Privacy Policy
Last updated October 12, 2026. Applies to wolfeintelligence.com, its client portal (the "Portal") and WolfeOS, the software the Portal runs on. See also our Terms of Service.
In plain words
- We do not sell your data.
- We do not use your data to train AI models. If your business asks us to train a model for it, that is agreed separately and uses only examples your business approves.
- You own your data. You can ask for a copy of it, or for it to be deleted, at any time.
- WolfeOS can make changes in services you connect, such as changing an ad budget or sending an invoice, but only with the permission your business gives it. The table below says what each service allows.
- Disconnecting a service stops WolfeOS using it. For Square, disconnecting also permanently deletes what WolfeOS read from it. For the other services, what was already read stays with your records until it is deleted, and you can ask us to delete it at any time. The table below says what happens for each service.
- AI can make mistakes. Check important results before you rely on them.
Who we are
Wolfe Intelligence LLC is a consulting and research business, and makes WolfeOS. This one policy covers the public website, the Portal and every WolfeOS app and connected service. It does not name any client by name.
What the public website collects
Pages visited, general analytics, and conversion events from Google Ads and Google’s own tag, used to see which pages and campaigns lead to an inquiry. If you send an inquiry through a form on the site, we collect what you typed (name, contact details, and your message) so we can reply. The inquiry is emailed through Resend, the email service we use: what you typed (and, where the form asks for them, your address and whether you agreed to texts) goes to the business the form belongs to, with a copy to Wolfe Intelligence. If you gave an email address, Resend also sends you an automatic confirmation from leads@wolfeintelligence.com. When an inquiry leads to a booking or a new customer, its email address and phone number may be sent to Google Ads to measure which ads led to it; each is first hashed with SHA-256, so Google Ads receives only the hashed values, never the address or number itself.
Messages you type into a chat on the website or in the Portal are sent to Anthropic, the AI provider we use, to produce the answers, together with earlier messages from the same conversation and, in the Portal, the records, documents or screenshots it is given to answer from. When the Portal fills in a record from an uploaded document, or makes records from the lines of a table in one, it first reads the document itself, without AI. If the document is a PNG, JPEG, WebP or GIF image, or a PDF with no text of its own (such as a scan or a photo), the file is then sent to Anthropic’s model to read the fields or table lines asked for. A Word document or spreadsheet whose text does not contain the fields asked for has its text, never the file itself, sent to Anthropic to read them.
If you sign up for the Optical Alpha newsletter, your email address is kept in our own list and Wolfe Intelligence is emailed that you joined. Your browser is then sent to Substack, which runs the newsletter, with your address filled in so you can confirm the subscription there.
What the Portal collects
The Portal is the private client area behind a sign-in. Each business’s area holds the records its own engagement needs — leads, jobs, documents and similar business data its owner or staff enter or upload — and, for a business that connects another service (listed under Connected services below), a record of that connection and the data it last read.
Where a Portal page shows a map, the map images load in your browser straight from OpenStreetMap, so OpenStreetMap receives your IP address and the area of the map on screen.
When you tap Directions on a stop of a Portal route, your phone’s own maps app opens (Apple Maps on an iPhone, Google Maps elsewhere) with that stop’s map point, or its street address when it has no map point. Nothing is sent to a maps service until you tap.
When a business turns on map pins in the Portal, a record’s street address — never a name, email or phone number — is sent to the U.S. Census Bureau’s public geocoder to find its position on the map. Map pins are off until a business admin turns them on, on a map or in the business’s settings, and they can be turned off at any time.
Who else handles data for us
We use a few other services to run the website and the Portal. Each gets only what its job needs.
- Vercel hosts the website and the Portal.
- Upstash holds our database.
- Anthropic is the AI that writes the answers.
- Resend sends the emails that carry your inquiries.
- Google runs the website’s analytics and ad tag, and is reached only for the Google accounts a business connects (for example Google Ads).
- The services a business chooses to connect (see Connected services), only with its permission and only for what that connection’s features use.
- OpenStreetMap supplies the map pictures, which your browser loads straight from it.
Connected services
Pressing a "Connect" button in the Portal sends you to the service’s own sign-in page (Google, Intuit for QuickBooks, Meta, Shopify or Square). You sign in and approve access directly with that service, and the Portal never sees your password. The service then gives the Portal only the permissions below, on the signed-in business’s behalf. WolfeOS changes something in a connected service only with the permission the business granted, and only as the table says.
| Service | What WolfeOS reads | What WolfeOS can change (with your permission) | What happens when you disconnect |
|---|---|---|---|
| Google Ads | The business’s own Google Ads account: its campaigns with their budgets and status, 30 days of cost, clicks and conversions, whether its conversion tracking is working, its top search terms and keywords, where each campaign is aimed (its target and excluded places, and any radius around a point) and its last 30 days of spend, clicks and conversions by city, as Google counts where the people who saw the ads were; never who they were, and never a street address. | A campaign’s daily or total budget, and pausing or turning on a campaign, each only when an admin presses it and confirms. | WolfeOS stops using it and deletes its stored sign-in, and access is cancelled at Google (unless another connection of the same business uses the same Google login). What was already read stays with the business’s records until it is deleted, and the business can ask us to delete it at any time. |
| Google Calendar | The calendar’s name and time zone. On Wolfe Intelligence’s own calendar only, also when each meeting starts and ends and who was invited, to count the time Wolfe Intelligence spends with each client; never a meeting’s title, notes or place. | Puts the business’s scheduled jobs on its own calendar, and updates or removes those same entries when a job changes. | WolfeOS stops using it and deletes its stored sign-in, and access is cancelled at Google (unless another connection of the same business uses the same Google login). Events already on the calendar stay there. |
| Gmail | Only the address it sends from; on a client’s Gmail it never asks Google for permission to read the inbox. On Wolfe Intelligence’s own Gmail only, also who each email was from and to and when, to count the emails Wolfe Intelligence exchanges with each client; never a subject, the words or an attachment. | Sends an email to a customer from the business’s own address, one message each time someone presses send. Nothing is sent automatically. | WolfeOS stops using it and deletes its stored sign-in, and access is cancelled at Google (unless another connection of the same business uses the same Google login). Emails already sent stay sent. |
| QuickBooks Online | The company’s name, its list of products and services, and the invoices WolfeOS sent and the payments made on them. It does not read the rest of the books, such as reports, expenses or bank activity. | Adds or updates a customer, sends a bill or an accepted quote as an invoice, and asks QuickBooks to email that invoice to the customer, each only when an admin presses to do so. | WolfeOS stops using it, deletes its stored sign-in and cancels its access at Intuit. What was already read stays with the business’s records until it is deleted, and the business can ask us to delete it at any time. |
| Meta Ads | The ad account’s name, currency and time zone; its campaigns, ad sets and ads (names, status and budgets) and their creatives; the names of its tracking pixels and when each last fired; daily pixel event counts and event values when Meta supplies them, beginning with the last 28 days and continuing since the last successful read; and daily results: spend, impressions, link clicks, and the purchases Meta counts; and where each ad set is aimed (its target and excluded places, and any radius around a point) and its last 30 days of spend, impressions and link clicks by state, as Meta counts where the people who saw the ads were. The readiness check reads account status, whether a funding source exists, the Facebook Pages, Instagram accounts and product catalogs available to the ad account, and Purchase event counts from its pixels over the last seven days. It keeps no funding details or Instagram handles. It never reads who they were, and never a street address. | Pausing or starting a campaign, ad set or ad, its daily budget, and new Sales campaigns with their ads, each only when the owner or Wolfe Intelligence presses it and confirms. New campaigns and ads are created paused. Starting is a separate approval and press. | WolfeOS stops using the connection and deletes its stored sign-in. What was already read stays with the business’s records until it is deleted, and the business can ask us to delete it at any time. A data deletion request made through Meta also deletes the sign-in and the stored reads (see below). |
| Google Business Profile | The business’s own listing (its name, address, opening hours and links), its reviews, and daily figures such as calls, direction requests and website clicks. | Posts or removes a reply to a review, and changes the opening hours, each only when an admin presses to do so and confirms. | WolfeOS stops using it and deletes its stored sign-in, and access is cancelled at Google (unless another connection of the same business uses the same Google login). What was already read stays with the business’s records until it is deleted, and the business can ask us to delete it at any time. |
| Shopify | The store’s own name, contact email, phone number and web address (the business’s, never a customer’s), its currency and time zone; its products (each one’s name, type, vendor, tags, collections, prices and picture and page links, and how many of it sold and for how much in the last 35 days; never who bought it), and the names and prices of its active products, to fill in the business details; daily totals (orders, sales, discounts, refunds, net sales, how much came from a Facebook or Instagram visit, and from which sales channel), plus campaign-level order totals from the first-visit Meta paid UTM tags, stored only by day and campaign; and for each order of the last 35 days its order number, sales channel, and its shipment’s carrier, tracking number, tracking link and dates; and order totals by ship-to city, state and country (never a street, zip code, name or order number). No customer name, email address, phone number, street address or zip code is read or kept. | Nothing today. | WolfeOS stops reading and deletes its stored sign-in. The daily totals, the product records, the ship-to place totals and the shipment rows stay until they are deleted, and the business can ask us to delete them at any time. When the store removes WolfeOS in Shopify, the daily totals, the product records, the ship-to place totals and the shipment rows are permanently deleted when Shopify asks, 48 hours later. |
| Square | The business’s name, its open locations and its completed orders from the last 35 days, kept only as daily totals for each location: the number of orders, sales, discounts, refunds, tips and tax, and how many orders (and how much in sales) an AI assistant such as ChatGPT placed. It keeps no customer, card, item or single order. | Nothing today. | The connection, its stored read and the daily totals and locations read from Square are permanently deleted, and access is cancelled at Square (unless the same Square account is still connected to another business). The same happens if the business ends access in Square itself. |
Each connection asks for its own permissions only. Google Ads: https://www.googleapis.com/auth/adwords; Google Calendar: https://www.googleapis.com/auth/calendar.events; Gmail: https://www.googleapis.com/auth/gmail.send (and, on Wolfe Intelligence’s own Gmail only, https://www.googleapis.com/auth/gmail.metadata); QuickBooks Online: com.intuit.quickbooks.accounting; Meta Ads: ads_read and ads_management; Google Business Profile: https://www.googleapis.com/auth/business.manage; Shopify: read_orders and read_products; Square: MERCHANT_PROFILE_READ and ORDERS_READ. Google and QuickBooks also give your email address, so the Portal can show who is connected.
Limited Use. Wolfe Intelligence’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Data read from a connected Google account is used only to show that account’s own reports inside that business’s own Portal, and to make the changes its owner has approved, such as adding a scheduled job or sending an email. It is never used to serve ads, never sold, and never shared with any other business or used to build a profile for any purpose unrelated to that one account’s own reporting.
Who at Wolfe Intelligence can see Google data. Wolfe Intelligence staff view the data a business’s Google connections bring in only with that business’s agreement, which its owner or an admin can turn on or off at any time in the Portal. Staff look at it only to set up, support and check the business’s software, and every time they do, the business’s own activity says so. The only exceptions are a security investigation and a legal requirement, and each of those is recorded on the business’s activity too. No AI is trained on Google data. We ask Google for the fewest permissions each connection needs, and never for Gmail’s restricted ones (reading, changing or deleting mail).
Meta data deletion
You can have WolfeOS delete what it holds about your Facebook login through Meta: remove WolfeOS in your Facebook settings (for a personal login, Settings & privacy > Settings > Security and login > Business Integrations; for a business, Business Settings > Integrations > Connected apps) and ask for your data to be deleted. Meta then calls WolfeOS’s data deletion callback, https://www.wolfeintelligence.com/api/connect/meta/deletion. The Portal checks Meta’s signature, deletes that login’s stored sign-in and the stored reads for every business it connected, and gives Meta a confirmation code and a link back to this page. The ad records already copied into a business’s own records stay there, as for any other business record, until they are deleted, and the business can ask us to delete them at any time. You can also email us, at the address below, to ask for any of it to be deleted.
Shopify privacy requests
Shopify’s privacy webhooks are answered at https://www.wolfeintelligence.com/api/connect/shopify/webhook, and only when they carry Shopify’s valid signature. For customers/data_request and customers/redact, the Portal holds nothing about any customer to send or erase, so it says so and notes the request in the business’s activity record. For shop/redact, which Shopify sends 48 hours after a store removes WolfeOS, it permanently deletes that store’s daily totals, its store record and its stored connection and read; another store’s data is untouched. When a store removes WolfeOS, the connection ends and its stored credential is deleted at once.
How data is kept and secured
If you use WolfeOS offline, changes you make are kept on your phone until they’re sent, and are removed when you sign out.
- The credential a service issues for a connection is encrypted before it is stored, and is never written to a log, an error message or a place a person can read it directly.
- Only the business’s own admin, and Wolfe Intelligence’s operators who run the service, can see the connection, read what it fetched, or disconnect it — never another business, and never staff without that role.
- A snapshot of what was last read (such as recent campaign performance) is kept with that business’s own records so its reports stay available without asking the service again on every page load.
Disconnecting and deletion
A business’s owner or admin can disconnect a connected service at any time from the Connections screen. What happens then, service by service, is in the last column of the Connected services table above.
To ask for your data — from the website’s inquiry form, the Portal, or a connected service — to be deleted, or for a copy of it, email us at the address below.
What we do not do
We do not sell personal information or Google user data, and we do not use it to train AI models. A model trained for a business, only when that business asks for one, uses only examples that business approves. We do not share it with third parties for advertising (apart from the hashed email address and phone number described above, sent to Google Ads to measure which ads led to an inquiry that became a booking or a customer) or for any purpose beyond providing the Portal to the business it belongs to, except where the law requires it, where you ask for it (the newsletter signup above passes your email address to Substack), or where a service we use to run the website and Portal (such as hosting, storage, email delivery and the AI provider described above) processes it on our behalf, under its own confidentiality obligations, to keep them running.
Children
The website and Portal are for business owners and their staff, and are not directed to children.
Changes
If this policy changes, the date at the top of this page will change with it.
Contact
Wolfe Intelligence LLC, Mulberry, Florida.
Questions, or a request to delete data: zachary@wolfeintelligence.com.