Effective date: July 18, 2026
This Privacy Policy explains how OutsideTheBoxIT Consulting (“OutsideTheBoxIT,” “we,” “us,” or “our”) collects, uses, and protects information submitted through outsidetheboxit.consulting.
Information we collect
When you use a contact or service-request form, we may collect your name, business name, email address, phone number, service interest, and the contents of your message.
Our hosting, email, security, and anti-spam systems may also process technical information such as an IP address, browser type, request time, referring page, and security events.
How we use information
We use submitted information to respond to inquiries, understand requested services, prepare human-reviewed follow-up drafts, operate pilot services, prevent abuse, maintain security, and improve our website and business processes.
We do not sell personal information. We do not use submitted information to send unrelated marketing messages without permission.
AI-assisted lead recovery
Some designated Lead Recovery forms use artificial intelligence to classify urgency, summarize an inquiry, identify missing information, and prepare SMS or email drafts for human review. Information submitted through those forms may be transmitted to the OpenAI API for processing.
The Lead Recovery workflow operates in review-only mode. It does not automatically send a customer response, confirm an appointment, promise availability, provide a diagnosis, or quote a price.
API requests are configured not to store the generated response for later retrieval. However, OpenAI states that API abuse-monitoring logs may include prompts and responses and are generally retained for up to 30 days, unless longer retention is required by law or reasonably necessary to protect its services or others. Do not submit passwords, payment-card information, government identification numbers, medical information, or other sensitive information that is not necessary for the request.
How information is shared
Information may be shared with the business identified on a service-request form, our hosting and email providers, security and anti-spam providers, OpenAI when an AI-assisted workflow is used, and other service providers needed to operate the website or respond to an inquiry.
We may also disclose information when required by law, to protect legal rights, or to investigate fraud, abuse, or a security incident.
Cookies, search reporting, and analytics
WordPress and security tools may use cookies or similar technologies for essential functions such as authentication, form operation, preferences, and abuse prevention.
We use Google Search Console to receive aggregate information about how the website appears in Google Search. We may also use Google Analytics to understand page visits, traffic sources, device and browser characteristics, and interactions with the website. Analytics information is used to measure website performance and improve our services.
How long we retain information
The Lead Recovery plugin does not store the contents of submitted leads in the WordPress database. It stores aggregate operational information such as request counts, token usage, and estimated processing cost.
Lead details and AI-generated drafts may be retained in review emails until they are deleted under our normal business practices. Contact-form messages, security logs, and related records are retained only as long as reasonably needed to respond, provide services, maintain security, resolve disputes, or meet legal obligations.
Security
We use reasonable administrative and technical safeguards, including encrypted connections, restricted administrative access, server security controls, and protected credentials. No internet transmission or storage system can be guaranteed to be completely secure.
Your choices
You may request access to, correction of, or deletion of personal information that we control by contacting us. We may need to retain limited information when required for security, legal compliance, or legitimate business records.
Children’s privacy
This website and its services are intended for businesses and adults. We do not knowingly collect personal information from children under 13.
Changes to this policy
We may update this Privacy Policy as our services, providers, or legal obligations change. The effective date at the top of this page will identify the latest revision.
Contact
For privacy questions or requests, email contact@outsidetheboxit.consulting.