1. Overview & Scope
TheBeforeClick ("TheBeforeClick," "we," "us," or "our"), headquartered in Edmonton, Alberta, Canada, is committed to safeguarding personal and business information. This Privacy Policy outlines our principles and practices regarding the collection, handling, storage, and protection of information obtained through our primary domain (https://thebeforeclick.com), diagnostic audit tools, speed-to-lead automation pipelines, and consultative engagements.
We adhere strictly to the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA), applicable provincial privacy legislation (such as Alberta's Personal Information Protection Act), and industry best practices for data sovereignty and enterprise communication security.
2. Information We Collect
We only gather data necessary to provide high-precision AI Search Optimization (AEO), Generative Engine Optimization (GEO), and Speed-to-Lead CRM automation services. The categories of data collected include:
- Diagnostic & Domain Information: Business website URLs, publicly indexed metadata, domain registration details, and search engine crawl results submitted voluntarily through our audit scanner.
- Contact & Identification Data: Full name, professional email address, corporate telephone number, company legal name, and job title provided when requesting reports, downloading resources, or booking strategy consultations.
- Client Telephony & CRM Inputs: For subscribed clients, authorized webhook endpoints, CRM credentials (OAuth tokens or API keys for Jobber, Clio, ServiceTitan, HubSpot), inbound prospect telephone numbers, and SMS message content processed during real-time speed-to-lead qualification.
- Machine Interaction & Telemetry Data: IP addresses, browser user-agent tokens, timestamp headers, and page interaction telemetry gathered for server load management and firewall security.
3. How Information is Used
TheBeforeClick uses collected data exclusively for explicit, authorized commercial purposes:
- Delivering Diagnostic AEO Reports: Scanning public website architecture, structured data schemas, and entity graphs to benchmark AI recommendation visibility against regional competitors.
- Executing Speed-to-Lead Workflows: Relaying inbound customer inquiry webhooks into sub-60-second SMS responses, missed-call auto text-backs, and direct telephone bridge calls on behalf of the client.
- Client Communications & Strategy Calls: Confirming calendar appointments via Cal.com, delivering monthly citation telemetry reports, and managing sprint deliverables.
- Security & Network Integrity: Blocking malicious bot traffic, verifying authorization for automated API endpoints, and preventing fraudulent submissions.
4. AI Diagnostics & Autonomous Agent Indexing
When you input a domain into our diagnostic tool, our automated scanners review public endpoints (including /robots.txt, /sitemap.xml, schema markup, and public HTTP response headers). This diagnostic:
- Does not access private intranets, behind-firewall databases, or non-public administrative systems.
- Generates an automated summary comparing your public presence against AI answer engines (ChatGPT, Perplexity, Claude, Google AI Overviews).
- Maintains compliance with web crawling standards and respects standard rate limits.
5. Telephony, SMS & Speed-to-Lead Compliance
Our Pillar 02 automation integrates with enterprise telecommunication providers (such as Twilio) to execute instant SMS notifications and phone bridges. For all telephony implementations:
- Explicit Opt-in Consent: Clients are responsible for ensuring their inbound lead forms include clear consumer disclosures compliant with Canada's Anti-Spam Legislation (CASL) and US TCPA regulations.
- Unsubscribe & STOP Protocols: All automated SMS sequences dynamically process standard STOP, CANCEL, and UNSUBSCRIBE keywords, instantly halting further outbound messaging.
- A2P 10DLC Registration: Messaging routes are fully registered with Tier-1 carriers under verified brand profiles to ensure high deliverability and spam prevention.
6. Data Security, Storage & Retention
We implement robust technical and organizational measures to protect your information against unauthorized access, loss, or alteration:
- Encryption Protocols: All data in transit is encrypted using Transport Layer Security (TLS 1.3). Sensitive credentials and API tokens stored for client integrations are encrypted at rest with AES-256 standards.
- Data Sovereignty: Primary production records and databases are stored in secure North American enterprise cloud facilities with strict multi-factor authentication (MFA) access controls.
- Retention Policy: Diagnostic scan data is retained for 90 days to support ongoing trend comparisons, after which unassociated records are purged. Active client CRM telemetry is retained solely for the duration of the commercial agreement plus standard statutory retention windows.
7. Your Privacy Rights (PIPEDA & Canadian Legislation)
Under Canadian federal and provincial privacy laws, you possess definitive rights concerning your personal information:
- Right to Access: You may request a complete record of the personal information we hold about you.
- Right to Rectification: You may request corrections to inaccurate or incomplete records.
- Right to Erasure / Withdrawal of Consent: Subject to legal, commercial, or contractual obligations, you may withdraw your consent for data processing and request data deletion.
To exercise any of these rights, contact our Privacy Compliance Officer at [email protected]. We respond to all formal requests within 30 days.
8. Third-Party Integrations & Sub-Processors
To deliver seamless speed-to-lead automation and calendar bookings, we partner with verified sub-processors that maintain SOC 2 Type II or ISO 27001 certifications:
- Telecommunications & SMS: Twilio Inc. (Voice and SMS infrastructure).
- Calendar Scheduling: Cal.com (Encrypted meeting coordination).
- Client CRM Endpoints: Authorized REST APIs (Jobber, Clio, ServiceTitan, HubSpot) as explicitly configured and authenticated by client administrators.
9. Privacy Officer Contact Information
Questions, concerns, or requests regarding this Privacy Policy or our data governance practices should be directed to our designated Privacy Officer: