Privacy Policy.

Urso builds analytics dashboards for business owners ("Clients"). To do that, Clients authorize us to access data in the third-party tools they already use, so we can show it back to them in one place. This Policy applies both to visitors of our website and to the Client account data we process on their behalf.

We collect three kinds of information:

• Information you give us — your name, email, business name, and anything you send when you contact us or request a diagnostic.
• Data from services you connect — when a Client authorizes a connection, we access business data from the platforms below, strictly to power their dashboard: Google Business Profile (listing details, reviews, ratings, replies, and performance insights for locations you manage); QuickBooks Online (financial reports, expenses, vendor bills, and accounting records); FranPOS (point-of-sale orders, products, customers, appointments, and staff records); and Twilio (call metadata such as time, answered/missed status and duration, and SMS delivery status).
• Information collected automatically — basic usage and device information, and cookies, when you visit urso.ws, used to operate and improve the site.

We use information only to run and improve the Services:

• To provide and maintain the dashboards and the analytics, insights, and recommended actions in them.
• To take actions you authorize on your behalf — for example, drafting and posting replies to your reviews, or texting back a missed caller.
• To communicate with you about the Services and respond to your requests.
• To secure, troubleshoot, and improve the Services, and to meet legal obligations.

When you connect a Google account, Urso accesses Google Business Profile data only to display it in your dashboard and, at your direction, to reply to your reviews and update your listing. We request the minimum scopes needed, and only for the locations you authorize.

We do not allow humans to read your Google data except: (a) with your explicit consent; (b) where necessary for security purposes, or to comply with applicable law; or (c) where the data has been aggregated or anonymized and is used to operate or improve the Services.

We share information only as needed to operate the Services:

• Service providers that host and process data for us — such as Supabase (database) and Vercel (hosting) — under agreements that require them to protect it.
• The platforms you connect, when we act at your direction (for example, posting a review reply back to Google).
• Legal and safety — when required by law, or to protect the rights, property, or safety of Urso, our Clients, or others.
• Business transfers — if Urso is involved in a merger or acquisition, with notice to you.

We keep data only as long as we need it to provide the Services, or as required by law. When a Client ends their engagement or disconnects an account, we delete or anonymize the associated data within a reasonable period, unless we are legally required to keep it.

We protect data with encryption in transit, access controls, and strict server-side handling of all credentials and access tokens — these are never exposed to your browser. No system is perfectly secure, but we work hard to safeguard your information.

You can disconnect any connected account at any time — for example, by revoking Urso's access in your Google Account security settings or in QuickBooks — which stops our access going forward.

You can ask us to access, correct, or delete your information by emailing us. Depending on where you live, you may have additional rights (such as under the GDPR or CCPA), and we will honor applicable requests.

Our Services connect to and depend on third parties, each with its own privacy policy: Google Business Profile, QuickBooks Online (Intuit), FranPOS, Twilio, Supabase, and Vercel. We encourage you to review their policies to understand how they handle data.

Our Services are built for businesses and are not directed to children under 13. We do not knowingly collect information from children.

Urso operates in the United States. If you use the Services from outside the U.S., you understand that your information will be processed in the United States.

We may update this Policy from time to time. We will post the updated version on this page and revise the effective date above. If changes are material, we will provide notice where appropriate.

Questions about this Policy or your data? Email us at han@urso.ws. Urso is based in Orlando, Florida, USA.