Last updated 5 September 2026
Caustic Group is a one-person marketing and business strategy practice based in Southern California. When this policy says "we" or "us," that means Caustic Group. When it says "you," it means anyone using this website or asking us for an audit.
You can reach us at [email protected] or 951-428-8582.
We don't run analytics, advertising, or tracking scripts. We don't set cookies. The web server keeps standard technical logs, which include the IP address a request came from, the page requested, and the time. Cloudflare, which sits in front of the site, keeps similar logs to block attacks and abuse.
The form on our homepage asks for four things:
We use them to run the audit and to email you the results. That's the whole purpose. We don't add you to a mailing list, and we don't pass your details to anyone selling anything.
If you go on to work with us, we collect what you give us during intake: contact details for you and your business, and information about how your business currently appears online. Some of that comes through a questionnaire, and some of it we find by looking at public listings and pages.
We're a one-person operation, so we use other companies to do things we can't do ourselves. Here is every one of them that touches your information, and what they do.
| Service | What it does with your information |
|---|---|
| Web3Forms | Receives the audit request form and forwards it to our email. They store a copy on their servers for up to three years, then delete it automatically. They also pass submissions through spam-filtering services to block junk. |
| Provides our email and file storage, so anything you send us is held in a Google account. Also provides Google Forms, which we use for client intake questionnaires. | |
| Composio | Connects our own software to the Google account so we can read questionnaire answers. |
| Cloudflare | Sits in front of the website to keep it online and block attacks. Sees the technical details of requests to the site. |
We don't sell your personal information, and we never have. We don't share it for advertising. The only people who see it are us and the services listed above.
We operate an application that connects to Google Forms to read the answers submitted to our own client intake questionnaires. Access is read-only. We can't edit, delete, or create anything in your Google account, and the app doesn't touch your email, files, or calendar.
Limited Use. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
In plain terms, that means we only use this data to show you the answers to your own questionnaire inside our own process. We don't transfer it to anyone else except where you've told us to, where the law requires it, or to investigate a security problem. We don't use it for advertising, and we don't let it be read by people outside Caustic Group.
| What | How long |
|---|---|
| Audit requests | We keep them while we're working on your audit and following up. If you don't become a client, we delete our copy within twenty-four months. |
| The Web3Forms copy | Up to three years, then deleted automatically by them. That's their retention period, not ours. |
| Client records | For as long as you're a client, and afterwards for as long as we need them for tax and record-keeping. |
| Server and Cloudflare logs | Short-term, and rotated automatically. |
California's privacy law, the CCPA, sets thresholds for which businesses it covers: $25 million in annual revenue, buying or selling the information of 100,000 or more people, or making half your money from selling personal information. We're well under all three, so the law doesn't currently require us to do any of this.
We'll do it anyway. Email us at [email protected] and we will:
We aim to reply within thirty days. If we're ever large enough that the law does apply to us, we'll update this page and say so.
To ask Web3Forms directly about their copy, see the Web3Forms privacy policy.
The site is served over HTTPS, so traffic between your browser and us is encrypted. Web3Forms encrypts submissions in transit and at rest. Our email and file storage sit in a Google account protected by two-factor authentication.
We're not going to tell you your data is perfectly safe, because nobody can honestly say that about anything on the internet. What we can say is that we keep the amount we hold small on purpose, and we don't hand it to anyone who doesn't need it.
This is a service for businesses. It isn't aimed at anyone under 18, and we don't knowingly collect information from children. If you think a child has sent us something, email us and we'll delete it.
If we change how we handle your information, we'll update this page and change the date at the top. This policy was rewritten on 5 September 2026 when we added the audit request form to the site. The previous version said the site collected no personal information, which stopped being true once the form went live.
Questions about any of this, or a request about your own information:
[email protected]
951-428-8582