Everything described here is the responsibility of Kusa Solutions LLC, a limited liability company registered in Tbilisi, Georgia — the country, not the US state — under identification code 404818122, trading as KUSA. In data-protection language, that company is the controller: the one that decides what is collected and why, and the one you can hold to this policy.
Every question, request and complaint about your data goes to [email protected] and is handled by a person, not a form.
You give us information in three places, and each one collects only what that step needs:
If you share a public link to your business (for example your Google Maps listing), we read the publicly visible details — name, hours, photos, reviews — to pre-fill your site. We only do this when you paste the link.
The growth audit also checks public information about the business itself: your Google Business Profile, your ranking against nearby competitors for your trade, and your website if you have one. Nothing here requires you to log in to anything — we only read what is already publicly visible.
Some of the businesses we write to did not come to us first — we found them. If that is how you got here, this section is the one you want, and everything in it is public information we read rather than anything you gave us.
Where we look:
What we do with it: we store those business details in our own database, we measure how the business shows up to a customer searching for that trade — which involves scoring it against other nearby businesses in the same trade, who are named in the report — and, if there is a contact address, we may email or call the business to show it the report and offer our services. We do not buy or sell lead lists, we do not enrich this with anything from a data broker, and we do not attempt to identify individuals behind a business listing.
We also use two paid services to fill gaps in that public data — see the second list under "Where it lives and who touches it" below — and we send the outbound email and calls through the providers named there.
How to stop it: reply to any message we sent you, or email [email protected], and say you want to be removed. That marks the business as unsubscribed and every email, message and call path we run checks that mark before it sends, so one request covers all of them. Say "delete" rather than "unsubscribe" and we delete the record outright instead of suppressing it — although suppression is what actually guarantees we do not contact you again if the same listing is found a second time, so we keep an unsubscribe marker unless you tell us not to.
Sole traders, note: if your business contact details are also your personal ones, the rights described further down apply to them, and you do not have to be a customer to use them.
We do not run advertising trackers on this site and we do not sell or rent your information to anyone. If you came to us, we use your details to answer you and to run what you asked for — nothing else. If we contacted you first, we say exactly how we found you under "How we find the businesses we contact" above; that outreach is only ever about our own services, never anyone else's, and one reply to [email protected] ends it.
We use a small number of functional cookies, none of them for advertising:
We also keep a little information in your browser’s own local storage — never sent to us as a cookie — to remember your in-progress audit answers, whether you have dismissed the cookie banner, and a “do not count me” preference if you set one. Clearing your browser storage removes all of it.
There is no third-party analytics or advertising cookie on this site.
We count page visits so we know which pages are worth keeping. We do it ourselves, in our own database, with no analytics company involved and no cookie set for it.
For each visit we record the page address, the site that linked you here (the website name only, never the full address), your country if our network provider tells us, and whether you are on a phone, tablet or computer. To count one person once instead of ten times, we combine your IP address and browser into a scrambled code using a secret that changes every day. We never store your IP address, and the code cannot be turned back into it.
Because that secret changes daily, the code for the same person is different tomorrow. That is on purpose: it means we can tell you how many people visited on a given day, and we cannot follow anyone from one day to the next, build a profile, or recognize you when you come back.
Counting happens in your browser, so any script or content blocker stops it, and nothing on this site depends on being counted. We do not act on the browser "Do Not Track" signal, because there is nothing here for it to switch off — no cookie, no third party, and no identifier that outlives the day.
Alongside our own counting we use PostHog (an analytics company, on their United States servers) to see which parts of a page people actually use — where they click, where they stop reading, where a page loses them.
We run it in its cookieless mode, which is the only reason it is here without a banner asking your permission: it sets no cookie, writes nothing to your browser’s storage, and identifies a visit through a code calculated on their servers that changes daily — the same approach, and the same deliberate limit, as our own counting above. It cannot follow you from one day to the next either.
Because of that mode it does not and cannot record your screen. Anything you type into a form is masked before it leaves your browser regardless. Any script or content blocker stops it, and nothing on this site depends on it.
Your account, your website content and your audit results sit in our own database (PostgreSQL) and our own file storage (MinIO), both running on a server we rent and administer ourselves — not in someone else’s product. The people who build the systems are the people who can reach the data, and access is limited to doing the work you asked for.
A short list of outside companies processes some of it, each because one specific feature needs them to. This is the entire list for the visitor and customer data described above — the separate list for businesses we contacted first follows it. There is no advertising network on either, no data broker, and nobody who receives your information to use for their own purposes:
For a business we contacted first, a different and equally short list applies — these handle the finding and the contacting, and they never receive customer account data or website content:
If we ever add another one, it appears on the relevant list here before it starts receiving anything.
We are a Georgian company and most of the companies above are American, so your information does travel between countries. That is not incidental — it is how the service works, and you should know it rather than find it in a footnote.
Two things make that safe rather than merely disclosed. Each company on the list above holds only the narrow slice its one feature needs, under a contract that lets them use it for that and nothing else. And the substantial part — your account, your site content, your audit results — never leaves our own database on our own server; it is the narrow slices that move.
Where the law of the country you are in gives you rights over data that leaves it, those rights follow the data and we honor them at the address below, whichever country you are writing from.
If your personal information is ever exposed by a breach of our systems, we will tell you by email without waiting to be asked and without waiting to have every answer — what happened, what of yours was involved, what we have done, and what you should do. We would rather tell you early and update you than go quiet while we investigate.
We will also notify whichever regulator the law requires, within the time it requires.
Inquiry emails and form submissions: as long as the conversation is live, then archived.
Customer sites and content: for as long as you are a customer. If you cancel, we hold your content for 60 days in case you come back, then delete it. You can request an export of your content at any time — including on the way out.
To have your account and everything attached to it deleted, email [email protected] from the account address. We confirm when it is done.
Business listing records for companies we have not spoken to: kept while the listing is still a business we might contact, and reviewed periodically — a record we have written to and heard nothing back from is not kept forever. Ask us to delete yours and it goes, subject only to keeping an unsubscribe marker so a later search cannot resurface you.
You can ask us at any time to show you what we hold about you, correct it, export it, or delete it. Email [email protected] and a person will handle it — there is no form and no phone tree.
You do not need an account to use these rights. If we found your business and wrote to you, the same rights apply to what we hold about it.
If you live in California, or in another US state with its own privacy law (Virginia, Colorado, Connecticut, Texas, Oregon and others), you have these rights over the personal information we hold about you — including where we hold it because we found your business rather than because you contacted us:
On that last one, so it is said out loud rather than implied by silence: we do not sell your personal information and we never have. We do not share it for cross-context behavioural advertising. We do not use it for automated profiling that produces legal or similarly significant effects. There is therefore nothing here to opt out of — but the right exists, and if that ever changed this page would say so before it did.
To use any of these, email [email protected] from an address we can tie to the record, or tell us enough to find it. We answer within 45 days, and will say so if we need the extension the law allows. If someone is acting for you as an authorised agent, say so and give us written proof they are authorised. We will never treat you worse — different price, worse service, slower replies — for asking.
If we cannot verify that a request comes from the person the data is about, we will say why rather than quietly ignore it.
If we change this policy in a way that matters, we update the date at the top and, for customers, say so in the monthly report. We will never quietly loosen it.
Questions about any of this go to [email protected] — a person reads it, and replies within 24 hours, every working day.