Feedback Studios LLC (“Feedback Studios”, “we”, “us”) is a digital marketing agency in Miami, Florida. This policy covers this website, our platform Feedback OS at os.feedback-studios.com, and the emails, text messages, WhatsApp messages and calls we exchange with you. Questions: info [at] feedback-studios.com or +1 (786) 220-5013.
What we collect, and why
| What | How we get it | Why we use it |
|---|---|---|
| Contact details | Your name, email, phone number, company, website and message. You type them into a form on our site, or into its live chat when it is offered, or give them to us by email, phone, WhatsApp or text. | To answer your request and follow up on it. |
| Choices about messages | The boxes you tick on our forms, and your replies such as YES and STOP. | To send only what you agreed to, and to prove what you agreed to. |
| Choices about cookies | Your choices in the banner on our site, with a random consent ID. | To apply your choices, and to prove what you chose. |
| How you found our site | The link or ad you came from: the referring site, campaign tags (UTM values), the first page you arrived on and, with Marketing on, ad click IDs. | To know which ads and pages bring us requests. |
| How you use our site | With Analytics on, Google Analytics records the pages you view, your device and browser, and your approximate location. It also notes when you send a form, start a chat or click our phone, WhatsApp or email link. Our own measurement in Feedback OS tells visits apart with an anonymous id. If you send us a form, start a chat or book a call, we keep those visits with your request. | To see which pages and sources work. |
| How long each page stays open | Without cookies or any identifier, our site notes four moments on each page, timed from when the page opens. Two are about its analytics and ad tags: when the cookie notice lets them run and when they are asked to load. The other two are your first click, tap, scroll or key press, and the moment you leave the page. It keeps only those timings, the page, the language and whether the device is a phone, never your IP address. | To keep our pages fast and to know how many visits our statistics miss. |
| IP address and browser details | Your browser sends them with every request. Our servers’ technical logs record them, and access to those logs is restricted. We also keep a copy with each form you send and each choice you make in our cookie banner, and those copies are encrypted. | To run and protect our site, and to prove your consent and your choices. |
| Calls to our number | Twilio, our phone service, gives us the calling number, time, length and outcome. | To answer and return calls. |
| Account and security data | For people with a login to our platform: name, email and sign-in times. The IP address and browser of each session, and an audit trail of sign-ins and administrative actions with the IP address and browser of each. If you sign in to our website with Google or Facebook, we receive your name, your email address and whether that email is verified. We use them only to find your existing user and sign you in: we do not create accounts from them, keep your Google or Facebook tokens, post on your behalf or share them. | To keep accounts secure. |
Our website keeps a copy of each form you send and forwards it to Feedback OS, the system where we manage our contacts, at os.feedback-studios.com. The copy holds your answers and the text and version of any box you ticked. It also holds how you found our site, the language, the form, the page you sent it from and whether it reached Feedback OS. It keeps your IP address and browser details, encrypted. When the live chat is offered on our site, what you write there goes to Feedback OS, and our team answers from there.
We do not ask for or knowingly collect sensitive data, such as health information, race, religion or precise location, nor payment card or government ID numbers. Please do not send them through our forms or messages. We make no decisions about you by automated means that have legal or similarly significant effects.
Tracking on our site
Our site shows a banner where you decide which tools we may use, in four categories: Necessary (always on), Analytics (Google Analytics 4 and our own measurement in Feedback OS, which tells visits apart with an anonymous visitor id), Marketing (Google Ads and Meta) and Functional (your light or dark look, and the chat messages you already saw). If your device is set to a time zone in Europe or Brazil, our site loads no Analytics, Marketing or Functional tools until you accept them. Everywhere else, the United States included, the banner is a notice: Analytics, Marketing and Functional are on until you turn them off.
You can change your choices at any time from “Your Privacy Choices” at the bottom of every page. When you turn a category off, our site removes the cookies and browser storage that category set on our site. Google’s tags receive your choice through Google Consent Mode. Cookies that another company set on its own domain stay under that company’s control. Our Cookie Policy explains cookies and your browser’s own controls.
Your browser keeps your choice for 6 months in the cookie fdb_consent. Our website’s server also records each decision. The record holds the consent ID shown under “Your Privacy Choices”, the categories you accepted and refused, and the version and language of the banner. It also holds the banner’s mode, whether Global Privacy Control was on, and whether you made a choice, changed it or acknowledged the notice. It adds the page, the time, the country our server detected, and your IP address and browser details, encrypted. We keep these records 13 months.
With Analytics on, we use Google Analytics 4 to count visits and see which pages and sources bring them. It sets cookies on our site and collects information about your visits. This includes the pages you view, the site or ad that brought you, your device and browser, and your approximate location. It also notes, with the page, when you send a form, start a chat or click our phone, WhatsApp or email link. We do not send it what you wrote, your name, your email or your phone.
IP anonymization is on, and Google signals and ad personalization are off in our tag. Our Google Analytics property is linked only to our own Google Ads accounts. Google explains how it uses this information in How Google uses information from sites or apps that use our services. To stop Google Analytics, turn Analytics off under “Your Privacy Choices”, or use Google’s opt-out add-on.
With Marketing on, our site carries the Google Ads tag of our own account. It tells Google about the pages you view and two actions: a form you send, and a click on our phone, WhatsApp or email link. The form action carries the form’s submission ID. Neither carries personal data such as your name, email, phone or message.
The tag also lets us show our ads to people who visited our site. Third-party vendors, including Google, show our ads on sites across the internet, and use cookies to serve ads based on your past visits to our site. You can opt out of Google’s use of cookies for ads in Google’s Ads Settings, and of many companies’ at aboutads.info/choices.
With Marketing on, our site also loads the pixel of our own Meta dataset. It sends Meta page views only, with the page address and browser details that come with them. Its automatic advanced matching is off, so it reads nothing you type into our forms. Meta may use cookies and similar technologies to collect or receive information from our site and elsewhere on the internet, and use it to measure ads and to show ads. To stop it, turn Marketing off under “Your Privacy Choices”, use the “Do Not Sell or Share My Personal Information” button, or send Global Privacy Control. You can also opt out of ads based on your activity at aboutads.info/choices.
With Marketing on, our site also keeps a small record in your browser’s storage, fdb_attr, for 30 days. It holds the first page you landed on, the site that sent you, the link’s campaign tags (UTM values) and ad click IDs such as gclid or fbclid. It holds no name, email or phone. The record goes to Feedback OS with each form you send, and with your messages in the live chat when it is offered. That way we know which campaign or ad brought your request.
With Marketing off, our site keeps no such record and sends no ad click IDs. A form you send still carries the page it was sent from, and the site and campaign tags that led you to that page, if any.
These are the cookies and browser storage items our site uses:
| Name | Category | Set by | What it does | Kept |
|---|---|---|---|---|
| fdb_consent (cookie) | Necessary | Us | Stores your consent choice and its consent ID | 6 months |
| fdb_chat_v1 (browser storage) | Necessary | Us | When the live chat is offered, keeps it open while you move between pages | Until you close the chat |
| fs_optout (cookie) | Necessary | Feedback OS | Remembers that you asked us not to share your visits | 13 months |
| _ga, _ga_* (cookies) | Analytics | Google Analytics | Tell visitors and sessions apart, for our statistics | 2 years |
| fs_vid (cookie) | Analytics | Feedback OS | Anonymous visitor id of our own measurement, to tell visits apart | 13 months |
| fs_vid (browser storage) | Analytics | Feedback OS | Copy of the visitor id, in case the cookie is deleted | 13 months |
| fs_leads (browser storage) | Analytics | Feedback OS | Retry queue for a form that could not be sent (identity fields only, 20 at most) | 7 days |
| _gcl_au, _gcl_aw (cookies) | Marketing | Google Ads | Link the ad click that brought you here to your visit, to measure our ads | 3 months |
| _fbp, _fbc (cookies) | Marketing | Meta | Identify the browser and the Meta ad click, to measure and improve our ads | 3 months |
| fdb_attr (browser storage) | Marketing | Us | Remembers the campaign or ad that brought you here, to attribute your inquiry | 30 days |
| fs-theme (browser storage) | Functional | Us | Remembers whether you chose the light or the dark look | Until you clear your browser data |
| fdb_lc_pm, fdb_lc_pm_s (browser storage) | Functional | Us | Remembers which chat messages you already saw and whether this is your first visit, so a message does not repeat | 12 months; the part for this tab, until you close it |
Apart from Google and Meta, through the tools above, no other company collects information on our site about your activity to follow you across other sites over time.
We treat Global Privacy Control as a request to opt out of the sale or sharing of your data for advertising, whether or not a law requires it of us. We treat the “Do Not Sell or Share My Personal Information” button in our banner the same way. Marketing stays off while your browser sends Global Privacy Control, even if you turn it on in the banner. The button also turns Marketing off.
With Marketing off, the Google Ads tag and Meta’s pixel do not load and fdb_attr is not kept. Google Analytics still counts your visit unless you turn Analytics off. You can also send us an opt-out request, as our Do Not Sell or Share page explains.
We do not respond to the browser’s “Do Not Track” setting. We do honor Global Privacy Control, as described above.
We will update this policy before we add any new tracking tool to our site.
WhatsApp, text messages and calls
When you write to us on WhatsApp at +1 (786) 220-5013, our staff read and answer your messages on our phones and in our systems. Meta runs WhatsApp, and we use it through its WhatsApp Business Platform. The WhatsApp button on our site opens a message that names the page you were on; you can change it before you send it.
We send text messages and automated WhatsApp messages only from Feedback Studios, and only if you agreed to that channel. Your consent covers messages sent with an automated system for the selection and dialing of telephone numbers. You give it by ticking its box on our form and confirming with YES, by texting START and answering YES, or by answering YES when we ask on WhatsApp. The text that asks you to confirm names our program, says up to 10 messages a month, and says “Message and data rates may apply”. It also tells you to reply HELP for help or STOP to cancel. On WhatsApp, the confirmation names us and the program, says up to 10 messages a month and tells you to write STOP to cancel.
Up to 10 messages a month on each channel. Message and data rates may apply. Reply HELP for help, or STOP to stop; in Spanish, AYUDA or ALTO. You can also tell us by email or phone. The full terms, including how disputes about messages are decided, are in our Message Program Terms.
We do not sell, rent or share your mobile number with any third party or affiliate for their own marketing. Your opt-in to texts and your consent are never shared with any third party, except the providers that deliver our messages.
Only our staff and the service providers listed under “Who receives your data” handle your number, and the providers do so only to serve us. Our staff get notice of your request on their work phones, by email or WhatsApp. Your phone number never reaches our advertising accounts, in any form.
When you call us, Twilio, our phone service, keeps the calling number, time and length.
We email you about your request and, since you asked about our services, about them. Our marketing emails carry our postal address and a one-step way to stop them. To stop them, reply “unsubscribe” or write to info [at] feedback-studios.com; we act on it promptly, and never later than 10 business days.
When you send us a form, our server also sends your email address, scrambled with a one-way hash (SHA-256), to our own Meta and Google advertising accounts. It does so to measure and improve our ads, never from your browser. Meta uses it only to match it and then deletes it; Google uses it only to provide us its advertising services.
Data from Google services
Some parts of our site and of Feedback OS connect to Google:
- Sign in with Google. Your name, your email and whether that email is verified, only to find your user and let you in. We do not keep your Google tokens.
- Booking a call. To show free times, Feedback OS reads the busy times of our own team’s Google Calendar. When you book, it creates the event in that calendar with the details you gave us. If you move or cancel the call, Feedback OS moves or removes that event. It only reads busy times and never reads, changes or deletes any other event in that calendar. We never access your Google account or your calendar.
- Google Ads. When a client gives us access to their Google Ads account, we read and manage only the campaigns we run for them. We use that access to report on those campaigns and to change them on the client’s behalf.
We do not sell this data, use it for advertising, share it except as this policy describes, or use it to train AI models. Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You can remove our access at any time in your Google Account permissions (myaccount.google.com/permissions), and ask us to delete what we hold through the contact details below.
Who receives your data
We share personal information only with:
- Service providers that run our systems for us, under their contracts or terms with us, and may use it only for that: IONOS (hosting of our website, our platform and our email), Google (Google Analytics), Twilio (our phone number, which we use for calls, WhatsApp and text messages) and Meta (WhatsApp).
- Services that deliver parts of our pages, which are Google Fonts, cdnjs and unpkg. Your browser fetches fonts and code from them, so they receive your IP address and browser details; we send them nothing else.
- Advertising platforms, which are Google, through the Google Ads tag, and Meta, through its pixel, when Marketing is on (see “Tracking on our site”). When you send us a form, they receive your email address, scrambled, only in our own advertising accounts (see “Email”). It serves only to measure and improve our ads, and never the platforms’ own marketing. Our server sends them nothing else about you.
- Authorities, when the law requires it, and a buyer of our business, who would be bound by this policy. A buyer would not receive your mobile number or your consent to texts.
We do not sell personal information for money. Some state laws can treat advertising and analytics tags like ours as “sharing” personal information, even when no money changes hands. You can turn them off under “Your Privacy Choices”, and our Do Not Sell or Share page explains how to opt out.
When we work for our clients
When we work for a client, for example on its website, forms, phone numbers or ads, the client decides what is collected and why, and its privacy policy applies. We use that data only for that client, under the written agreement we sign with each client. To ask about data a client holds, contact the client; we will help them answer.
How long we keep data
| Data | Kept |
|---|---|
| Leads who never became clients, and their messages | 3 years after your last contact with us: the last time you wrote, called, sent a form or booked a meeting, or one of our team wrote to you. Our automated emails do not extend it. We keep them longer only while a legal claim or investigation requires it, until it ends. |
| Clients, and their messages | While we work together. After that, we keep contracts, invoices and payments 8 years after the end of the tax year of the last invoice, payment or bad-debt write-off. A contract stays at least as long as the rest. Everything else stays 5 years after the end of the last contract or the last contact, whichever is later. We keep them longer only while a legal claim or investigation requires it, until it ends. |
| What we process for our clients: their website visitors, leads and callers | While we work for that client. We delete it within 30 days after our work ends, after returning it to the client if it asks, as our data processing agreement with the client says. The records that prove consent and requests to stop keep the period in their own row. |
| The copy of each form on our website’s server | 3 years, then deleted. Failed and spam submissions, 30 days. |
| Your consents and requests to stop | 5 years after the last message we sent under them or after you withdrew them, whichever is later. A request to stop stands until you opt in again, and at least 5 years. If you ask us to delete your data, we keep these records for the same time, with your number or email scrambled. That way we can show what you agreed to and keep honoring your request to stop. |
| Records of your choices in our cookie banner | 13 months, then deleted. |
| IP address and browser details kept with a form or a cookie choice | As long as that form copy or record, encrypted. |
| Your choices in your browser (fdb_consent) | 6 months. |
| How you found our site, in your browser (fdb_attr) | 30 days. |
| Google Analytics data | 14 months. |
| Our platform’s error and warning logs | 30 days. |
| Technical logs of our servers | Rotated and deleted as they fill. |
| Session details of people with a login (IP address, browser) | Until the session ends. |
| Audit trail of sign-ins and administrative actions in our platform | The IP address and browser of each, 2 years, then cleared. The record of each action, for as long as the platform runs. |
| Backups | Deleted on a rolling schedule. Data we delete leaves them as the older backups are deleted. |
Your rights
You can ask us to show you the personal information we hold about you, correct it, delete it, or stop using it for advertising. Email info [at] feedback-studios.com with “Privacy request” in the subject, or call +1 (786) 220-5013. For the records of your cookie choices, include the consent ID shown under “Your Privacy Choices”. We confirm your identity, answer within 45 days, and tell you if we can’t do something and why.
Even after you ask us to delete your data, we keep a scrambled record of any request to stop messages. We also keep the proof of a consent you gave while we used it, and what a legal claim requires. We will not treat you differently for asking.
Security
We protect data with encryption in transit and for stored secrets, and with access limited by role. Our platform adds two-factor sign-in for anyone with administrative access, an audit trail, and encrypted backups. If a breach affects your personal information, we tell you within 30 days, and the Florida Attorney General when the law requires it.
Children
Our site and services are for businesses and adults. They are not meant for children under 16, and we do not knowingly collect their information. If we learn that we hold information from a child under 16, we delete it.
Visitors in the EU, the UK and Brazil
Our services are meant for businesses in the United States. We process your information in the United States, under our providers’ standard contractual clauses where they offer them. If your device is set to a time zone in Europe or Brazil, our site loads no Analytics, Marketing or Functional tools until you accept them. A form you send from there still reaches us, without ad click IDs unless you accept Marketing.
If you are in the European Union, the United Kingdom or Brazil, we rely on your consent for Analytics, Marketing and Functional tools. We also rely on it for our text and WhatsApp messages. To answer an inquiry, we rely on taking steps at your request, or on our legitimate interest in answering it. To run and protect our site and keep proof of your choices, we rely on our legitimate interest.
You can ask us for access to your data, and for its correction, deletion or restriction. You can object to our use of it, ask for a copy to take elsewhere, and withdraw your consent at any time. We answer within the time your law sets. You can also complain to your data protection authority.
Changes
When we change this policy, we post the new version here with its date in “Last updated”, and it takes effect on that date. If a change is material, we also show a notice on our site and email our clients.
Contact
Feedback Studios LLC · Miami, Florida · info [at] feedback-studios.com · +1 (786) 220-5013