Privacy Policy
Draft prepared: October 14, 2026
EIT Consulting (“we”, “us”) operates GCMGM.com from Houston, Texas, United States. This Privacy Policy explains the information processed through the platform and related services (the “Service”), why it is used, who receives it and how to contact us. Our initial market is the United States. A U.S. focus does not mean all processing or storage is U.S.-only.
1. Information we collect
We collect:
- Account information — name, email, password (stored hashed), phone number, and company details you provide.
- Project information — projects, tasks, documents, invoices, messages, and other content you or your collaborators create.
- AI and phone information — questions, conversation context, AI responses and project information used to answer questions. Phone services process caller audio, recognized text, spoken-answer text and generated audio, as well as caller/called numbers, call timing, status and access records.
- SMS notification information — the mobile number you enroll, consent and verification records, alert preferences, message content, delivery attempts, status and provider references.
- Partner-sourced data — property and land records we receive from third-party partners to create leads. This may include property addresses and, in some cases, owner or contact details. We process this data to present leads to relevant companies on the Service.
- Usage, device and security information — session cookies, browser storage for preferences, and technical information used to operate and protect the Service. Infrastructure and integrated services can receive IP addresses, browser information and request or error metadata.
- Demo-request information — your name, business contact details, company, active-project range, and the goals you choose to share when requesting a product demonstration.
2. How we use information
We use information to provide, secure, and improve the Service; to authenticate you and keep your session; to surface relevant leads and enable proposals; to process payments; to respond to demo requests you expressly submit; to send transactional messages; and to comply with legal obligations. We do not sell your personal information.
3. Sharing and service providers
Information is shared with project participants according to permissions and sharing choices, and with services used to operate the platform. These include hosting, document storage, payment services such as Stripe, and the configured email service, such as Resend, Microsoft 365 or an SMTP provider. Email services receive recipient details and message content. Enabled website AI features use Anthropic to process questions, selected project context, reports and submitted documents or images for the requested feature.
We may also disclose information as necessary to comply with legal obligations, protect rights and security, or respond to an authorized request. Provider processing, retention and data-use controls depend on the applicable service, account settings and agreements. Use of an AI feature is not a guarantee of zero retention or exclusion from every provider’s model-improvement program.
4. AI phone processing
The read-only AI phone assistant uses several services. Deepgram processes caller audio for speech recognition. OpenAI processes recognized questions, conversation context, available information descriptions and authorized project results to prepare answers; those results can include information not spoken aloud. Cartesia processes answer text to generate speech. LiveKit, the telephone system and the carrier transport audio and call-routing information.
Live processing is different from saving a recording or transcript. Turning off an application’s transcript capture does not turn off speech processing or determine what a telephone system or service provider retains. Call metadata, security records, prior test transcripts and exported copies can have different retention periods. We do not promise that every copy is deleted after a single fixed period. Contact us about the phone service’s data practices before using it if you have questions; you may use the dashboard instead.
Linked numbers and administrative approval decisions are used to control phone access. Approval does not make Caller ID spoof-proof. Do not speak passwords, payment-card details or other unnecessary sensitive information to the assistant. If an administrator PIN is requested, use only the designated secure PIN entry.
5. Cookies and external content
Cookies keep sessions working and browser storage remembers preferences. Disabling them in your browser can prevent sign-in or other features from working. When configured, Google reCAPTCHA helps protect forms against abuse and can process device and interaction information. Google’s Privacy Policy and Terms of Service apply to that service. Some public pages load images from Unsplash, whose servers receive the requests needed to display those images.
6. Data from partners
When a partner sends us property or land data through our partner API, we store it to generate leads and retain the original record for accuracy and audit. If you are a property owner and want to know whether your information appears on the Service, or want it removed, contact us at the address below and we will work with the originating partner as appropriate.
7. Retention and deletion
We retain information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account, subject to records we must keep.
Closing a project or cancelling billing does not itself delete project records. Records shared with collaborators, audit and transaction records, provider-held information, backups and exported copies may need separate handling. Retention depends on the information, its purpose, applicable obligations and the systems holding it. Contact us for a request covering your information; we will explain applicable limits rather than promise immediate removal of every copy.
8. Your choices and requests
Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to opt out of certain processing, including sale, targeted advertising or qualifying profiling where applicable. To make a request, email sm@eit.care or write to the mailing address below. You do not need to create an account to contact us. Describe your request and connection to the relevant account or project, but do not send passwords, PINs or full payment-card details.
We may need information to verify your identity or authority before disclosing or changing records. Where we process information for a customer organization, we may coordinate the request with that organization. If we decline a request, you can ask for a review by contacting us with the subject “Privacy appeal”. We will handle requests and appeals under applicable law. You may also contact your state’s attorney general, including the Texas Attorney General.
9. Security
We use technical and organizational measures to protect information, including encryption in transit, hashed credentials, and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Children
The Service is intended for adults and is not directed to children under 18. If you believe a child has provided personal information through the Service, contact us so we can review and address it.
11. Changes
Published revisions will identify their effective date. For material changes, we will provide notice and obtain any consent required by applicable law. Posting a new policy does not by itself authorize a new use of previously collected information.
12. SMS notifications and your choices
SMS is optional. We use the notification number, consent and verification records and alert choices to verify your number and send the alerts you select. Profile and phone-assistant numbers are not automatically enrolled. Verification texts contain a temporary code. Notification texts contain a generic event label and links to the platform, without private message previews or project details; viewing those details requires sign-in and the appropriate access permissions.
Messages are routed through our VitalPBX telephone system, BulkVS and downstream mobile carriers. These systems receive sender and recipient numbers, message content and delivery information to route and deliver texts. They can retain their own messaging records under their applicable terms and practices. SMS is not an end-to-end encrypted channel. We do not sell mobile numbers or SMS opt-in and consent data, or share them with third parties for their marketing.
In Settings → Notifications, use Choose alerts to turn off individual text alerts, or Turn off texts to remove the active notification number. Removing a number stops future platform notification submissions to it; it does not erase prior delivery, security or provider-held records, or recall messages already submitted. Contact us for help, an opt-out or a deletion request. Text replies are not handled by the platform. See the SMS terms for message frequency, rates and delivery limitations.
13. Contact
For privacy questions, requests, appeals or support, contact:
EIT Consulting
1928 W Bell St., Houston, TX 77019, United States
sm@eit.care