13, and we do not knowingly collect their personal information through the commercial SiteHeros service. Do not submit child or student data. If we learn that such information was submitted without required authority, we will take appropriate steps.

15. Automated and AI-assisted processing

We may use supervised tools to organize, draft, analyze, triage or recommend in bounded business workflows. These tools are not authorized to independently make legal or similarly significant decisions about an individual.

Material customer, contract, security, accessibility, refund, suspension, or regulated decisions require human review. We will provide additional notice and rights if a future use or law requires them.

16. Do Not Track and Global Privacy Control

Browser “Do Not Track” signals do not have a uniform legal standard. Where a recognized universal opt-out mechanism such as Global Privacy Control must be honored, SiteHeros will process it for the legally covered browser/device and practice.

17. Third-party sites and customer websites

Our websites may link to third parties, and customers may operate websites we host or manage. Each third party or customer controls its own privacy practices. SiteHeros is not responsible for an unaffiliated party’s notice or conduct.

18. Changes

We may update this Policy prospectively. The page will show the effective date and version. We will provide additional notice or obtain consent for material changes when required.

19. Contact

Good Ground Serves LLC / SiteHeros

Privacy: legal@siteheros.com

General legal: legal@siteheros.com

If an applicable law requires a data-protection representative, officer, or local contact, the relevant supplement will identify it.