Privacy Policy

This Privacy Policy explains how High Roads M&G 1337 LLC d/b/a High Roads (“High Roads,” “we,” “us,” or “our”) collects, uses, shares, and protects information in connection with the High Roads Conversion Studio (the “Service”) and the High Roads website.

High Roads processes lead, contact, and project information to provide the Service. When someone submits a project request through a Studio, the business that operates that Studio receives their information and is responsible for its own follow-up and for the way it uses that information after that. This policy covers High Roads’s own practices; a business you contact through the Service has its own privacy practices.

We collect the following categories of information:

• Site visitor information — basic information about visits to our website and Studios, including pages and steps viewed and general interaction data.
• Lead, contact, and project request information — the details a person provides in a Studio, such as name, email, phone, location or ZIP code, and the project selections and preferences that make up the request.
• Workspace, account, and administrator information — the name, business, email, and settings of the administrators and authorized users we provision into a workspace.
• Authentication and account data — information needed to sign in securely, such as your email and the sign-in links or tokens used for access.
• Usage, log, and device data — standard technical data such as IP address, browser and device type, and timestamps, plus largely aggregated metrics like funnel steps started and completed, collected to operate, secure, and improve the Service.
• Analytics, cookie, and consent data — information from cookies and similar technologies, and your consent choice, as described in the Cookies and Analytics section.
• Communications and support data — the content of messages you send us, such as questions, support requests, feedback, or referral submissions.

We get information directly from you (for example, when you complete a Studio, sign in, or contact us); automatically from your device as you use the Service (for example, through cookies and log data); and from the service providers that help us operate the Service. When a business configures a workspace, we also receive the settings and recipients they provide.

We use information to:

• provide, operate, and maintain the Service;
• process project requests and route them to the business they were intended for;
• score and qualify project requests so a business can prioritize follow-up;
• send operational and transactional notifications, such as lead alerts to a workspace and submission confirmations to people who complete a Studio;
• secure, troubleshoot, debug, and improve the Service;
• measure usage and performance through analytics, after consent where applicable; and
• comply with our legal obligations and enforce our terms.

We share information in the following ways:

• With the business receiving a project request. When you submit a request through a Studio, we deliver it to the workspace it was intended for so that business can follow up with you.
• With service providers and subprocessors. We share information with vendors that process it on our behalf — such as hosting, database, email-delivery, analytics, security, and integration providers — so we can run the Service. They are permitted to use it only to provide services to us.
• With external destinations a workspace configures. Where a business sets up an external destination, we send lead data there at its direction (see the next section).
• For legal and security reasons. We may share information to comply with law, respond to lawful requests, enforce our terms, or protect the rights, safety, and security of High Roads, our users, or others.
• In a business transfer. If High Roads is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this policy.

We do not sell your personal information in the everyday sense — we don’t trade it for money. Some privacy laws define “sell” or “share” broadly (for example, to include certain advertising cookies); where those laws apply, you can use the choices described in the Cookies and Analytics and Your rights sections.

We use reputable third-party providers to operate the Service. They process information on our behalf and are permitted to use it only to provide services to us. Our current subprocessors include, by category:

• Hosting and infrastructure: Vercel
• Database: Supabase
• Email delivery: Resend
• Analytics (where configured): Google Analytics (GA4), Google Tag Manager, Microsoft Clarity
• Advertising measurement (where configured): Meta Pixel
• Scheduling (marketing site): Calendly
• Customer billing (business customers only): Zoho — we use billing tools to invoice and collect payment from businesses; those tools are not used to process lead submissions through Studios.

We may update this list as our vendors change. When a business configures an external destination (see below), that third party is the business’s choice, not our subprocessor for that transfer.

A business can configure its workspace to send lead and project data to external systems it controls. Depending on what is available, these may include connected tools such as automation platforms (for example, Zapier or Make), CRMs, team messaging (for example, Slack), or productivity suites (for example, Google Workspace), as well as HTTPS webhook receivers. When a business directs us to send data to a destination it configures, the way that receiving system handles the data is governed by that third party and the business that set it up, not by High Roads.

We use cookies and similar technologies, which fall into a few categories. We describe them by category rather than claiming they exactly match any one legal framework:

• Essential. Needed for the site and Studios to work and to remember your privacy choice. These are always on.
• Analytics and performance. Help us understand how the Service is used so we can improve it. Where configured, these may include Google Analytics (GA4), Google Tag Manager, and Microsoft Clarity.
• Marketing and advertising. Where configured, a measurement pixel such as the Meta Pixel may be used. If none is configured, none loads.

Consent-gated. Analytics and marketing technologies are not loaded until you make a choice, and they load only if you accept. You can accept or decline the Analytics and Marketing categories separately. If you decline, or make no choice, they stay off. When no analytics or marketing provider is configured for a page, nothing beyond essential technologies runs.

Consent records. When you make a cookie or privacy choice, we may log that decision so we can honor your preferences and demonstrate compliance.

First-party usage data. We also collect a small amount of largely aggregated, first-party usage data through our own analytics pipeline (for example, funnel steps started and completed) to operate and secure the Service. That data is separate from the consent-gated third-party tags above and does not include the contact fields someone submits in a Studio.

Changing your choice. You decide whether to allow each category when you are prompted, and declining keeps it off. On pages where we offer these cookies, you can reopen Your Privacy Choices in the footer at any time to change your choice. You can also use your browser settings to clear stored site data or block cookies, which lets you be prompted again or prevents these technologies from loading.

Global Privacy Control and Do Not Sell or Share. Where a marketing pixel is configured, we honor the Global Privacy Control (GPC) browser signal as a request to opt out of marketing technologies, and we offer a Your Privacy Choices control in the footer (your Do Not Sell or Share opt-out) that reopens your choices so you can turn marketing off. We do not sell your personal information for money.

We retain information for as long as we need it to provide the Service and for legitimate business and legal purposes — such as meeting obligations, resolving disputes, and enforcing our agreements — after which we delete or de-identify it. How long we keep a given piece of information depends on its type and why we hold it.

• Business customer accounts: we retain workspace and lead data while your account is active and for a reasonable period afterward unless you request deletion or we are required to retain it longer by law.
• Lead submitters: if you completed a Studio, the business that received your request controls its copy; you may contact us or that business to request access, correction, or deletion of information we still hold.
• Deletion requests: email terms@highroads.io. We will take reasonable steps to honor verified requests consistent with applicable law.

We use commercially reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, or misuse, and we work with service providers that do the same. No method of transmission or storage is completely secure, so we cannot guarantee absolute security; we encourage you to use strong, unique credentials and to keep your access links confidential.

If we become aware of a security incident that affects personal information we process, we will investigate, take reasonable steps to mitigate harm, and notify affected parties as required by applicable law.

If you participate in our referral program, we collect the information needed to track your referral link or code, attribute signups, and apply account credits — such as your name, email, and the business you referred. We use that information to operate the program described on our referrals page and in our Terms of Service. We do not sell referral data.

Depending on where you live and the laws that apply, you may have rights over your personal information, which can include the right to:

• access the personal information we hold about you;
• correct inaccurate information;
• request deletion of your information;
• object to or opt out of certain processing, where applicable; and
• manage cookie and consent choices, where applicable.

To make a request, email us at terms@highroads.io. We will respond consistently with applicable law, and we may need to verify your identity first. If you submitted a project request to a specific business, that business controls its own copy of your information and its own follow-up, so you may also need to contact it directly.

The Service is intended for businesses and adults. It is not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will take appropriate steps.

High Roads M&G 1337 LLC d/b/a High Roads operates the Service from the United States. If you access it from another region, you understand that your information may be processed in the United States, where data protection laws may differ from those where you live. Residents of U.S. states such as California and Texas may have additional privacy rights; where those laws apply to us, we honor the rights they require. We use “where applicable” language here because the rights available to you depend on your location and the laws that apply.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above, and material changes take effect when posted. Your continued use of the Service after changes take effect means you accept the updated policy.