Privacy Policy

Information we collect

We collect information you provide directly, information our systems record when you use our sites, and information others send us about you. Client records for tax, bookkeeping, payroll, trust, or financial services may be collected through secure client systems rather than the public contact form.

• Contact details: your name, email address, phone number, and city and state, and, if you give them to us, your mailing address, company, and your spouse's name and contact details.
• Service and account details: the services you are interested in, contact-form and booking messages, account login details, payment status, subscription status, and other information you choose to provide.
• Your financial and household profile, if you complete our discovery intake: your age range, marital status, estimated net worth range, the kinds of assets you hold, your goals and timeline, the business entities you own or run and your share of each, and the trusts you have or are planning.
• People you tell us about: the names of other people and their relationship to you, such as beneficiaries, trustees, co-owners, a compliance overseer, or a friend you refer. Our notes about a beneficiary can include whether the beneficiary has special needs. Please tell us about other people only with their permission.
• Your conversations with us: notes from your calls with GHL, a transcript of a discovery call when one is made, and a record of the emails you exchange with our staff, kept with your client record.
• What you save in The Strategy Academy, described in its own section below.
• Technical information: when you sign in, we record the time, the sign-in method, your IP address, and your browser and device (from the user agent your browser sends) in a security log. Our hosting provider also processes IP addresses to deliver pages and protect the sites. What our analytics count is described under Cookies and analytics.
• Information from others: your name and email address from Google or Microsoft when you sign in with them, and the contact details a referral partner or a referring friend sends us.

How we use information

We use information to respond to inquiries, provide requested services, manage client and member accounts, process payments, maintain security, improve the website, comply with legal and professional obligations, and communicate about service updates.

Sensitive information

Do not send Social Security numbers, full account numbers, tax documents, payroll records, identification documents, trust documents, or other sensitive records through the public contact form. Use only the Secure Client Portal provided for your engagement.

Payment and technology providers

We use service providers to run our sites and services. They handle information on our behalf to provide their service to us. Payment details may be handled by processors such as Stripe. GHL Financial Services does not store full bank account numbers, full card numbers, or card security codes on this website.

• Hosting and analytics: Vercel runs our websites and provides the page-view counts described under Cookies and analytics.
• Database, sign-in, and file storage: Supabase stores account, intake, and client records and handles sign-in.
• Sign-in: Google and Microsoft, when you choose to sign in with them.
• Email, calendar, and calls: Microsoft 365 is our staff email and calendar. We use it to schedule and hold discovery calls, to send email, and to add the emails you exchange with our staff, and call transcripts, to your client record.
• Email delivery: Resend sends account, reminder, and notification emails.
• Payments: Stripe processes payments on its own secure pages.
• Customer relationship management and email marketing: HubSpot keeps your contact details, the services you are interested in, where you are in working with us, and your email preferences, including any unsubscribe.
• AI drafting: when it is turned on, Anthropic's Claude helps our staff draft a call summary and follow-up email from a call transcript and your name. Staff review every draft, and nothing is sent automatically.
• Client portals: the Secure Client Portal provided for your engagement.

Sharing

We do not sell personal information. We may share information with service providers acting on our behalf, professional advisors, tax or legal authorities when required, or other parties when necessary to provide requested services, comply with law, respond to legal process, protect rights, or maintain security.

The Strategy Academy

If you sign in to The Strategy Academy, we keep the information you choose to save there with your account so each tool opens where you left it.

• Sign-in: you sign in with Google, Microsoft, or an emailed sign-in link. Accounts have no password. When you use Google or Microsoft, we receive your name and email address from that provider to open your account; we do not receive your password for that provider.
• What you save: figures and answers you enter in the Tax Planner, My Tax Plan, check-ins, Debt Freedom, Business Success, Business Launch, and the Trust Action Plan, along with your reading history, bookmarks, collections, learning path progress, and reminder choices.
• Who can see it: GHL can see what you save. Saving it does not ask GHL to review it, does not file anything, and does not start an engagement.
• The Diagram Builder: the diagram you are working on is kept in your own browser, not on our servers, until you clear it or export it. A file you export is yours to keep and share.
• Deleting it: you can delete saved planner figures from the planner or your account page at any time. Academy information is kept while your account exists and is removed when you delete it or your account is deleted. Canceling a membership ends access to members-only material but does not delete your account or what you saved; to remove it, delete the account. Security and access records about the account, such as sign-in times, IP address, and browser, are kept for one year after the account is deleted, for security and record-keeping, and then removed.

Cookies and analytics

The sites use necessary cookies for account access and security. Both sites use Vercel Web Analytics to count page views and understand aggregate site usage. It does not use cookies. For each page view it records the page address, the site that referred you, an approximate location (country, region, and city), and your device type, operating system, and browser; Vercel tells repeat visits apart with a code made from the request and discards it after 24 hours. Before a page view is sent, we remove search terms, sign-in links, and anything else after the page address. On this site, pages inside The Strategy Academy and your account are not counted; the Academy sends only a count of a few steps, such as starting or finishing a tool, with no page address or details. Error monitoring and product analytics tools are built into this site but are turned off. Where consent is required, non-essential analytics are not enabled until consent is provided.

Retention

We retain information for as long as needed to provide services, maintain business records, resolve disputes, comply with tax, accounting, legal, and regulatory requirements, and protect legitimate business interests. Retention periods may differ by record type. An account is deleted by our staff after you request it, and saved Academy information is removed with it. If you have contacted us but are not a client, we keep your inquiry and intake information until you ask us to remove it or you opt out of marketing email. When you do, marketing stops right away and your record is deleted within 30 days; we keep only your email address on a do-not-contact list so we do not email you marketing again.

Children

Our sites and services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. Information about a minor, such as a trust beneficiary, comes to us from a parent, guardian, or other adult as part of our services. If you believe a child under 13 has sent us personal information, please contact us.

Privacy requests

Depending on your location and relationship with GHL Financial Services, you may request access, correction, deletion, restriction, or a copy of certain personal information. We confirm your identity before acting on a request. Some records may need to be retained for legal, tax, accounting, security, professional, or dispute-prevention reasons.

Contact

Questions about this policy or privacy requests can be sent to info@ghlfinancial.com or through the contact form.