Legal
PorchLoom Privacy Policy
Effective date: October 21, 2026 · Last updated: October 21, 2026
This Privacy Policy explains how PorchLoom (“PorchLoom,” “we,” “us”), a web services business in Blackstone, Massachusetts, collects, uses, shares, and protects information through porchloom.com, our intake forms, and our emails.
This policy covers PorchLoom’s own practices. It does not cover the websites we build and host for clients (see Section 11).
Questions: [email protected]
1. Information we collect
1.1 Information you give us.
- Your name, business name, business email, and any phone number you choose to give us;
- business details such as address, hours, services, prices, service area, and social media links;
- content for your website: text, logos, photos, and other files; and
- your answers on our forms, including the checkbox confirming that you understand the preview build is free.
Our forms state that by submitting, you agree to this Privacy Policy. PorchLoom sends marketing email only to people who opt in to receive it. No form on porchloom.com currently offers a marketing opt-in.
1.2 Account and billing information (clients only). If you become a client: billing contact and plan details. Payment information is collected and stored by our payment processor. PorchLoom does not store full card or bank account numbers. We may see limited details such as card brand, last four digits, and expiration date.
1.3 Email communications. The contents of emails you send us and records of the emails we send you, including support requests and, if you become a client, account and billing messages.
1.4 Information collected automatically. porchloom.com sets no cookies and uses no trackers. Like any website host, our hosting provider may process technical information such as IP address, browser type, and the time of a request in order to deliver and secure the site. Our email delivery provider may record whether an email was delivered.
1.5 Publicly available business information. To build a free website preview, we may gather publicly available information about a local business (for example, its name, address, hours, and public listing details).
1.6 Information we do not want. Please don’t send us Social Security numbers, driver’s license numbers, or full financial account numbers. We don’t need them.
2. How we use information
- To build your preview and, if you sign up, your website and add-ons;
- if you become a client, to provide the services in your client agreement, including billing, receipts, and support;
- to send transactional and relationship emails (for example, your preview link, order confirmations, receipts, renewal and price-change notices, and service and security updates);
- to send marketing emails, only to people who opt in, with an unsubscribe option in every one (Section 4);
- if you become a client, to keep records of your client agreement;
- to secure, maintain, and improve porchloom.com and our services; and
- to comply with law and protect our rights.
We do not sell your personal information, and we do not share it for third-party targeted advertising.
3. Vendors and sharing
When you submit a form on porchloom.com, your answers go to PorchLoom’s internal automation that processes inquiries, may be stored with our cloud storage provider (together with any files you upload), and may be sent to PorchLoom by our email delivery provider. We share information only with service providers that help us run PorchLoom, and only as needed for that work:
| Purpose | What they receive |
|---|---|
| Website hosting (porchloom.com and client websites) | Website files, client content, technical request data |
| Internal automation that processes inquiries (receives form submissions) | Form answers |
| Cloud storage of form submissions and uploads, where used | Form answers and files you upload |
| Email delivery (including notices of new form submissions) | Form answers, names, email addresses, email content, delivery data |
| Payments (clients only) | Billing name, email, payment details |
| Storage and backups | Client content and backups |
| Business email and documents | Emails and records |
We may also share information: (a) with Google or Meta when you ask us to set up your Google Business Profile or Facebook page (they handle it under their own policies); (b) if required by law, subpoena, or court order; (c) to protect rights, safety, or property; or (d) with a successor if PorchLoom’s business is reorganized or transferred, subject to this policy.
4. Email and your choices
PorchLoom communicates by email only.
- Transactional and relationship emails about your preview request and, if you become a client, your account and service. They won’t have marketing as their main purpose.
- Marketing emails are sent only to people who opt in, and follow the federal CAN-SPAM Act. Every marketing email identifies PorchLoom, includes our postal address, and gives a clear way to unsubscribe. We honor unsubscribe requests promptly, and always within 10 business days, and we never sell or transfer the addresses of people who opt out.
- To unsubscribe, click “unsubscribe” in any marketing email or email [email protected] with “UNSUBSCRIBE.”
5. Cookies and trackers
porchloom.com sets no cookies and uses no trackers, analytics, advertising pixels, or similar technologies. If that changes, we will update this policy before the change takes effect.
6. How we protect information
PorchLoom follows the Massachusetts data security standards (201 CMR 17.00), including:
- a written information security program appropriate to our size;
- requiring vendors that handle personal information to protect it;
- unique passwords, multi-factor authentication where available, and access limited to people who need it;
- encryption of personal information sent over public networks and stored on laptops or portable devices;
- up-to-date firewalls, security patches, and malware protection;
- reasonable monitoring for unauthorized access; and
- documenting and reviewing any security incident.
No system is perfectly secure. If a breach of security involving personal information of Massachusetts residents occurs, we will give the notices required by Massachusetts law (M.G.L. c. 93H).
7. How long we keep information
- Preview data for businesses that don’t sign up: deleted when it is no longer needed, or sooner on request.
- Client content and website files (clients only): kept while you are a client and during the export window after cancellation, then deleted from active systems. Backups are overwritten within 30 days after deletion.
- Plus plan emails are sent only from each client’s own verified domain. PorchLoom does not send them from a PorchLoom domain or add PorchLoom links or branding.
- Plus plan customer contact lists (information we process for a client about the client’s own customers): kept while the client has the Plus plan. When the client cancels, we offer the client an export, then securely delete the list 90 days after cancellation, so it cannot practicably be read or reconstructed. Backups are overwritten within 30 days after deletion.
- Unsubscribe lists (for PorchLoom’s own marketing and for Plus plan clients): kept indefinitely so opt-outs keep being honored, limited to the minimum fields (email address, opt-out date, account ID, and opt-out scope), and used only to prevent unwanted emails.
- Compliance records for Plus plan email: consent records, campaign approvals, and send records are kept 6 years after the contact list is deleted, so we can show that emails were sent with consent and that opt-outs were honored. They are limited to minimal fields (email address, the client’s account ID, message type, consent method and form version, timestamps, IP address and browser information for online opt-ins, opt-out events, approval details, and send details). They contain no names, appointment details, or message merge data, and are used only for compliance and legal defense.
- Billing records: 7 years, for tax and accounting purposes.
- Client agreement records (clients only): kept as long as needed for tax, accounting, and legal purposes.
8. Your choices and rights
You can email [email protected] to see the personal information we hold about you, correct it, ask us to delete it (except records we must keep, as described above), or unsubscribe from marketing. We will reply promptly.
9. Children
porchloom.com and our services are for businesses and are not directed to children under 13. We do not knowingly collect personal information from children.
10. Changes to this policy
We may update this policy. We will post the new version with a new “Last updated” date and, for material changes, email active clients before the change takes effect.
11. Your website needs its own privacy policy
If you become a client, your client agreement governs our services, and this policy covers how we handle information. This policy covers only PorchLoom’s practices. The website we build for your business is your website, and you are responsible for its privacy policy. If your website collects information from visitors (for example, contact or booking forms, newsletter sign-ups, or embedded maps), you should post your own privacy policy describing what your business collects and how you use it. PorchLoom can add a privacy policy page you provide, but PorchLoom does not give legal advice about your website’s compliance.
Contact
PorchLoom · Blackstone, Massachusetts · [email protected]