Privacy Policy

Effective date: June 10, 2026

This Privacy Policy explains how VisualBoston, Inc. ("VisualBoston," "we," "us," or "our") collects, uses, discloses, and safeguards information when you visit visualboston.com (the "Site"), contact us, subscribe to our newsletter, book a call, or otherwise engage our design, development, and AI-training services (collectively, the "Services"). By using the Site or Services, you acknowledge the practices described here.

VisualBoston, Inc. is a Massachusetts corporation based at 66 Winter Street, Norwood, MA 02062, USA. We serve clients located both inside and outside the United States. If you access the Site or engage our Services from outside the United States, please read Section 7 (Your Privacy Rights) and Section 8 (International Visitors and Data Transfers) carefully, as additional rights and protections may apply to you.

1. Information We Collect

a. Information you provide directly.

  • Contact form: your name, email address, optional company website, your selected project budget range, and the message you write.
  • AI training inquiry form: your name, email address, company, team size, the sessions you are interested in, and your message.
  • Project questionnaire: if you complete our onboarding questionnaire, the project and business details you choose to share, such as your goals, budget, timeline, existing website or platform, technical requirements, and design preferences, along with your name, email address, company, and phone number if provided.
  • Waitlist: your name and email address.
  • Newsletter: your email address.
  • Call scheduling: when you book an introductory call through our third-party scheduling provider (Calendly), you provide your name, email, and any details you choose to share; that information is processed by Calendly under its own privacy policy.

b. Information collected automatically. When you visit the Site, we and our analytics providers automatically collect certain technical information through cookies and similar technologies, including your IP address, device and browser type, operating system, pages viewed, referring/exit pages, approximate location derived from IP, and dates/times of access. We also temporarily process IP addresses to rate-limit form and game submissions and protect the Site from abuse.

c. Games and interactive features. Some pages on the Site include browser games with a public leaderboard. If you choose to save a score, we collect the initials you enter (one to three letters), the professional role you select, your score, and your input method. Leaderboard entries are associated with a randomly generated anonymous identifier stored in your browser, not with your name or email address, and you can play without submitting anything.

We do not intentionally collect special-category or sensitive personal information (such as Social Security or national-ID numbers, financial account numbers, health data, biometric data, or precise geolocation) through the Site, and we ask that you not submit such information through our forms.

2. How We Use Information

We use the information we collect to: (a) respond to your inquiries and provide quotes and proposals; (b) deliver, maintain, and improve the Services; (c) send our newsletter and other communications you have requested; (d) operate, analyze, and improve the Site; (e) operate interactive features such as game leaderboards; (f) detect, prevent, and address security incidents, fraud, and abuse; (g) comply with legal obligations; and (h) establish, exercise, or defend legal claims.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

3. Cookies and Analytics

The Site uses cookies and similar technologies, including:

  • Strictly necessary technologies required to operate the Site, protect it from abuse, and remember choices you make (for example, your saved game initials in your browser's local storage).
  • Analytics services, including Google Analytics (which sets cookies such as "_ga" and "_ga_PTR5M50K24") and Ahrefs Analytics, used to understand how visitors use the Site.

You can control or delete cookies through your browser settings; disabling cookies may affect Site functionality. To opt out of Google Analytics across websites, you may install the Google Analytics Opt-out Browser Add-on. We are evaluating a cookie-consent tool that would let visitors in consent-based jurisdictions accept or decline analytics before they load; this Policy will be updated when it is in place.

Our analytics providers may collect information about your online activities over time and across different websites when you use our Site. Like many websites, the Site does not currently respond to "Do Not Track" browser signals.

4. How We Share Information

We share information only as follows:

  • Service providers / processors who perform functions on our behalf, under contractual confidentiality and security obligations, including: our hosting and deployment provider (Vercel), our form and inquiry storage provider (Airtable), our email newsletter provider (Mailchimp, an Intuit company), our website analytics providers (Google, Ahrefs), our scheduling provider (Calendly), and a managed database provider that stores game leaderboard scores.
  • Professional advisors (lawyers, accountants, auditors) as needed.
  • Legal and safety disclosures when required by law, subpoena, or legal process, or to protect the rights, property, or safety of VisualBoston, our users, or others.
  • Business transfers in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

5. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, to maintain our business records, and to comply with legal obligations, after which we delete or de-identify it. Contact-form and questionnaire submissions are retained for the duration of the prospective or active client relationship and a reasonable period thereafter; newsletter data is retained until you unsubscribe.

6. Data Security

VisualBoston maintains administrative, technical, and physical safeguards designed to protect personal information, consistent with applicable law, including the Massachusetts data-security regulation (201 CMR 17.00). No method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a security breach involving personal information of Massachusetts residents, we will provide notice as required by M.G.L. c. 93H, and we will provide any further breach notifications required by other applicable laws.

7. Your Privacy Rights

Depending on where you reside, you may have rights regarding your personal information. We will honor applicable rights regardless of your location to the extent practicable. To exercise any right, contact us using the details in Section 12; we may need to verify your identity, and you may use an authorized agent where the law permits.

a. California residents (CCPA/CPRA). You have the right to know/access the categories and specific pieces of personal information we collect, the right to delete, the right to correct, and the right to opt out of "sale" or "sharing." We do not sell or share personal information. You will not be discriminated against for exercising these rights.

b. EU, UK, and EEA residents (GDPR/UK GDPR). Where the GDPR or UK GDPR applies, our legal bases for processing are: your consent (e.g., the newsletter), the performance of a contract or steps taken at your request (e.g., responding to inquiries, providing Services), our legitimate interests (e.g., operating, analyzing, and securing the Site), and compliance with legal obligations. You have the rights of access, rectification, erasure, restriction, portability, and objection, the right to withdraw consent at any time, and the right to lodge a complaint with your local supervisory authority. If we rely on legitimate interests, you may object based on your particular situation.

c. Canadian residents (PIPEDA and provincial laws, including Quebec). You have rights of access to and correction of your personal information, and we obtain consent for collection, use, and disclosure as required. You may file a complaint with the Office of the Privacy Commissioner of Canada or the applicable provincial authority.

d. Other jurisdictions. Residents of other U.S. states and countries with applicable privacy laws may have similar rights; we will respond to verified requests as required by applicable law.

e. All visitors. You may unsubscribe from marketing emails at any time using the link in each message, consistent with the federal CAN-SPAM Act and equivalent foreign anti-spam laws (such as Canada's CASL and the EU ePrivacy rules).

8. International Visitors and Data Transfers

VisualBoston operates from the United States, and our service providers may process and store information in the United States and other countries. If you are located outside the United States, you understand that your personal information will be transferred to, stored, and processed in the United States and potentially other jurisdictions whose data-protection laws may differ from those of your country.

Where we transfer personal information of individuals in the EU, UK, EEA, or other regions that restrict cross-border transfers, we rely on appropriate safeguards recognized under applicable law, such as our service providers' participation in the EU-U.S. Data Privacy Framework, the European Commission's Standard Contractual Clauses (and the UK Addendum), or another lawful transfer mechanism. You may request more information about these safeguards using the contact details below.

9. Children's Privacy

The Site and Services are intended for businesses and adults. We do not knowingly collect personal information from children under 13 (or under 16 where a higher age applies). If you believe a child has provided us personal information, contact us and we will delete it.

10. Third-Party Links and Products

The Site may link to third-party websites and services that we do not control, and to separate products we offer (such as TallyQuote) that are governed by their own terms and privacy notices. This Policy does not apply to those third parties or separate products, and we encourage you to review their privacy policies.

11. Changes to This Policy

We may update this Policy from time to time. The "Effective date" above reflects the most recent revision, and material changes will be posted on this page. Your continued use of the Site after changes become effective constitutes acceptance.

12. Contact Us

VisualBoston, Inc.
66 Winter Street, Norwood, MA 02062, USA
Email: hello@visualboston.com

For individuals in the EU/UK, you may also use the above contact for any data-protection inquiries.