Privacy Policy

Who is responsible

Heller's Town, LLC, 205 DeClark St, Ste 1, Beaver Dam, WI 53916. I'm Jackson Heller, the owner. You can reach me at hellerstown@gmail.com or (815) 375-0527.

What the contact form collects

Your name, your email address, which part of Heller's Town you are asking about and your message. A phone number and how you heard about me are optional. Nothing else is asked for.

When you send the form, the site's server function on Vercel checks it and passes it straight to an automation workflow on n8n, which stores it in a Supabase database and sends me a short alert on Telegram so I can reply. Those four companies process it on my behalf; none of them is given it to use for itself.

I use your message only to answer you and to do the work you ask about. I do not sell, trade or rent your personal information, and I do not add you to a mailing list or an automated email sequence.

To stop automated spam, the form has a hidden field that people never see and a check on how quickly it was filled in. Neither stores anything about you.

Cookies, analytics and outside requests

This site sets no cookies of its own and runs no analytics, tracking pixel or advertising tag. The typefaces are served from this site.

Two files come from somewhere else: the GSAP animation library and its easing add-on, both loaded from cdnjs, a public library service run by Cloudflare. Like any web request, those requests give Cloudflare your network address and the details your browser sends. Nothing else on this site contacts another company until you choose to follow a link.

The web host, Vercel, records routine request data, such as your network address and the page asked for, to deliver pages and keep the site secure.

The client portal uses cookies only to keep you signed in.

The Google app "Heller's Town"

Heller's Town has a Google app named "Heller's Town". It connects only to Heller's Town's own Google Business Profile, the listing Google shows for this business. It is not offered to the public, and the only Google account that signs in to it is Heller's Town's own.

What it reads: Heller's Town's own Business Profile, meaning the business listing and the reviews people leave on it. Why: so I can see new reviews and answer them. The app runs inside an n8n workflow. When a review has no reply, its text, the reviewer's display name and the star rating are sent to Anthropic's Claude model to draft one, and the draft is stored in Heller's Town's own Supabase database for me to read. Nothing is posted until I approve it.

Data from Google is used only for that. It is not sold, it is not used for advertising, it is not shared with anyone beyond the services named here, and Heller's Town does not use it to train AI models. A review and its draft are kept only until I have dealt with the reply.

Heller's Town's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

To revoke the app's access, the account owner removes "Heller's Town" under Security, Third-party apps and services, in the Google Account at myaccount.google.com/permissions.

The client portal and automations

Heller's Town builds and runs automations for small businesses, with a client portal that helps real estate professionals and other businesses manage their leads, calendars, marketing, finances and files. In this part and the ones after it, "we" and "us" mean Heller's Town, LLC.

Who it covers:

• Our clients (the businesses that use our client portal and automations) and the people who work in those businesses.
• The people our clients are in touch with, such as someone who asks about a listing or signs in at an open house. For this information we act on our client's behalf: the client decides how it is used, and we handle it only to provide our services to that client.

What we collect:

• Portal account details: your name, email address and business details, so you can sign in.
• Information clients add to the portal: contacts, deals, tasks, notes, calendar items, drafts, files and marketing posts.
• Information from services a client chooses to connect, and only what each connection needs:
  • Microsoft 365: the lead emails the client asks us to watch, and sending the replies the client approves.
  • Google Calendar or Microsoft Outlook calendar: reading the client's events, and adding or changing the events the client creates in the portal.
  • Instagram and Facebook: the professional account's name and ID, the posts scheduled through the portal, the comments on those posts, and their performance numbers.
  • QuickBooks Online (Intuit): accounting records such as accounts, invoices, payments, bills and reports.
  • Bank accounts, through Plaid: account and transaction information, read-only.
• Open house sign-ins: the name, email or phone, and the answers a visitor gives, including whether they work with an agent and whether they agree to follow-up emails.

How we use it: to provide the portal's features to the client who connected or entered the information. That means organizing leads, publishing the posts the client approved at the times they chose, showing comments and results, drafting replies and documents for review, keeping books and reports up to date, and reminding them of tasks. We also use it to keep the portal secure and working.

Drafts are written for review. Nothing is sent or posted for a client without the client's action or the settings the client approved.

The statement on Google API data in the section above applies to every Google connection, the portal's included.

What we do not do

• We do not sell personal information.
• We do not use information from a client's connected accounts for advertising.
• We do not share one client's information with another client.
• We never move, hold or send money from a connected bank account.

Artificial intelligence in the portal

Some drafts and suggestions are written by an AI model that runs on our own equipment. Your information is not used to train outside AI products, and bank and card account numbers are never given to an AI model.

Bank connections through Plaid

When a client connects a bank account, the connection is made through Plaid Inc. You sign in to your bank in Plaid's own window, so we never see or store your bank username or password. Plaid collects your account and transaction information from your bank and passes it to us. By connecting, you allow Heller's Town and Plaid to access and transfer that information from your bank, and Plaid handles it under the Plaid End User Privacy Policy. You can end the connection at any time (see Data deletion).

Who portal information is shared with

Only the service providers we need to run our business and our services, each for its own purpose:

• Cloudflare provides secure network access and the sign-in to our client portal.
• Microsoft, Google, Meta, Intuit and Plaid, only when a client connects that service, to carry out what the client asked.
• Our email provider, to send and receive our business email.

We may also share information when the law requires it, or to protect our rights or someone's safety.

Where portal information is kept and how it is protected

Client information is kept on servers we operate in Wisconsin, United States, and with the providers above. Access is limited to the client's own account and to Heller's Town staff who support it, and each client's information is kept separate from every other client's by the database itself. All internet traffic is encrypted (TLS 1.2 or higher), sign-in goes through an identity-verified gateway, and we back up nightly. No method is perfect, but we work to protect your information, and we will notify affected clients of any incident as our security policy and the law require.

Business owners we email

For business owners we may contact about our services, we keep the name, business, business email address and website, taken from public sources such as business websites and professional directories. We use them only to send our own business emails about our services. Every one includes a way to opt out, and we honor every opt-out.

How long it is kept

A message is kept as long as I need it to answer you and to do the work you asked about. If it does not turn into work, it is deleted once it is clearly finished. Records of paid work, such as estimates and invoices, are kept as long as Wisconsin requires business records to be kept for tax purposes.

Client information in the portal is kept for as long as the client's account is active. After a client leaves, or asks us to delete their information, we delete it within 30 days, except records the law requires us to keep. Backup copies age out on a fixed schedule.

If you ask us not to email you, we keep your address on our do-not-email list so we never contact you again.

Getting a copy, a correction or deletion

You can ask to see, correct or delete what I hold about you at any time. Email hellerstown@gmail.com or call (815) 375-0527. There is no form to fill in and no account to log into. We confirm every request within 3 business days.

You can unsubscribe from our emails with the link or the reply instruction in any of them.

Data deletion

You can disconnect any account you connected to the Heller's Town portal, and you can ask us to delete the information we hold about you, at any time.

1. Disconnect a connected account. Once an account is disconnected, we stop reading from it and posting to it right away.

• Instagram or Facebook: open Settings, find Apps and websites, and remove Heller's Town.
• Google: go to myaccount.google.com/permissions and remove Heller's Town's access.
• Microsoft 365: remove Heller's Town from your account's app permissions, or ask your administrator to.
• QuickBooks: in QuickBooks, open Apps, then My apps, and disconnect our app.
• Your bank (through Plaid): go to my.plaid.com and remove the connection.
• Or ask us: email us and we will disconnect it for you.

2. Ask us to delete what we hold. Email hellerstown@gmail.com with the subject "Delete my data", and tell us the account name or email address involved.

• We confirm your request within 3 business days.
• We delete your information within 30 days. That includes the posts, comments, performance numbers, calendar events, financial records and files we read from your connected accounts.
• We keep only the records the law requires, such as tax records for orders. Backup copies age out on a fixed schedule.

3. If one of our clients holds your information. If your information came to us through a business that uses our portal (for example, you signed in at an open house), you can contact that business directly, or email us and we will pass your request to them and help them carry it out.

What this site never asks for

Payment card details, Social Security numbers, dates of birth and government ID numbers are never collected through this site. If a page ever asks you for one, it did not come from Heller's Town.

Children

This site is for business owners and adults. It is not meant for children under 13, and I do not knowingly collect information from them. If you think a child has sent something, tell me and I will delete it.

Changes to this policy

If this policy changes, the new version is posted on this page with a new date at the top. If a change materially affects how we use client information, we will tell our clients before it takes effect.