What this site collects
Short version, because a privacy policy nobody finishes reading is not consent, it is decoration. This site is run by ROAS Performance, LLC. In practice that is one person. If you fill in the form, what you typed comes to me, I answer it, and it does not go anywhere else.
- no ad networks
- no mailing list
- nothing sold
- deleted when you ask
01What is collected, exactly
If you fill in the form on the Google Ads page, I get the six things you typed: your name, your email address, your website, your monthly ad spend range, who runs your ads at the moment, and the optional paragraph about what you are trying to get out of it.
Along with that, the server records things your browser sends on every request, whether you fill in a form or not:
- Your IP address, and the country it is registered in.
- Your browser's user agent string, which is the browser and operating system you are using.
- The page you arrived from, if you arrived from a link.
- How many seconds you spent filling in the form. That one is only there to catch bots, which submit instantly, and it is the reason the form has no captcha.
The form also contains one hidden field that a real person never sees or fills in. If it comes back filled, that is a bot. Nothing else about you is inferred from it.
02Why
To write back to you, and to work out whether I can actually help before either of us spends any more time on it. The spend range and the incumbent tell me what I would be walking into. That is the whole purpose.
It is not used to build an audience, it is not fed to an advertising platform, it does not go on a mailing list, and there is no sequence waiting for you. I do not sell it, rent it, or share it with anyone doing marketing of their own.
03Who actually touches it
Naming these properly, because "trusted partners" is how a policy avoids telling you.
- Vercel. Hosts this site and runs the code behind the form. Everything you submit passes through their infrastructure, and their request logs hold the standard metadata above.
- Cloudflare. Runs the analytics endpoint that counts visits. That endpoint is mine, not a third party product, and it is described in the next section.
- Google Chat. When you submit the form, a message containing your name, email, website, your two answers, your optional paragraph, and your country is posted into a private space that only I read. This is how I find out you wrote.
- Stripe. Only if you pay. Your name, email, website and form answers are attached to the customer record so I know who the subscription belongs to. Your card details go to Stripe directly and never reach this site or me.
- Supabase. A hosted database, for keeping the record of your enquiry itself. That store is switched off today and holds nothing. This line is here so that turning it on later does not quietly make this page untrue.
All five are companies that process data on the instructions of ROAS Performance, LLC and for no purpose of their own. Several of them are based in the United States, which means your data is handled outside the EU.
04Cookies, and the one honest sentence about tracking
This site sets no cookies at all while you are reading it, and there is no consent banner because there is nothing to consent to on that front. There is no Google Analytics, no Meta pixel, no advertising tag, and no third party is watching you here.
What does happen: a script I wrote and run myself stores a random visitor number in your browser's own storage so that two visits from you are not counted as two strangers, and it sends that number, along with a hash calculated from your browser's settings, to my analytics endpoint. The hash exists to recognize a returning browser. I am telling you about it rather than calling the whole thing "essential", because a fingerprint is a fingerprint even when the person taking it is one guy counting visitors.
If you buy, one cookie gets set on the way back from Stripe. It holds the customer number Stripe gave you, nothing else, so that returning to your own billing page later works without you digging an old email out. It cannot be read by any script and it is not used for advertising.
You can block all of that with any content blocker and the site works exactly the same. Nothing here is gated on being measured.
05How long I keep it
An enquiry stays for as long as it might still turn into work, and in no case longer than two years. If you become a client, the billing records stay for as long as tax law requires me to keep them, which is longer and is not my choice.
Being straight about the mechanism: there is no scheduled job quietly deleting things on that timetable. It is me, going through it. So if you want yours gone before then, do not wait for the two years, just ask and it goes.
06Getting it deleted, or seeing what I have
Email hello@hc0.ai and say which you want. A copy of everything I hold about you, a correction, or deletion. No form to fill in and no reason required. I do it the same day I read it, and at the outside within a month, which is the legal limit rather than my target.
If you are in the EU or the UK you also have the right to object to this processing, to ask for your data in a portable format, and to complain to your national data protection authority if you think I have handled it badly. The legal basis I rely on is that you contacted me asking to be contacted back, and my legitimate interest in answering you.
07Who is responsible for all this
The company that decides what happens to your data, and the one to hold to it, is ROAS Performance, LLC. That is the company on your invoice if you buy, the company your card is charged by, and the company to name if you ever need to complain about how this was handled. In data protection language it is the controller.
Everything above is done by one senior operator inside it. The point of naming the company rather than a person is that a company is something you can contract with, invoice, dispute, and stop paying.
Reach it at hello@hc0.ai. That address is read by the same person who would be running your account.
08Changes
If this page changes in a way that matters, the date below changes with it. If the change is significant and you are already a client, you get an email about it rather than a silent edit.