1. Introduction
MSP Revenue Architecture ("we," "us," or "our") is a business-to-business consulting firm that helps managed service providers build predictable revenue systems and transferable business value. We are committed to protecting the privacy of individuals who visit our website, submit information through our forms, or engage our consulting services.
This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you visit our website at msprevenuearchitecture.com (the "Site") or engage our services. Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Site or submit personal information to us.
2. Information We Collect
2.1 Information You Provide Directly
We collect personal information that you voluntarily provide to us when you interact with our Site or services, including:
- Contact information: Your full name, email address, phone number, and company name when you submit a Revenue Architecture Diagnostic request form or contact us directly.
- Business information: Details about your MSP operations that you share during the diagnostic intake process, including but not limited to annual revenue range, number of employees, service offerings, and operational metrics.
- Communications: Any information you provide in emails, form submissions, or other correspondence with us.
2.2 Information Collected Automatically
When you visit our Site, we automatically collect certain technical information, including:
- Device and browser information: IP address, browser type and version, operating system, device type, and screen resolution.
- Usage data: Pages visited, time spent on pages, referring URLs, click patterns, and navigation paths through the Site.
- Cookies and similar technologies: We use cookies, web beacons, and similar tracking technologies to collect information about your browsing activity. See Section 8 below for more information.
3. How We Use Your Information
We use the personal information we collect for the following purposes:
- Process diagnostic requests: To evaluate, respond to, and fulfill Revenue Architecture Diagnostic engagement requests.
- Deliver services: To provide consulting services, findings reports, and related deliverables.
- Communicate with you: To respond to inquiries, send engagement-related correspondence, and provide information about our services that you have requested or that may be relevant to your business.
- Improve our Site and services: To analyze usage patterns, diagnose technical issues, and enhance the content, functionality, and user experience of our Site.
- Comply with legal obligations: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.
- Protect our rights: To enforce our Terms of Service, protect the security and integrity of our Site, and protect the rights, property, or safety of MSP Revenue Architecture, our clients, or others.
4. Legal Bases for Processing
We process your personal information based on the following legal grounds:
- Consent: Where you have given us explicit consent to process your personal information for specific purposes, such as when you submit a diagnostic request form or subscribe to communications.
- Contractual necessity: Where processing is necessary to perform a contract with you or to take steps at your request prior to entering into a contract, such as processing your diagnostic engagement.
- Legitimate interest: Where processing is necessary for our legitimate business interests, such as improving our Site and services, provided those interests are not overridden by your data protection rights. Our legitimate interests include operating and improving our business, understanding how our Site is used, and marketing our services to relevant audiences.
- Legal obligation: Where processing is necessary for compliance with a legal obligation to which we are subject.
5. Information Sharing and Disclosure
We do not sell your personal information. We do not rent, trade, or otherwise make your personal information available to third parties for their own marketing purposes.
We may share your personal information only in the following limited circumstances:
- Service providers: We may share information with trusted third-party service providers who assist us in operating our Site and conducting our business, including web hosting providers, email service providers, and analytics platforms. These providers are contractually obligated to keep your information confidential and to use it only for the specific purposes we direct.
- Legal requirements: We may disclose your information if required to do so by law, regulation, or in response to valid legal process, such as a subpoena, court order, or government request.
- Business transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you via email or prominent notice on our Site of any change in ownership or uses of your personal information, as well as any choices you may have regarding your information.
- Protection of rights: We may disclose information when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
6. Data Retention
We retain your personal information for as long as reasonably necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Specifically:
- Diagnostic and engagement data: We retain information related to consulting engagements for a minimum of three (3) years following the conclusion of the engagement, or longer as required by applicable law.
- Marketing and communication data: We retain contact information for ongoing communications until you opt out or request deletion.
- Analytics data: Aggregated and anonymized analytics data may be retained indefinitely for statistical and business improvement purposes.
When personal information is no longer needed for the purposes described in this policy, we will securely delete or anonymize it in accordance with our data retention schedule.
7. Your Privacy Rights
Depending on your state of residence, you may have specific rights regarding your personal information under applicable privacy laws. Below is a summary of rights available under major state privacy laws.
7.1 California (CCPA/CPRA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):
- Right to know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it.
- Right to delete: You have the right to request that we delete any personal information we have collected from you, subject to certain exceptions provided by law.
- Right to correct: You have the right to request that we correct inaccurate personal information that we maintain about you.
- Right to opt-out of sale or sharing: You have the right to opt out of the sale of your personal information or the sharing of your personal information for cross-context behavioral advertising. We do not sell or share your personal information for these purposes.
- Right to limit use of sensitive personal information: You have the right to limit the use and disclosure of sensitive personal information. We do not collect sensitive personal information as defined by the CPRA.
- Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you services, charge you different prices, provide a different quality of service, or suggest that you will receive a different price or quality of service for exercising your rights.
7.2 Virginia (CDPA)
If you are a Virginia resident, you have the following rights under the Virginia Consumer Data Protection Act (CDPA):
- Right to access: You have the right to confirm whether we are processing your personal data and to access such data.
- Right to correct: You have the right to correct inaccuracies in your personal data.
- Right to delete: You have the right to request deletion of your personal data.
- Right to data portability: You have the right to obtain a copy of your personal data in a portable and readily usable format.
- Right to opt out: You have the right to opt out of the processing of your personal data for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.
7.3 Colorado (CPA)
If you are a Colorado resident, the Colorado Privacy Act (CPA) provides you with rights similar to those described under the Virginia CDPA above, including the right to access, correct, delete, and obtain a portable copy of your personal data, as well as the right to opt out of targeted advertising, the sale of personal data, and certain profiling activities.
7.4 Connecticut (CTDPA)
If you are a Connecticut resident, the Connecticut Data Privacy Act (CTDPA) provides you with rights similar to those described under the Virginia CDPA above, including the right to access, correct, delete, and obtain a portable copy of your personal data, as well as the right to opt out of targeted advertising, the sale of personal data, and certain profiling activities.
7.5 Other State Privacy Laws
Additional states, including Utah, Texas, Oregon, Montana, Iowa, Indiana, Tennessee, and others, have enacted or are implementing consumer privacy laws that provide similar rights. If you are a resident of any state with an applicable privacy law, we will honor your requests consistent with applicable legal requirements.
7.6 How to Exercise Your Rights
To exercise any of the rights described above, you may submit a request by contacting us at:
Email: privacy@msprevenuearchitecture.com
When submitting a request, please include your full name, email address, state of residence, and a description of the right you wish to exercise. We will verify your identity before processing your request by matching the information you provide against the information we have on file. We will respond to verifiable requests within the timeframes required by applicable law (generally within 45 days).
If we deny your request, you may appeal our decision by contacting us at the email address above with the subject line "Privacy Rights Appeal."
8. Cookies and Tracking Technologies
Our Site uses cookies and similar tracking technologies to enhance your experience and collect usage data. The types of cookies we use include:
- Strictly necessary cookies: These cookies are essential for the Site to function properly and cannot be disabled.
- Analytics cookies: These cookies allow us to understand how visitors interact with our Site by collecting information about pages visited, time spent on pages, and navigation patterns. We use Google Analytics for this purpose.
- Functional cookies: These cookies remember your preferences and settings to provide a more personalized experience.
Managing cookies: You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies, or to set preferences for specific websites. Please note that disabling certain cookies may affect the functionality of the Site. For more information about managing cookies, consult your browser's help documentation.
Do Not Track: Some browsers offer a "Do Not Track" (DNT) signal. Our Site does not currently respond to DNT signals. However, you can manage your privacy preferences through cookie settings as described above.
9. Third-Party Services
Our Site may use the following third-party services that collect and process data on our behalf:
- Google Analytics: We use Google Analytics to collect and analyze usage data about our Site. Google Analytics uses cookies to track user interactions. The data collected is processed in accordance with Google's Privacy Policy. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.
- Web hosting providers: Our Site is hosted by third-party hosting providers that may have access to server logs containing IP addresses and other technical data.
- Email service providers: We use third-party email services to send correspondence and may share your email address with these providers solely for the purpose of delivering messages on our behalf.
10. Children's Privacy
Our Site and services are not directed at individuals under the age of 13, and we do not knowingly collect personal information from children under 13. Our services are designed exclusively for business-to-business engagements with MSP owners, operators, and executives. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete such information promptly. If you believe a child under 13 has provided us with personal information, please contact us at privacy@msprevenuearchitecture.com.
11. International Data
MSP Revenue Architecture is based in the United States, and our Site and services are intended for users located within the United States. If you access our Site from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using our Site or providing information to us, you consent to the transfer and processing of your data in the United States.
12. Security
We implement reasonable administrative, technical, and physical security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit using SSL/TLS protocols.
- Access controls limiting who within our organization can access personal information.
- Regular security assessments of our systems and processes.
- Secure storage of electronic records with appropriate backup and disaster recovery measures.
However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially reasonable means to protect your personal information, we cannot guarantee its absolute security.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes to this policy, we will:
- Update the "Last updated" date at the top of this page.
- Post a notice on our Site if the changes are significant.
- Where required by law, obtain your consent before applying material changes to how we process your personal information.
We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
MSP Revenue Architecture
Email: privacy@msprevenuearchitecture.com
For requests related to your privacy rights, please include "Privacy Rights Request" in the subject line of your email and provide sufficient information for us to verify your identity and process your request.