Effective Date: 09/28/26

1. Who We Are and What This Policy Covers

Sovereign Stack LLC ("Sovereign Stack," "Company," "we," "us," or "our") is a Pennsylvania limited liability company doing business as Sovereign Stack Group. This Privacy Policy explains how we collect, use, share, and protect personal information when you:

Visit sovereignstackgroup.com or another website we operate that links to this policy

Submit a form, book an appointment, or chat with us

Call, text, or email us

Become a client, or work with us on behalf of a client

Receive emails or text messages from us

Read this policy together with our Terms of Service at sovereignstackgroup.com/terms. If a signed agreement with a client says something different about that client's information, the agreement controls for that client. We are based in the United States. Our service providers may process information in other countries.

The short version: We do not sell your personal information. We never share your mobile number or text message consent with third parties for marketing or promotional purposes. We use your information to respond to you, to deliver the services you hire us for, and to run our business.

2. Information We Collect

2.1 Information You Give Us

Contact details: name, email address, phone number, business name, and anything you type into a form or chat.

Appointments: the date, time, and details of calls you book with us.

Client information: business details such as legal name, address, and tax ID when needed to register messaging or advertising accounts on your behalf; billing contacts; logos, photos, and content; and access to the accounts and platforms you ask us to manage.

Your customers' information: customer and contact records you give us, or that come in through the systems we run for you. Section 4 explains how we handle it.

Communications: emails, texts, chat messages, and records of calls and meetings. Section 5 explains call recording.

Payments: invoices and payment records. Card payments are processed by Stripe, which receives your full card number. We do not. If you pay by bank transfer or check, we receive the bank details that come with the payment.

2.2 Information Collected Automatically

When you visit our website, we automatically collect:

Device and browser: browser type, operating system, and device type, to display the site correctly.

Usage: pages viewed, time on page, and links clicked, to learn what is useful to visitors.

Approximate location: IP address and the general area it maps to, for security and analytics.

How you found us: the page, ad, or link that brought you to our site, to measure our marketing.

Section 6 explains which tools collect this information and which ones run only if you choose "Accept all" in our cookie banner.

2.3 Information From Other Sources

Advertising platforms: reports from Meta about how people interact with our ads.

Analytics: reports from Google Analytics about how our website is used.

Public sources: publicly available business information, such as business listings, websites, and reviews.

Referrals: people who introduce you to us.

3. How We Use Information

We use personal information to:

Respond to your questions, schedule calls, and send appointment reminders

Deliver the services in our agreements, including websites, CRM systems, automations, advertising, content, and AI tools

Send service notices, invoices, and account messages

Send emails about our services, which you can unsubscribe from at any time

Measure and improve our website, advertising, and services

Show our ads to people who have visited our website, if they chose "Accept all" in our cookie banner

Protect our systems, prevent spam and fraud, and enforce our agreements

Comply with the law and respond to lawful requests

We may feature completed client work in our portfolio and case studies unless the client opts out in writing, as described in our Terms of Service. We do not disclose a client's confidential business information without the client's prior written consent, and our case studies never include personal information about a client's customers.

4. Information We Handle for Our Clients

Our clients are businesses. To run their websites, phone lines, text messaging, chat, CRM systems, review requests, and advertising, we handle personal information about their customers and the people who contact them. For that information:

We act on the client's behalf, under the client's instructions and our agreement with the client.

The client decides what is collected and why, and the client's own privacy policy applies to it.

We use it only to provide services to that client. We do not sell it, and we do not use it to market our own services.

Only the team members, contractors, and service providers who need it to do the work can access it.

When an engagement ends, the systems and the information in them are handled as the client's agreement provides, including its transfer terms.

If we discover a security incident affecting it, we notify the client so the client can meet its own obligations.

Are you a customer of one of our clients? Contact that business directly to access, correct, or delete your information. If you contact us instead, we will forward your request to the business.

5. AI Tools and Call Recording

5.1 AI and Automated Tools

We use artificial intelligence tools, including services from third-party AI providers, to help us:

Draft and review website content, articles, and marketing copy

Answer, route, and follow up on calls, texts, and chats, including after-hours voice assistants we set up for clients

Transcribe and summarize calls and meetings

Analyze advertising, search, and website performance

AI tools assist our team. They do not replace our responsibility for the work we deliver. When you speak or chat with an AI assistant we operate for ourselves or for a client, the conversation may be recorded and transcribed, and our AI and telephone service providers process it.

5.2 Call and Meeting Recording

We may record and transcribe calls and video meetings to keep an accurate record and follow up on what was discussed. Pennsylvania law requires the consent of everyone on a recorded call, so we tell participants when a call or meeting is being recorded.

6. Cookies, Pixels, and Analytics

Cookies are small files your browser stores. Pixels and tags are small pieces of code that send information about your visit to the company that provides them. Our website uses:

Essential (HighLevel, our website platform, and Cloudflare): delivers the site, protects it from bots and abuse, remembers your cookie choice, and records the page or ad that led to a form or chat you submit. Always runs.

Spam protection (Google reCAPTCHA): checks that forms are submitted by people, not bots. Always runs.

Chat (HighLevel chat widget): lets you message us from any page. Always runs, and records the messages you send if you start a chat.

Analytics (Google Analytics): measures visits and how pages are used. Runs only if you choose "Accept all."

Advertising (Meta Pixel): measures our Facebook and Instagram ads and lets us show our ads to people who have visited our site. Runs only if you choose "Accept all."

6.1 Your Cookie Choices

When you first visit, our cookie banner lets you choose "Accept all" or "Accept essential." Choosing "Accept essential" keeps analytics and advertising tools from running. Our website platform may load Meta's code library on any page, but the Meta Pixel does not start, set cookies, or send events about your visit unless you choose "Accept all." To change your choice, clear the cookies for sovereignstackgroup.com and the banner will appear again.

You can also block cookies in your browser settings, opt out of Google Analytics at tools.google.com/dlpage/gaoptout, and manage your ad settings in your Facebook account. Our website does not respond to Do Not Track or Global Privacy Control browser signals, so please use the choices above.

7. How We Share Information

We do not sell your personal information. We share it only as described below.

7.1 Service Providers

Companies that help us run our business and deliver our services, including:

HighLevel (LeadConnector): CRM, website hosting, forms, chat, email, text messaging, calls, calendars, and e-signatures

Google: business email and documents, Google Analytics, and reCAPTCHA

Meta: advertising measurement through the Meta Pixel, only if you choose "Accept all"

Stripe: payment processing

Cloudflare: website delivery and security

AI providers: the AI services described in Section 5

Telephone and messaging carriers: delivery of calls and text messages

Cloud hosting providers: servers and storage that run our internal software and backups

Business software: tools we use to manage projects, files, integrations, and passwords

Professional advisors: our bank, accountants, and lawyers

Meta and Google receive some information directly from your browser through the tools described in Section 6 and handle it under their own privacy policies.

7.2 Contractors

Independent contractors who help deliver client projects may access information only as needed for that work.

7.3 Legal Requirements and Safety

We may disclose information when we believe in good faith that the law requires it, to respond to a subpoena or court order, to protect the rights, property, or safety of Sovereign Stack or others, or to investigate misuse of our services.

7.4 Business Transfers

If Sovereign Stack is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction and will remain subject to this policy.

8. Text Messages (SMS)

If you check the consent box on our website or otherwise agree to receive text messages from Sovereign Stack Group, we will send appointment reminders and service notifications to the number you provide, and we will reply to messages you send us. Message frequency varies. Message and data rates may apply. Reply STOP at any time to opt out, or reply HELP for help. You can also reach us at 1-888-484-3828. Consent to receive text messages is not a condition of purchase.

Your mobile information: No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Text messages we send on behalf of a client are governed by that client's terms and privacy policy.

9. Email

We send transactional emails, such as appointment confirmations, invoices, and service notices. If you are a client or have contacted us, we may also send emails about our services. Every marketing email includes a way to unsubscribe, and we process unsubscribe requests within 10 business days. You will still receive transactional messages about services you use.

10. Data Security

We use administrative and technical safeguards designed to protect personal information, including:

Encryption in transit (HTTPS) on our website and forms

Access limited to the team members and contractors who need it

An encrypted password manager for the account credentials clients give us

When you give us access to your accounts, please use the secure method we provide rather than sending passwords by email or text. Keep any login we set up for you confidential, and tell us right away if you think it has been compromised. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10.1 If a Security Incident Occurs

If a security incident compromises your personal information, we will notify you without unreasonable delay and notify government authorities where the law requires, including under Pennsylvania's Breach of Personal Information Notification Act. For information we handle for a client, we notify the client as described in Section 4 so it can notify the people affected.

11. Data Retention

We keep personal information only as long as we need it for the purposes in this policy, to meet legal, tax, and accounting requirements, to resolve disputes, and to enforce our agreements. How long depends on the type of information:

Inquiries and appointment requests from people who do not become clients: as long as they are useful for following up, unless you ask us to delete them.

Client records and project files: for the engagement, and afterward as long as needed for legal, tax, and dispute purposes.

Invoices and payment records: at least 7 years, for tax and accounting purposes.

Call and meeting recordings and transcripts: as long as needed to keep an accurate record of the work.

Email and text opt-out records: as long as needed to keep honoring your opt-out.

Website analytics: detailed event data for no more than 14 months; summary reports may be kept longer.

Information we handle for clients: as the client and its agreement direct.

12. Your Choices and Rights

Wherever you live, you can ask us to:

Tell you what personal information we hold about you and give you a copy

Correct information that is inaccurate

Delete your information, unless we need to keep it to provide services you requested, to meet legal, tax, or accounting obligations, or to resolve disputes

Stop sending you marketing emails (use the unsubscribe link) or text messages (reply STOP)

To make a request, email [email protected] with "Privacy Request" in the subject line, or call 1-888-484-3828. We may need to verify your identity before acting on a request, and we respond within 30 days. We will not treat you differently for making a request.

Some U.S. states give their residents additional privacy rights. Where a state privacy law applies to our handling of your information, we will honor the rights it provides.

13. Children's Privacy

Our website and services are intended for businesses and adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.

14. Third-Party Links and Services

Our website links to other websites, and our services connect to third-party platforms. Those companies handle information under their own privacy policies, including:

Google: policies.google.com/privacy

HighLevel: gohighlevel.com/privacy-policy

Meta: facebook.com/privacy/policy

Stripe: stripe.com/privacy

Cloudflare: cloudflare.com/privacypolicy

15. Changes to This Policy

We may update this policy. When we do, we will post the new version on this page and update the Effective Date. For significant changes, we will make reasonable efforts to notify active clients by email. If a change would affect information we already hold in a materially different way, we will ask for consent where the law requires it.

16. Contact Us

If you have questions about this Privacy Policy or want to make a privacy request, contact us:

Sovereign Stack LLC

d/b/a Sovereign Stack Group

Email: [email protected] (subject: Privacy Request)

Phone: 1-888-484-3828

Address: 3400 Perkiomen Ave, Reading, PA 19606

We respond to privacy requests within 30 days.t