Privacy Policy

Version 2026-11-04 · Effective November 4, 2026 · Shelf & Suites LLC, New Jersey

Resumen en españolExplica qué información recogemos cuando usas shelfandsuites.com o corres el reporte gratis: el negocio que buscas, tu nombre, teléfono, correo e idioma si los das, datos públicos sobre el negocio (Google, su sitio web, Yelp, Instagram público) y lo que responden los asistentes de IA a preguntas generales; si eres cliente, también tus datos de cuenta, el pago (que guarda Stripe, no nosotros) y las cuentas que conectes, con sus llaves de acceso cifradas. Automáticamente guardamos registros del servidor, una versión cifrada de un solo sentido (hash) de tu dirección IP, no la dirección misma, los registros de tu consentimiento y tu idioma en tu propio navegador; no usamos cookies publicitarias de terceros. La usamos para hacer tu reporte, contactarte si lo pediste, prestar y cobrar el servicio, evitar abusos y cumplir la ley; mandamos textos solo con tu consentimiento expreso. No vendemos tu información personal ni la usamos para entrenar modelos de IA. La compartimos con quienes nos prestan el servicio: EricSupply LLC (EC Product Lab), que opera la plataforma, Supabase, Vercel, Google, Yelp, Anthropic, OpenAI, Perplexity (solo preguntas generales sobre un tipo de comida o de negocio y una ciudad, nunca tus datos de contacto), Meta, Twilio y Stripe, además de asesores y autoridades cuando la ley lo exige. Guardamos los reportes gratis 24 meses desde el último reporte de ese negocio, tus datos de contacto hasta que pidas borrarlos o 24 meses después del último contacto, los registros de consentimiento 5 años y los datos de clientes mientras dure el acuerdo y 90 días después (los registros de cobro, 7 años). Si la revisión gratis te pide un código por correo, nunca guardamos el código (solo un hash; vence en 10 minutos), guardamos tu nombre y correo con la solicitud unos 7 días y un hash de tu correo de forma permanente, para dar una sola revisión gratis por correo; Resend manda ese correo y Cloudflare Turnstile revisa que no seas un bot. Puedes pedirnos en cualquier momento qué información tuya tenemos, corregirla o borrarla, escribiendo a info@shelfandsuites.com; respondemos en 30 días. Nuestros servicios son para mayores de 18 años. El texto en inglés es el que rige. Si quieres este documento completo en español, escríbenos a info@shelfandsuites.com y te lo mandamos.

Who we are What we collect How we use it Who we share it with AI assistants and third-party data Text messages Cookies and storage How long we keep it Your choices and rights Security Children Changes

1. Who we are

Shelf & Suites LLC ("Shelf & Suites", "we", "us") is a New Jersey company that helps independent restaurants and other local businesses get found online. We operate shelfandsuites.com and the free Visibility Report. Our technology, including the audit engine and the client dashboard, runs on the EC Presence platform operated for us by EricSupply LLC (doing business as EC Product Lab), Paramus, New Jersey, which processes data on our behalf under this policy.

This policy covers the website, the free report, and the services we provide to paying clients. If you are a client, your Client Service Agreement adds to this policy and controls where the two differ.

2. What we collect

Information you give us

The business you look up. The name you type and the Google listing you select. Looking a business up does not require you to own it.
Contact details when you unlock a full report, ask us to call, or sign up: your name, phone number, email address, preferred language, and anything you write in a message to us.
Email code for the free check. Before a free check runs we may ask for your name and email and send a 6-digit code to that email. The code is never stored, only a one-way hash of it, and it expires after 10 minutes. To give each email one free check, we keep a one-way hash of your email address. Once you confirm the code, your name and email become the contact details for that report.
Account and billing details if you become a client: the business you authorize us to work on, your role there, and payment information, which is collected and stored by Stripe, not by us. We see the last four digits of a card and billing status.
Connected accounts if you become a client and choose to connect them: Google Business Profile, Google Search Console, Facebook Pages, Instagram Business accounts, and advertising accounts. We store the access tokens Google and Meta issue, encrypted, and only the data those connections return.

Information we collect automatically

Server logs: IP address, browser type, pages requested, and timestamps. For the free report we store a one-way hash of your IP address, not the address itself, to limit how many reports one connection can run per hour.
Consent records: when you accept our terms, request texts, or unlock a report, we record what you agreed to, the version, the time, and the hashed IP address.
Browser storage: your language preference (English or Spanish), kept in your own browser. We do not use third-party advertising cookies on shelfandsuites.com.

Information we collect about businesses from public sources

To produce a report we gather information that businesses publish about themselves or that is publicly available: Google Business Profile details (name, address, phone, hours, rating, review count, photos), the public pages of the business's website, Yelp listing details, and public Instagram profile information such as follower count. We also record how AI assistants answer general questions such as "best Dominican food in Paterson", including which businesses they name. This is information about businesses, not about individual people, and we collect it to the same extent anyone searching those services could.

3. How we use it

To produce the report you asked for and show you the result.
To contact you about that report when you give us a phone number or email and ask us to. One of our founders will follow up personally.
To provide, bill for, and improve the services you buy from us.
To send text messages only with your express consent (see Text messages).
To keep the free report from being abused (rate limits, fraud and security monitoring).
To understand what helps local businesses get found, using aggregated, de-identified results across reports. We do not publish anything that identifies a business without its owner's permission.
To comply with law and enforce our terms.

We do not sell personal information, and we do not share it with third parties for their own marketing. We do not use personal information to train AI models.

Recipient	What	Why
EC Product Lab / EricSupply LLC	Everything in this policy	Operates the EC Presence platform that stores and processes it for us
Supabase, Vercel	Stored data; website and API traffic	Database and hosting
Google (Places, PageSpeed, Business Profile, Search Console, Ads)	Business names and locations we look up; connected-account data for clients	Finding the business and reading its public and, for clients, connected data
Yelp	Business name and location	Checking the listing matches Google
Anthropic, OpenAI, Google, Perplexity	General questions naming a kind of food or business and a town; never your contact details	Observing how AI assistants answer
Meta (Facebook, Instagram)	Public profile lookups; connected-account data for clients	Social checks; publishing and insights for clients
Resend	Your email address and the code	Sending the free check's email code
Cloudflare (Turnstile)	Your IP address and browser signals during the security check	Telling people from bots before we send a code
Twilio	Phone numbers and message content	Sending texts you consented to and alerting our team
Stripe	Payment details	Billing for clients
Professional advisers, authorities	What is required	Legal compliance, protecting rights, a sale or merger of the business

Each provider processes data under its own terms and security commitments. We do not give any of them permission to use your personal information for their own purposes.

5. AI assistants and third-party data

Part of each report records what AI assistants say when asked where to eat or which local business to call. We send those assistants only general questions built from a cuisine or a kind of business and a town (for example, "Where can I take my family for Dominican food in Paterson?" or "Recommend a reliable plumber in Paramus"). We never send your name, phone number, email, or any personal information to an AI assistant. The answers we receive may name businesses, including yours and your competitors; we store those answers so you can see exactly what was said. We do not use any of this to train models.

If you are the owner of a business that appears in a report that someone else ran and you want the public information about it corrected or removed from our records, contact us (see Your choices and rights). Reports are private to the person who ran them and to our team; we do not publish reports.

6. Text messages

We send text messages only when you have given express consent by checking a box that says so, and only for the purpose you agreed to: following up on a report you ran, scheduling a conversation, and, for clients, service updates. Message frequency varies; typically no more than four per month unless you are actively working with us. Message and data rates may apply. Reply STOP at any time to opt out and HELP for help. Consent to receive texts is not a condition of receiving a report or buying any service. Phone numbers collected for text consent are not shared with third parties for marketing.

7. Cookies and browser storage

shelfandsuites.com stores your language preference in your browser's local storage and uses no advertising or cross-site tracking cookies. The client dashboard (EC Presence) uses a strictly necessary session cookie to keep you signed in. Our hosting provider may record technical logs as described above.

8. How long we keep it

Free reports: 24 months from the last report on that business, so a returning owner can see what changed; then deleted or de-identified.
Contact details from a free report: until you ask us to delete them or 24 months after our last contact, whichever is first.
Consent records: 5 years, because we may need to prove consent was given.
Email codes: the code request (your name, email, language and the code's hash) is kept about 7 days; older requests are cleared whenever a new code is sent. The one-way hash of your email that marks its free check as used is kept permanently.
Client data: for the life of the agreement and 90 days after, except billing records, which we keep 7 years for tax purposes, and anything you ask us to delete sooner, which we delete within 30 days where the law allows.
Connected-account tokens: deleted when you disconnect the account or end the agreement.

9. Your choices and rights

You can ask us, at any time, to tell you what personal information we hold about you, to correct it, to delete it, or to stop using it for a purpose you did not agree to. Email info@shelfandsuites.com or text the number we contacted you from. We answer within 30 days and may need to verify you are who you say you are. Residents of states with consumer privacy laws have the rights those laws provide, including the right not to be discriminated against for exercising them; we honor those requests for everyone regardless of where they live.

To stop texts, reply STOP. To stop emails, use the unsubscribe link or tell us. To delete your language preference, clear your browser's site data.

10. Security

Data is encrypted in transit and at rest. Connected-account tokens are encrypted with a key separate from the database. Access to client data is limited to the two founders and to the platform operator's engineering staff under confidentiality obligations, and every read and write is logged. No system is perfectly secure; if a breach affects your personal information we will notify you as the law requires.

11. Children

Our website and services are for business owners and their authorized representatives who are at least 18. We do not knowingly collect information from anyone under 18; if we learn we have, we delete it.

12. Changes

When we change this policy we update the version and effective date at the top and, for clients and anyone who has given us contact details, we tell you by email or text before a material change takes effect. Continuing to use the website or services after that date means you accept the new version. Earlier versions are available on request.

Questions about this document: info@shelfandsuites.com. Shelf & Suites LLC, New Jersey.