Privacy Policy

We may collect personal information such as your name, email address, phone number, and other details you provide to us directly. Additionally, we may collect data about your interactions with our website and services, including IP addresses, browser types, and access times.

We may record phone calls with our company, retain email communications, and record webinars or similar events we host. We may also collect feedback and survey responses. By contacting us or participating in our webinars, events, or surveys, you consent to these recordings and collections where permitted by law.

The information we collect is used to provide and improve our services, respond to your inquiries, communicate with you about our services, process payments, and ensure the security of our website.

We do not sell your personal information. We share personal information with the service providers (sub-processors) who help us operate our business and only to the extent needed to provide our services, or where required by law or to protect our rights. These providers process data on our behalf under contract. Current categories of providers include:

• Hosting & infrastructure — Vercel, Amazon Web Services (AWS)
• Databases & storage — Supabase, Amazon Web Services (AWS)
• Analytics — Google (Google Analytics)
• Form & workflow routing / CRM — Zapier and our own Hub CRM
• Communications — email and telephony providers used to contact you
• Payments — Stripe and Intuit (QuickBooks) for processing transactions
• Financial account connectivity — Plaid Inc. for secure bank-account linking — accessing your transactions and current account balance only, and only when you choose to link an account
• Artificial intelligence — Amazon Web Services (Amazon Bedrock) and Anthropic (see "AI & Automated Processing" below)

A current list of our sub-processors is maintained in our Data Processing Agreement.

Credit reporting and credit references Where we extend commercial credit — for example, invoicing a business on net payment terms — we report that account's information and payment history to business credit reporting agencies, and we respond to credit reference requests about the account. If an account remains unpaid we may refer it to a collection agency. These recipients are not sub-processors: they receive the information as independent controllers for their own purposes. We report business accounts on a uniform basis, whether payment is timely or late — we do not report selectively. We report only verifiable account facts, such as balance, amount past due and invoice dates. We will not report an amount you have disputed in writing while that dispute is unresolved, and we will not report an account as past due until at least 30 days after we have notified you in writing that it is past due. West TN Consulting has extended commercial credit and shared payment experience with credit references since its founding; this section states that long-standing practice.

We use cookies and similar technologies to operate our website and, with your consent, to measure how it is used. When you first visit, a cookie banner lets you accept or reject non-essential (analytics) cookies. We use Google Analytics with Google Consent Mode v2: analytics and advertising storage are denied by default, and analytics cookies are only set after you accept them. You can change or withdraw your choice at any time through the cookie settings on our site. Strictly necessary cookies required to make the site work are always active.

If you choose to connect a bank or financial account, we use Plaid Inc. ("Plaid") to establish that connection securely. You enter your financial-institution credentials directly with Plaid — we never see, receive, or store your banking username or password. Linking a financial account is entirely optional and requires your explicit consent at the time you connect it.

When you link an account, we access only the information needed to provide the feature you requested: your account transactions and your current account balance. We do not access or retain financial data beyond this. The access tokens that maintain this connection are encrypted at rest, transmitted only over encrypted (TLS) connections, and available only to the minimum systems and personnel required to operate the feature.

You may disconnect a linked financial account and request deletion of the associated data at any time using the contact details below. Your use of account linking is also governed by Plaid's End User Privacy Policy.

We use artificial-intelligence tools to help our team work more efficiently — for example, to summarize communications, draft responses, and organize records in our CRM. These tools are provided by Amazon Web Services (Amazon Bedrock) and Anthropic, acting as our sub-processors, and may process personal information you have provided (such as your name, email, phone number, and the content of your messages). We do not use these tools to make decisions that produce legal or similarly significant effects about you without human involvement, and your information is not used to train third-party public AI models. Where required, our use of these tools is covered by data protection terms with each provider.

If you are in the European Economic Area or the United Kingdom, we process your personal data on one or more of the following legal bases: your consent (which you may withdraw at any time); performance of a contract with you; our legitimate interests in operating and promoting our business (balanced against your rights); and compliance with legal obligations.

We retain personal information only for as long as necessary to fulfil the purposes described in this policy — including providing our services, maintaining our business records, and meeting legal, tax, and accounting requirements — after which it is deleted or anonymized. You may ask us to delete your information at any time using the contact details below, subject to any retention we are required by law to maintain.

West Tennessee Consulting is based in the United States, and the service providers described above may process your information in the United States and other countries. Where we transfer personal data from the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include encryption of data in transit (TLS) and encryption of sensitive credentials and access tokens at rest, least-privilege access controls, and logging and monitoring of access to sensitive systems.

You have the right to access, correct, or delete your personal information held by us. If you have any questions or concerns about your privacy, please contact us at [email protected].

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.