CASA Tier 2
Cloud Application Security Assessment
Passed against Google's Tier 2 requirements, verified by an independent third party.
Legal
Privacy
Policy.
Last updated: October 20, 2026 · This policy is final and was reviewed before publication.
Security and compliance
- CASA Tier 2 validated
- GDPR compliant
- Encrypted in transit
- Data-minimal by design
Who we are
This website is operated by Aldasouqi L3C dba ACORP, located at 5982 Shadowlawn Ct, East Lansing, MI 48823. Questions about this policy can go to a@acorpagency.com at any time.
What we collect
When you contact us through this website — by email, form, or phone — we receive the information you choose to share: your name, contact details, and the content of your message. Our AI receptionist answers calls and may collect the details needed to book an appointment or route your request, such as your name, phone number, and reason for contacting us.
Calls are not recorded
We do not record calls. Calls to our published number are answered live by our AI receptionist and, where needed, transferred to a human. We keep no call audio and no call transcripts from these interactions.
No analytics or advertising cookies
We do not use analytics or advertising cookies on this website. Because we serve no analytics or advertising trackers, you will not see a cookie banner here. If that ever changes, this section will be updated first and a banner will appear before any tracking starts.
Service providers
This website is hosted by Vercel Inc. Form and onboarding submissions are delivered to our team inbox through a server-side email relay operated for this website. Payments, where offered, are processed by Stripe, Inc.; card details are entered on Stripe's checkout and are tokenized there — they never traverse ACORP systems.
How long we keep it
Form and onboarding submissions are retained for 12 months, then deleted. Subscription and billing records are kept for the period required by tax and accounting rules. You can request earlier deletion at any time.
How we use it
We use your information to respond to you, schedule and prepare for conversations, and operate the services you request. We do not sell your personal information.
AI disclosure
Calls to our published phone number are answered by an AI receptionist. It identifies itself as AI during the interaction and can transfer you to a human on request. See our security & privacy credentials and full privacy policy for how your information is protected.
How we protect data
Connections to this website are encrypted in transit. We follow data-minimization: we collect only the information needed to respond to you and operate the services you request. We do not sell your personal information, and we do not run third-party advertising trackers on this website.
Your choices
You can ask us what we hold about you, request corrections, or ask us to delete it — email a@acorpagency.com and we will act on your request. To cancel a subscription, email a@acorpagency.com; we confirm within three business days.
Contact
Questions about this policy: a@acorpagency.com
Security & privacy credentials
Independently tested.
Not self-graded.
GDPR
EU data protection
Data Subject Rights, lawful basis for processing, and EU Standard Contractual Clauses for international transfers.
CCPA / CPRA
California
We act as a service provider and do not sell or share personal information.
Google API User Data Policy
Workspace data
Workspace data is used only to power features the user authorizes, never to train or improve generalized models.
PCI DSS
Payment card data
Card data is tokenized at the browser and never traverses ACORP systems.
Data isolation
Client separation
Each client's data sits in its own separate instance and database, isolated from every other client.
Encryption
AES-256 encryption at rest and TLS 1.2+ in transit.
Monitoring
24/7 logging and on-call security monitoring.
Independent verification
Our controls are not self-graded — certifications and regulatory alignments are tested by independent third parties on a regular basis.
Certifications and regulatory alignments are tested by independent third parties on a regular basis. Details reflect ACORP's own security documentation.
What we do
The checklist.
In plain terms.
What we do
- 24/7 AI receptionist that answers, books and hands off to a human
- Inbox, calendar and scheduling support under your instructions
- Lead follow-up and outreach support shaped around your criteria
- Social and content drafted in your voice, published on your approval
- Documents organized and clauses flagged in plain English
- A website built and kept current by asking
- Your data isolated in its own instance, separate from every other client
- Nothing sends, posts or books without your approval
What we don't do
- We do not sell or share your personal information
- We do not train or improve generalized models with your data
- Card data never traverses ACORP systems — it is tokenized at the browser
- No legal advice: qualified counsel keeps legal judgment
- No implied endorsements: certifications are independently tested, not self-graded