Privacy Policy

Effective date: July 22, 2026 · Version 2.4

← Back to Home

Bello Block LLC ("Bello Block," "we," "us") operates ClawSignal, software that performs automated local SEO and AI-visibility optimization. This Policy explains what personal information we collect, why, who we share it with, how long we keep it, and the rights you have — including rights under the California Consumer Privacy Act as amended by the CPRA ("CCPA").

1. Who this applies to

  • Visitors who run our free scan or browse clawsignal.co.
  • Customers who hold a paid ClawSignal subscription.
  • Developers who use our API or MCP server.

2. Personal information we collect

A. Information you give us

  • Free scan: your business name, website URL, and email address, submitted to run an AI-Visibility Readiness scan.
  • Account / subscription: contact name and email, business details, and billing information. Card payments are processed by Stripe; we do not store full card numbers.
  • Connected service credentials: when you connect a platform (CMS, Google Business Profile, Google Search Console, Cloudflare, etc.), we store the access tokens/credentials needed to deliver the service on your behalf. These are sensitive; see Security (§7).

B. Information collected automatically

  • Technical data: IP address, browser/device type, and pages viewed.
  • Scan/audit results: performance, SEO, structured-data, and AI-readiness signals generated about the website you submit.
  • Product analytics (first-party): usage events (e.g., funnel steps, referrer, UTM parameters) used to understand and improve the site. We do not send personal identifiers to our first-party analytics.
  • Google Analytics 4 (GA4) and Google Tag Manager: clawsignal.co uses GA4, loaded via Google Tag Manager, to measure site usage — pages viewed, approximate location, device and browser type, and traffic sources. GA4 sets cookies and similar identifiers and processes IP addresses per Google's documentation. We also measure ad conversions (e.g., Google Ads conversion events) so we can tell which campaigns work. You can opt out with the Google Analytics opt-out browser add-on, browser cookie controls, or a Global Privacy Control signal (§5). Google's handling of this data is described in Google's Privacy Policy.

C. Information we derive

  • Lead scoring and estimates (e.g., estimated plan fit), and publicly available business signals (such as review counts/ratings) used to prioritize follow-up.

3. Why we use it (purposes)

  • Provide the service: run scans/audits and, for customers, perform SEO and AI-visibility work.
  • Billing and account management (via Stripe).
  • Marketing and outreach: we may email people who ran a free scan with related follow-ups and offers. Every marketing email includes a one-click unsubscribe; once you opt out, we stop. (Transactional messages — like the scan report you requested or account/service notices — are not marketing and may still be sent.)
  • Improve and secure the product: analytics, debugging, fraud and abuse prevention.
  • Legal compliance and enforcement of our Terms.

4. How we share it

We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising (as those terms are defined under the CCPA).

We disclose personal information only to service providers / sub-processors that process it on our behalf under contract, and only as needed to run ClawSignal:

  • Stripe — payment processing
  • AI/LLM API providers (e.g., OpenAI, Anthropic, Google, xAI) — to run AI-visibility scans
  • Google PageSpeed Insights — site performance audits
  • Our email delivery provider — transactional and marketing email
  • Supabase — database and backend
  • Vercel — application hosting
  • Google (Analytics 4 / Tag Manager / Ads) — site usage analytics and ad-conversion measurement on clawsignal.co (see §2.B)

We may also disclose information to comply with law, legal process, or enforceable governmental requests; to enforce our Terms; or to protect the rights, safety, and property of Bello Block, our users, or the public. If we are involved in a merger or acquisition, information may transfer as part of that transaction.

4a. Google user data (Google API Services User Data Policy)

Some ClawSignal features work only when you connect a Google service to your account. ClawSignal's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What we access, only after you explicitly connect each service:

  • Google Analytics (read-only): traffic metrics (sessions, users, conversions) for your connected property, used solely to report the results of our SEO work in your portal and reports.
  • Google Search Console: search performance (queries, clicks, impressions, positions), sitemap submission, and index status for your connected site, used to track rankings and monitor coverage.
  • Google Business Profile: your connected business listing, posts, reviews, and performance data. The integration is unavailable while API approval is pending. When available, each public post and review reply will require your specific approval for the exact payload.

Our Limited Use commitments for all Google user data:

  • We use it only to provide and improve the customer-facing features described above — never for advertising, and we never sell it.
  • We do not use Google user data to train, develop, or improve generalized or non-personalized AI/machine-learning models. Google user data is not sent to our AI/LLM sub-processors for model training.
  • Humans do not read this data except with your consent, when necessary for security or to comply with law, or when it is aggregated and anonymized for internal operations.
  • We transfer it only to the sub-processors listed in §4 as needed to run the service, for security purposes, or to comply with law.

You can disconnect any Google service at any time from your portal's Connections tab. For Google Business Profile, disconnecting revokes access where supported, deletes the stored tokens, and stops future synchronization and publishing. You can also revoke ClawSignal's access from your Google account permissions.

5. Your California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to:

  • Know / Access the categories and specific pieces of personal information we hold about you.
  • Delete personal information we hold about you (subject to legal exceptions).
  • Correct inaccurate personal information.
  • Opt out of the sale or sharing of personal information.
  • Non-discrimination for exercising your rights.
  • Use an authorized agent to submit requests.

We honor Global Privacy Control (GPC). If your browser sends a GPC signal, we treat it as a valid opt-out of sale/sharing automatically.

Note on opt-out: we do not currently sell or share personal information, so there is presently nothing to opt out of — but we provide the "Do Not Sell or Share My Personal Information" control and honor GPC as a standing preference.

How to exercise your rights: submit a request through our privacy request form at clawsignal.co/privacy/requests or email support@belloblock.co. To protect your data, we verify access, deletion, and correction requests by confirming control of the email address on file before acting. We respond within 45 days (extendable by an additional 45 days where permitted, with notice).

6. Data retention

We keep personal information for as long as needed for the purposes above:

  • Customer data — for the life of your subscription and as needed afterward for legal, tax, and security purposes.
  • Lead data — retained for follow-up until you unsubscribe or request deletion.
  • Billing/tax records — retained for the period required by law.
  • Security and audit logs — retained for a limited period for fraud/abuse prevention.
  • Google Business Profile API content — cached reviews and performance content is refreshed or deleted within 30 calendar days. Customer-created drafts and the approval audit ledger are retained as customer records, not as a substitute cache of Google content.

When information is no longer needed, we delete or de-identify it, except where law requires retention.

7. Security

We use commercially reasonable administrative, technical, and organizational safeguards to protect personal information, including the access tokens you provide for connected services. Data is encrypted in transit (TLS), and sensitive credentials such as connected-service OAuth tokens are stored encrypted. Access to production data and credentials is restricted to authorized personnel and enforced at the database layer. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. If you believe your account or credentials have been compromised, contact us at support@belloblock.co.

8. Children

ClawSignal is a business tool not directed to children. We do not knowingly collect personal information from anyone under 16.

9. Changes to this Policy

We will update this Policy as our practices evolve and revise the effective date. Material changes will be flagged prominently.

10. Contact

Bello Block LLC · support@belloblock.co

See also our Terms of Service.

Changelog

  • Version 2.4 — July 22, 2026: Clarified that Google Business Profile access is pending, documented action-specific approval for every post and review reply, immediate disconnect behavior, and the 30-day refresh-or-delete rule for cached Google content.
  • Version 2.3 — July 17, 2026: Disclosed Google Analytics 4 via Google Tag Manager and Google Ads conversion measurement on clawsignal.co (§2.B), replacing the earlier cookieless-only analytics statement, and added Google (GA4/GTM/Ads) to the sub-processor list (§4) with opt-out links.
  • Version 2.2 — July 6, 2026: Strengthened the Google Limited Use commitments (§4a) with an explicit exclusion of AI/ML model training, and named encryption in Security (§7) — TLS in transit, encrypted OAuth-token storage, and database-layer access control.
  • Version 2.1 — July 3, 2026: Added §4a — Google user data and our Limited Use commitments under the Google API Services User Data Policy.
  • Version 2.0 — June 27, 2026: CCPA/CPRA-aligned rewrite (GPC, rights-request form, retention, sub-processor disclosure).
  • Version 1.0 — March 14, 2026: Initial published Privacy Policy.

© 2026 Bello Block LLC. All rights reserved.