Last updated: 12 AUG 2026
The short version
This policy covers the personal data we collect through crowdfavorite.com and our other public websites, and how we handle it when you contact us, subscribe to our writing, apply for a job, or become a client. We collect contact details you give us, plus analytics and behavioral data about how you use the site. We use a small set of third-party tools to run the site, understand traffic, and identify the companies visiting us. We do not sell your personal data for money.
We also handle data on behalf of clients as part of the work we do for them. Those engagements are governed by our contracts with the client. The section below on the two kinds of data explains the difference.
You have rights over your data no matter where you live, including the right to see it, correct it, and ask us to delete it. Email privacy@crowdfavorite.com and we will handle it.
Who we are
Crowd Favorite, a group of companies, provides services as a digital agency headquartered in the United States, with a globally distributed team. When this policy says “we,” “our,” or “us,” it means Crowd Favorite and the websites we operate.
Two kinds of data, two sets of rules
- Our own data: When you visit our website, email us, subscribe, or apply for a job, we are the controller of that data. Everything in this policy applies.
- Our clients’ data: When we build, host, audit, or maintain a system for a client, we may handle personal data belonging to that client’s users. In those engagements we act as a processor or service provider under the client’s instructions, and our handling is governed by the master services agreement and data processing agreement we sign with that client. If you are a user of a site or application we built for someone else, contact that organization about your data. We will support them in responding.
What we collect
Information you give us
Your name, email address, phone number, company, job title, and whatever you write in a message when you fill out a form, subscribe, email us, or apply for a role, including any submitted documents.
Information we collect automatically
Your IP address, approximate location derived from it, browser and device type, operating system, referring page, the pages you view, the links you click, and how long you stay. Some of this is collected through cookies and similar technologies, which our Cookie Policy describes in detail.
Session recordings and heatmaps
We use Microsoft Clarity to record how visitors interact with our pages, including mouse movement, scrolling, clicks, and page navigation. This produces session replays and aggregate heatmaps. Clarity is configured to mask text entered into form fields. Because these recordings capture behavior rather than page counts, we disclose them separately from ordinary analytics.
Company identification
We use tools that match your IP address and other signals against third-party databases to identify the company you are visiting from, and in some cases the individual. The advertising and visitor identification section names the specific tools.
Information from other sources
We supplement what you give us with data from publicly available sources and business data providers, including company information, professional background, and firmographic detail. We use this to understand who is interested in our work and to prepare for conversations with prospective clients.
Documents you send us
Requests for proposal, statements of work, technical documentation, and similar files. These sometimes contain personal data about people at your organization.
Advertising, visitor identification, and audience building
We use advertising platform technology and identity resolution, and under several privacy laws that counts as targeted advertising or as sharing data for cross-context behavioral advertising. We do not buy display retargeting and we do not run our own ad network.
- LinkedIn: The LinkedIn Insight Tag runs on our site. It measures campaign performance, reports which companies visit us, and lets us build audiences for LinkedIn campaigns.
- Clay: We use Clay’s visitor identification to resolve anonymous website traffic to companies and, where the data allows, to individuals. Our business development team uses this to decide who to reach out to.
- LiveIntent: An identity resolution service that maintains an identity graph built from email engagement, and can recognize a visitor across sites without relying on cookies. Because it does not depend on a cookie, clearing or blocking cookies will not stop it. Declining the advertising category in our cookie banner will.
- RB2B: A person-level identity resolution service. Where Clay identifies the company a visit came from, RB2B identifies the individual, returning a name, LinkedIn profile, and work email address for visitors it can match. It operates on United States traffic only. Our business development team uses this the same way it uses Clay, to decide who to contact.
- Google Analytics 4: Traffic measurement and reporting. We have Google’s advertising features turned off, and we do not send Analytics data to Google Ads audiences.
Opting out
Set your cookie preferences on our site, use the opt-out address in the appendix, or send a Global Privacy Control signal from your browser, which we honor.
Automated analysis and artificial intelligence
We use artificial intelligence (AI) tools in two ways that touch personal data.
Document analysis
When you send us a proposal request, requirements document, or similar file, we may run it through a large language model to summarize it, extract requirements, and draft a response. We use enterprise accounts with contractual commitments that the provider will not train models on our data.
Internal analysis
We aggregate website analytics, email engagement, and customer relationship management (CRM) records into an internal reporting platform, and use AI models to analyze them. This includes summarizing account activity and flagging which prospects look most engaged. A person reviews the analysis and decides what follows from it. We do not use automated decision-making that produces legal or similarly significant effects.
If you would rather we not include your data in this analysis, email us and we will exclude it.
Who we share data with
Service providers
Companies that run parts of our operation under contract: analytics, email delivery, CRM, payment processing, hosting, and the AI providers described above. They may only use the data to provide the service.
Advertising and identity platforms
LinkedIn, Clay, LiveIntent, RB2B, and the other services named in the advertising and visitor identification section.
Legal and regulatory
Regulators, law enforcement, courts, and others when we are legally required, or when we need to establish or defend legal rights. Where we can lawfully tell you, we will.
Business transfers
A buyer or prospective buyer, and their advisers, in connection with a sale, merger, or acquisition of any part of our business.
With your consent
Anyone else you ask us to share with.
We do not sell personal data for money. Some of the sharing above meets the broader definition of “sale” or “sharing” under California and several other state laws, and you can opt out.
Current third-party recipients
| Service | What it does |
|---|---|
| Google Analytics 4, Google Tag Manager | Traffic measurement, tag management |
| Microsoft Clarity | Session recording, heatmaps |
| LinkedIn Insight Tag | Campaign measurement, audience building |
| Clay | Visitor and company identification |
| Pipedrive | Customer relationship management |
| Mailchimp | Email delivery and engagement tracking |
| Anthropic, Amazon Web Services (Bedrock) | AI document and data analysis |
| Stripe | Payment processing |
| Cloudflare | Content delivery, bot protection (Turnstile) |
| Google reCAPTCHA | Form spam protection |
| Complianz | Cookie consent management |
| ip-api.com | IP geolocation |
| Vimeo, YouTube, Spotify, Apple Podcasts | Embedded media |
| Amazon Web Services | Hosting and storage |
| LiveIntent | Identity resolution. |
| RB2B | Person-level visitor identification (US traffic) |
We update this list as our tooling changes. The Cookie Policy carries the current detail on which of these set cookies.
Why we are allowed to process your data
If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on one of these legal bases:
| What we do | Legal basis |
|---|---|
| Respond to your inquiries, provide support | Legitimate interests, or performance of a contract |
| Provide services under a signed agreement | Performance of a contract |
| Send marketing email | Consent |
| Analytics, advertising, and visitor identification cookies | Consent |
| Strictly necessary and security cookies | Legitimate interests |
| Understand and improve our website and services | Legitimate interests |
| Detect and prevent fraud and abuse | Legitimate interests |
| Assess job applications | Legitimate interests |
| Keep records for tax, accounting, and legal purposes | Legal obligation |
Where we rely on legitimate interests, we have weighed our interest against your rights and concluded ours does not override them. You can ask us to explain that assessment.
International transfers
We are headquartered in the United States and our team works from multiple countries, so your data will be transferred and stored outside the country where you live. Those countries may have different data protection laws.
For transfers of data out of the European Economic Area, the United Kingdom, or Switzerland, we rely on the European Commission’s Standard Contractual Clauses, the United Kingdom’s International Data Transfer Addendum, or the EU-U.S. Data Privacy Framework and its UK and Swiss extensions where the recipient is certified. You can request a copy of the relevant safeguards by emailing us.
Security
We maintain administrative, technical, and physical safeguards intended to protect personal data against loss, misuse, and unauthorized access or disclosure. Our sites use TLS encryption in transit, we restrict internal access to personal data to people who need it, and we require multi-factor authentication on the systems that hold it. No system is perfectly secure, and transmitting data over the internet carries risk we cannot eliminate.
If we become aware of a breach affecting your personal data, we will notify you and the relevant regulators where the law requires it.
How long we keep data
| Category | Proposed retention |
|---|---|
| Website analytics | 14 months from collection |
| Session recordings (Clarity) | 30 days for individual recordings; aggregate reporting up to 13 months |
| Cookie consent records | 3 years from the consent event |
| Marketing subscribers | 3 years from your last engagement, or until you unsubscribe |
| Prospect and CRM records | 5 years from last activity |
| Inquiries and correspondence | 3 years from the last message |
| Prospect and CRM records | 12 to 18 months from visit unless the person engages |
| Client contract and project records | 7 years after the engagement ends |
| Billing and payment records | 7 years, for tax and accounting |
| Job applications (not hired) | 1 year from the decision or receipt, whichever is later |
| Data under legal hold | As long as legally required |
At the end of a retention period we delete the data or strip it of anything that identifies you. If you ask us to delete your data sooner, we will unless we are required to keep it.
Your rights
Wherever you live, you can ask us to:
- Tell you what personal data we hold about you and give you a copy
- Correct anything that is wrong or out of date
- Delete your data
- Stop sending you marketing
- Stop using your data for advertising, visitor identification, or AI analysis
- Send your data to you or another company in a portable format
- Withdraw consent you previously gave
Email privacy@crowdfavorite.com. We will confirm receipt and respond within the time the applicable law requires, which is generally 30 to 45 days. We may need to verify your identity first. We will treat you the same whether or not you exercise a right.
Depending on where you live you may have additional rights, including the right to complain to a regulator. Those are in the appendix.
Age
Our website and services are meant for people 18 and older. We do not knowingly collect personal data from anyone under 18, and we do not knowingly collect data from children under 13 at all. If you believe a minor has given us personal data, email us and we will delete it.
Changes to this policy
We update this policy when our practices or the law change. The last-updated date at the top tells you when the current version took effect. If a change materially affects how we use your data, we will tell you before it takes effect, by email where we have your address or by a notice on the site.
How to contact us
Email is fastest and gets you to the right person inside the deadlines the law sets.
Privacy requests and questions
Postal mail
Crowd Favorite, Ltd. 8465 W Sahara Ave Ste 111-164 Las Vegas, NV 89117 United States
EU representative
Appointed under Article 27 of the General Data Protection Regulation:
Bogdan Marian Fireteanu
Berthelot 3, Ap. 14, 4th Floor, 010163, Bucharest, Romania
bfireteanu@crowdfavorite.com
+40721379199
Residents of the European Economic Area and the United Kingdom may contact our EU representative directly on any matter relating to our processing of their personal data.
Appendix: Rights by region
European Economic Area, United Kingdom, and Switzerland
Under the General Data Protection Regulation (GDPR), the UK GDPR, and the Swiss Federal Act on Data Protection, you have the right to access your data, correct it, have it deleted, restrict how we process it, object to processing based on legitimate interests, receive it in a portable format, and withdraw consent at any time. You also have the right to avoid decisions based solely on automated processing that carry legal or similarly significant effects. We make no decisions that way.
You can complain to your national data protection authority. Contact details for European Economic Area authorities are at https://edpb.europa.eu/about-edpb/board/members_en. In the United Kingdom it is the Information Commissioner’s Office at https://ico.org.uk. In Switzerland it is the Federal Data Protection and Information Commissioner at https://www.edoeb.admin.ch.
California
Under the California Consumer Privacy Act as amended by the California Privacy Rights Act, you have the right to know what personal information we collect, use, disclose, and share; to access and receive a copy of it; to correct inaccurate information; to delete it; to opt out of sale and of sharing for cross-context behavioral advertising; and to limit our use of sensitive personal information. We will treat you the same whether or not you exercise these rights.
Categories we collect
Identifiers, including your name, email address, postal address, phone number, and IP address. Commercial information, including services purchased and billing records. Internet and network activity, including browsing history on our site, search history, and interaction with our content and ads. Approximate geolocation derived from your IP address. Professional and employment information, from job applications and business contacts. Inferences drawn from the above, including engagement scoring and firmographic profiles.
Sensitive personal information
We do not intentionally collect sensitive personal information, and we do not use or disclose it for purposes that would trigger the right to limit.
Sale and sharing
We do not sell personal information for money. We do share identifiers, internet activity, and inferences with advertising and identity resolution partners in ways that count as sharing for cross-context behavioral advertising under California law. You can opt out through our cookie preferences, by sending a Global Privacy Control signal, or by emailing privacy@crowdfavorite.com.
Authorized agents
You may use an authorized agent to make a request. We will ask for proof of authorization.
Complaints
If we cannot resolve your complaint, you may contact the Complaint Assistance Unit of the Division of Consumer Services, California Department of Consumer Affairs, 1625 North Market Blvd., Suite N 112, Sacramento, California 95834, or by telephone at (800) 952-5210 or (916) 445-1254.
Other United States states
Residents of Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia have rights under their own state privacy laws. These generally include the right to confirm whether we process your data, access it, correct it, delete it, receive a portable copy, and opt out of targeted advertising, sale, and profiling in furtherance of decisions with legal or similarly significant effects.
Use the same address: privacy@crowdfavorite.com. We honor Global Privacy Control signals as an opt-out for targeted advertising and sale.
If we deny your request, you may appeal by replying to our response with the word “appeal.” We will respond to the appeal within the period your state’s law requires, generally 45 or 60 days, and tell you how to contact your state attorney general if you disagree with the outcome.
Nevada
Nevada residents may ask us not to sell personal information covered by Nevada law. We make no such sales, and you can register a request at privacy@crowdfavorite.com.