Privacy Policy
Effective date: November 7, 2026
This policy explains how C4 Payments LLC, a Texas limited liability company doing business as C4 SaaS ("C4 SaaS", "we", "us"), of Flower Mound, Texas, handles personal information collected through www.c4saas.com (the "website"), inquiries and bookings, and our other business contacts. Two linked pages are part of this policy: https://www.c4saas.com/cookies-and-analytics (cookies and Google Analytics) and https://www.c4saas.com/product-privacy (C4 SaaS products that link here instead of publishing their own policy, such as MelvinOS, and work we do for clients). Ploposaurus has its own policy at https://ploposaurus.com/privacy.html.
In short: we collect what you send us, count visits with our own cookieless tool, run Google Analytics only if we have turned it on and you allow it, never sell your personal information or share it for targeted advertising, and will access, correct, or delete it on request.
Information you give us
Our inquiry form collects your name and email address; optionally your company and phone number; the kind of request (such as a project, call, product question, community idea, or support); the service you want; your message; and, where asked, an investment range, timeline, preferred call times, and timezone. If you email, call, or work with us, we keep those communications and the business details needed for proposals, services, and records. Please do not send passwords, card numbers, health information, or private customer records.
We use a phone number only to respond to your inquiry or booking. We do not send marketing texts, or make marketing calls with an autodialer or a prerecorded or artificial voice, unless you have separately agreed in writing. Reply STOP or tell us in any reasonable way and we will stop texting you.
Bookings (HighLevel)
Our booking link (www.c4saas.com/book) opens a scheduling page at api.leadconnectorhq.com run by HighLevel LLC and LeadConnector LLC ("HighLevel"), which may use its own cookies under https://www.gohighlevel.com/privacy-policy. Opening the link books nothing, and our website sends HighLevel nothing beyond what your browser ordinarily sends. If you book, HighLevel collects the details you enter (such as name, email, phone, and time) for us; we use them to confirm, prepare for, and follow up on the meeting, and treat them like inquiries.
Information collected automatically
Our servers and hosting provider receive technical details with each request, such as IP address, browser type, page, and time, which we use to deliver and secure the website and keep for a limited period. The inquiry form uses a hashed (one-way scrambled) IP address to limit repeat submissions.
Public pages use browser session storage (cleared when you close the tab or browser) to remember your first page, campaign labels in the link that brought you, and small display choices. An inquiry includes that first page, those labels, and the page you sent it from.
We count page views, form starts, and booking-link clicks with our own service. Your browser creates a random session identifier; our server stores a hashed form of it with the event, page path, and time for a rolling 90 days. This sets no cookies, sends nothing to Google or any analytics or advertising company, and never includes full addresses, query strings, or form contents. It is skipped when your browser sends Do Not Track or Global Privacy Control.
Google Analytics and cookies
Google Analytics, a service of Google LLC, runs on the website only when we have turned it on and you have allowed it. When it is on, a banner naming Google Analytics and its cookies asks first, and an "Analytics preferences" button appears on public pages; if you see neither, it is not running for you. Nothing goes to Google until you select "Allow analytics", and it never loads when your browser sends Global Privacy Control or Do Not Track. We never send Google your name, email, phone, message, or inquiry reference. Details, cookies, retention, and how to withdraw: https://www.c4saas.com/cookies-and-analytics.
We use no advertising cookies. Administrator sign-in uses necessary cookies; the inquiry form needs no account.
How we use and share information
We use personal information to respond to inquiries and bookings, prepare proposals, provide and support our services and products, send messages you asked for or that relate to our work, understand website use in aggregate, keep systems secure, keep business records, and comply with law.
Inquiries are stored in our website system and Melvin CRM, our own customer relationship system, and emailed to info@c4saas.com. We share personal information only with service providers that help run our business (such as hosting, Amazon Simple Email Service, our email provider, HighLevel, and Google Analytics as described above) under terms limiting their use; when required by law or needed to protect rights, safety, or property; and in a merger, acquisition, financing, or sale of our business, subject to this policy.
We do not sell personal information or share it for targeted advertising. Apart from Google Analytics as described above, we do not let other companies collect information about your activity on our website over time and across other sites.
How long we keep information
Inquiries, bookings, and business communications: as long as reasonably needed to respond, manage our relationship, keep records, and meet legal, tax, and accounting duties, or until you ask us to delete them (subject to the exceptions below). Page counts: 90 days. Server logs: a limited period.
Your privacy rights
Laws such as the Texas Data Privacy and Security Act and the California Consumer Privacy Act may give you rights over your personal information. Whether or not they apply to us, anyone may ask us to confirm whether we hold their personal information, and to access, copy, correct, or delete it. Email info@c4saas.com; we may confirm your identity, usually through the email address you used. We respond within 45 days, or tell you why we need up to 45 more. If we decline, reply with "Privacy appeal" in the subject and we will answer within 60 days. We will not treat you differently for making a request.
Because we do not sell personal information, share it for targeted advertising, or use it for profiling with legal or similarly significant effects, there is nothing to opt out of; we honor Global Privacy Control anyway. We do not use sensitive personal information to infer characteristics about you.
How to delete your data
Step 1. Email info@c4saas.com from the address you used with us, with "Delete my data" in the subject. If you no longer use it, tell us the address or phone number you used and we will confirm your identity another way.
Step 2. Tell us what to delete if you want only part removed (for example an inquiry, a booking, email conversations, a product account, or data from a connected Google, Facebook, Instagram, or other account). Otherwise we delete everything we find linked to you.
Step 3. We complete your request within 45 days (or tell you if we need up to 45 more) and confirm by email.
We delete, or make anonymous, your personal information in our website system, Melvin CRM, our mailbox, our HighLevel account, and C4 SaaS product accounts you control. We may keep what the law requires or what we need for tax, accounting, contract, or dispute purposes, a minimal record of your request, and a technical record that stops a deleted inquiry from being re-created. Backup copies stay secure, are used for nothing else, and are removed as backups are replaced.
Product accounts: delete in the product where it offers that, or ask your organization's administrator (see https://www.c4saas.com/product-privacy). Ploposaurus: follow "Deleting your data" at https://ploposaurus.com/privacy.html.
Connected accounts: you can remove a C4 SaaS app's access in your Google Account (third-party connections) or in Facebook or Instagram settings (apps and websites). That stops future access but does not delete what we received, so also email us as above.
Our page counts are not linked to your name or email and expire after 90 days. Google Analytics data is not linked to you either, so we usually cannot find it; withdrawing permission stops it and removes its cookies, and collected data expires after 2 months.
Visitors outside the United States
The website is intended for the United States, and information is processed in the United States and where our providers operate. In the European Economic Area, the United Kingdom, and Switzerland, we use Google Analytics only with consent, and use inquiry and booking information to take steps you request and for our legitimate interest in managing inquiries. You may have rights to access, correct, delete, restrict, object, receive a copy, and complain to your data protection authority.
Children
The website and the products covered by this policy are for businesses and adults, not children under 13 (under 16 in the European Economic Area and United Kingdom), and we do not knowingly collect their personal information. If a child has sent us information, email us and we will delete it.
Security, other sites, and changes
We use reasonable safeguards and limit access to authorized team members, but no system is completely secure. Linked websites and services, including the booking page, follow their own terms and policies. We may update this policy by posting a new version with a new effective date, with more prominent notice, such as on the website, before a material change to how we use information already collected.
Contact us
C4 Payments LLC, doing business as C4 SaaS, Flower Mound, Texas. Email: info@c4saas.com.