Privacy Policy
Last updated: March 2026. Your privacy matters to us.
Who We Are
Consuelo operates the website at consuelohq.com and provides an open-source sales infrastructure platform including power dialer, AI CRM, real-time coaching, and analytics for insurance sales teams. Our registered office is located at [registered address].
For the purposes of data protection law, we are the data controller of your personal data. Our Data Protection Officer can be contacted at [email protected].
Scope
This privacy policy applies to visitors of consuelohq.com and users of our services. It does not apply to third-party websites that may be linked from our site. We encourage you to read the privacy policies of any third-party services you use.
Analytics Provider
We use PostHog (posthog.com) as our analytics platform. PostHog is a privacy-focused analytics provider that processes data on our behalf. You can learn more about PostHog's data practices at posthog.com/privacy.
What We Track
When you visit our website, we automatically collect:
- Page views: URLs you visit, including the full path and query parameters
- Page leaves: when you navigate away from a page
- Clicks: elements you click on (autocaptured)
- Form submissions: forms you submit (autocaptured)
- Scroll depth: how far you scroll down a page (25%, 50%, 75%, 100%)
- Time on page: how long you spend on each page
- Session recordings: recordings of your interactions on our website
- Heatmaps: aggregated visual representations of user behavior
- Outbound link clicks: links you click that navigate away from our site
Session Recordings
We record user sessions to understand how people interact with our website and improve the user experience. Session recordings capture:
- Mouse movements and clicks
- Scrolling behavior
- Page navigation
- Console logs (for debugging purposes)
Session recordings are processed by PostHog and are used solely to improve our product and website experience.
Cross-Domain Tracking
We enable cross-subdomain tracking, which means your session data persists across
*.consuelohq.com subdomains. This allows us to maintain a consistent
understanding of your journey across our platform.
Local Storage & Cookies
We use localStorage and cookies to persist your preferences and session data. This includes:
- Cookies for tracking consent status
- LocalStorage for session continuity
- Cookies for cross-page analytics
Purpose of Processing
We use the data collected to:
- Understand how visitors interact with our website
- Identify areas for improvement in our product and user experience
- Analyze traffic patterns and user behavior
- Debug technical issues when errors occur
- Measure the effectiveness of our content and features
- Make data-driven decisions about product development
Legal Basis for Processing
Under GDPR, we rely on consent as our legal basis for processing your personal data through our analytics tools. You can withdraw your consent at any time by declining cookies or contacting us.
Under CCPA, we collect personal information for the business purposes described above. You have the right to know what information we collect, request deletion, and opt out of the sale of personal information (we do not sell personal information).
Data Retention
We retain analytics data for 12 months. Session recordings are retained for 90 days. After these periods, data is automatically deleted from our systems.
Opting Out
You can opt out of tracking at any time. When you first visit our website, you will see a cookie banner. Clicking "Decline" will prevent us from loading analytics and tracking your behavior. If you previously accepted cookies, you can clear your browser's cookies and localStorage to reset your consent.
GDPR Rights (EU/EEA Users)
If you are in the European Union or European Economic Area, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate personal data
- Erasure: Request deletion of your personal data
- Restrict processing: Limit how we use your data
- Data portability: Receive your data in a portable format
- Object: Object to processing of your personal data
- Withdraw consent: Withdraw consent at any time
To exercise these rights, contact us at [email protected]. We will respond within 30 days of receiving your request.
CCPA Rights (California Users)
If you are a California resident, you have the right to:
- Know: Request disclosure of what personal information we collect
- Delete: Request deletion of your personal information
- Opt-out: Opt out of the sale of personal information (we do not sell)
- Non-discrimination: Not be discriminated against for exercising your rights
We are required to disclose, at or before collection, the categories of personal information we collect and how we use it. We do not sell or share personal information for cross-context behavioral advertising.
Do Not Track
We currently do not respond to Do Not Track signals in your browser settings. If you wish to opt out of tracking, please use the cookie banner decline option or contact us.
Third-Party Processors
We share your data with:
- PostHog — our analytics provider, processes data on our behalf under a data processing agreement. PostHog does not sell your data or use it for their own purposes.
Legal Requirements
We may disclose your data if required by law, regulation, or legal process. This includes responding to valid requests from public authorities, including for national security or law enforcement purposes.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you of any such change in ownership.
We Do Not Sell Your Data
We do not sell, rent, or trade your personal information to third parties for their marketing purposes. Your data is used solely to improve our product and user experience.
Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes:
- Encryption of data in transit (HTTPS)
- Access controls and authentication
- Regular security reviews
However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.
International Data Transfers
PostHog processes data in the United States. If you are in the EU/EEA, we rely on Standard Contractual Clauses (SCCs) as approved by the European Commission to ensure adequate protection for cross-border transfers. PostHog has signed these clauses as part of their data processing agreement.
Contact Us
For questions about this privacy policy, to exercise your rights, or to report a privacy concern, please contact us:
Email: [email protected]
Changes to This Policy
We may update this privacy policy from time to time. When we make material changes, we will notify you by posting the updated policy on this page and updating the "Last updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.
We encourage you to review this policy periodically to stay informed about how we protect your data.
Effective Date
This privacy policy is effective as of March 2026.