Privacy Policy

CNCS Direct Privacy Policy

Effective Date and Last Updated: July 27, 2026

CN Consulting LLC, doing business as CNCS Direct (“CNCS Direct,” “we,” “us,” or “our”), respects your privacy and is committed to protecting personal information.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit www.cncsdirect.com, create an account, purchase or use our software or services, communicate with us, schedule an appointment, or interact with our AI, CRM, communications, website, marketing, automation, consulting, coaching, or support services collectively referred to as the “Services.”

By accessing or using the Services, you acknowledge the practices described in this Privacy Policy.

For privacy-related questions or requests, contact us at [email protected].

1. Scope of This Privacy Policy

This Privacy Policy applies to personal information collected by CNCS Direct through:

Our websites, landing pages, forms, and applications.

CNCS Direct software accounts and CRM services.

Purchases, subscriptions, appointments, coaching, consulting, and support.

Email, SMS, telephone, social media, and other communications with us.

AI assistants, AI voice agents, chatbots, call recordings, transcripts, and automations.

Events, workshops, promotions, affiliate relationships, and referral programs.

Cookies, analytics tools, advertising technologies, and similar technologies.

This Privacy Policy does not govern the independent privacy practices of our clients, third-party websites, connected applications, social media platforms, payment processors, or other services that we do not control.

2. Our Role When Processing Client Data

CNCS Direct clients may upload, import, collect, store, or process information about their customers, prospects, employees, members, vendors, event attendees, or other contacts through the Services.

For this Client Data, the CNCS Direct client generally determines:

What information is collected.

Why the information is collected.

Who receives communications.

How the information is used.

How long the information is retained.

What consent or legal authority applies.

In these situations, the client generally acts as the business, controller, or organization responsible for the information, while CNCS Direct generally acts as a service provider or processor operating on the client’s instructions.

If you received a text message, email, telephone call, AI voice call, form, or other communication from one of our clients, you should normally direct your privacy request or opt-out request to that client. We may assist the client with the request when appropriate or legally required.

CNCS Direct is not responsible for a client’s independent collection, use, disclosure, or communication practices.

3. Categories of Information We Collect

Depending on how you interact with us, we may collect the following categories of personal information.

3.1 Contact and Identification Information

This may include:

Name.

Email address.

Telephone number.

Mailing or business address.

Company name.

Job title.

Account username.

Contact preferences.

Social media profile information.

3.2 Account and Business Information

This may include:

Account identifiers.

Subscription plan.

User permissions.

Business details.

Industry information.

CRM records.

Calendar information.

Pipeline and opportunity information.

Support history.

Training participation.

Forms, surveys, and questionnaire responses.

Project instructions and approvals.

3.3 Payment and Transaction Information

This may include:

Billing name and address.

Payment method type.

Transaction history.

Subscription and renewal information.

Invoices.

Payment status.

Purchase details.

Payment information may be collected and processed directly by third-party payment processors. CNCS Direct generally does not receive or store complete payment-card numbers.

3.4 Communications Information

This may include:

Emails.

Text messages.

Telephone calls.

Support requests.

Chat messages.

Social media communications.

Appointment notes.

Call recordings.

Voicemail messages.

Communication preferences.

Opt-in and opt-out records.

3.5 AI and Voice-Agent Information

When AI or voice-agent features are used, we or our service providers may process:

Caller identification information.

Telephone numbers.

Call recordings.

Call transcripts.

AI chat history.

Prompts and responses.

Voice-agent interactions.

Conversation summaries.

Scheduling information.

Actions taken by an AI agent.

Usage and performance information.

Information contained in connected knowledge sources.

Call recording and transcription may be enabled or disabled depending on the applicable account, configuration, and client instructions.

3.6 Website, Device, and Internet Activity

This may include:

IP address.

Browser type.

Device type.

Operating system.

Device identifiers.

Referring website.

Pages visited.

Links clicked.

Date and time of access.

Approximate location derived from an IP address.

Login and account activity.

Cookie and advertising identifiers.

Website interaction and analytics information.

3.7 Content and Files

This may include:

Documents.

Images.

Videos.

Audio files.

Logos.

Marketing materials.

Website content.

Contact lists.

Forms.

Contracts.

Project files.

Other information uploaded to or created through the Services.

3.8 Information From Connected Services

If you connect a third-party service to CNCS Direct, we may receive information authorized through that connection.

Connected services may include:

Google accounts.

Google Workspace.

Social media accounts.

Advertising platforms.

Payment processors.

Calendar platforms.

Email providers.

Domain registrars.

Telephone and messaging providers.

Other software integrations.

The information received depends on the permissions you authorize and the third party’s privacy settings.

3.9 Sensitive Information

Certain information may be considered sensitive under applicable law, including account credentials, financial information, precise location, health information, communication contents, or government identifiers.

You should not submit sensitive information unless it is reasonably necessary, permitted by law, and supported by the appropriate CNCS Direct subscription and security configuration.

4. Sources of Personal Information

We may collect personal information from:

You directly.

Your employer, organization, or account administrator.

CNCS Direct clients using the Services.

Forms, landing pages, websites, or calendars.

Affiliates and referral partners.

Social media and connected accounts.

Payment processors.

Communications providers.

Advertising and analytics providers.

Publicly available sources.

Business partners and service providers.

Cookies and similar technologies.

AI, CRM, automation, and communication tools.

5. How We Use Personal Information

We may use personal information to:

Create, operate, secure, and manage accounts.

Provide CRM, communication, automation, AI, website, hosting, consulting, coaching, and support services.

Process payments, subscriptions, purchases, renewals, refunds, and invoices.

Provide customer service and respond to inquiries.

Schedule and manage appointments.

Configure workflows, automations, websites, forms, calendars, and integrations.

Send transactional and service-related communications.

Send marketing communications where permitted.

Personalize content and user experiences.

Measure website, product, and marketing performance.

Conduct analytics and improve our Services.

Detect and prevent fraud, abuse, security incidents, and unauthorized access.

Maintain records of consent, communication preferences, and opt-out requests.

Enforce our agreements and policies.

Comply with legal, regulatory, tax, accounting, and reporting obligations.

Investigate disputes and protect our legal rights.

Support mergers, acquisitions, financing, restructuring, or business transfers.

Carry out other purposes disclosed at the time information is collected.

We may also use aggregated or de-identified information that cannot reasonably be linked to an individual for analytics, service improvement, research, reporting, and other lawful business purposes.

6. AI Data Use

Information submitted to AI features may be processed by CNCS Direct and third-party AI providers to generate responses, complete requested actions, provide voice or chatbot functionality, troubleshoot problems, prevent misuse, and improve performance.

AI outputs may contain inaccuracies. Clients and users are responsible for reviewing AI-generated content and actions before relying on, publishing, or using them.

CNCS Direct does not authorize undisclosed use of Client Data to train general-purpose AI models. However, third-party AI providers may process information according to their contracts, configurations, and privacy terms.

Clients should not submit confidential, regulated, or sensitive information to an AI feature unless the feature is authorized and appropriately configured for that information.

7. Call Recordings, Transcripts, and Communications

Calls or conversations may be recorded or transcribed when recording or transcription is enabled.

Recordings and transcripts may be used to:

Provide requested Services.

Operate AI voice agents.

Document customer interactions.

Improve service quality.

Train authorized personnel.

Troubleshoot technical issues.

Maintain security.

Resolve disputes.

Comply with legal obligations.

Clients who enable call recording or transcription are responsible for providing legally required notices and obtaining all necessary consent.

The availability of a recording feature does not mean its use is lawful in every state or situation.

8. Text Messages and Telephone Communications

If you provide a telephone number or consent to communications, CNCS Direct or a CNCS Direct client may send service-related or marketing communications as permitted by law.

Message and data rates may apply.

Consent to receive marketing text messages is not a condition of purchasing goods or services unless expressly permitted by law.

You may opt out of marketing text messages by replying STOP or following the instructions included in the message. You may receive a final confirmation message.

You may request assistance by replying HELP where supported.

Opting out of marketing communications does not necessarily stop transactional, security, billing, appointment, or legally required communications.

If the message was sent by a CNCS Direct client, that client is responsible for honoring and maintaining the applicable opt-out request. CNCS Direct may process the request on the client’s behalf through the Services.

9. Email Communications

We may send transactional, account, security, billing, educational, service-related, or marketing emails.

You may unsubscribe from marketing emails by using the unsubscribe link in the email or contacting us.

Unsubscribing from marketing emails does not prevent us from sending necessary account, billing, security, legal, or service-related communications.

10. Cookies and Similar Technologies

We and our service providers may use cookies, pixels, local storage, session-replay tools, analytics technologies, and similar technologies.

These technologies may be used to:

Operate websites and account features.

Remember preferences.

Maintain login sessions.

Protect account security.

Understand website traffic.

Measure marketing performance.

Improve website functionality.

Personalize content.

Deliver or measure advertising.

Cookies may include:

Essential cookies required for website and account operation.

Functional cookies used to remember settings.

Analytics cookies used to understand website usage.

Advertising cookies used to measure or personalize advertising.

You may be able to manage cookies through your browser settings or a cookie preference tool when available.

Disabling cookies may prevent certain features from functioning properly.

Where required by law, we will recognize applicable browser-based opt-out preference signals, such as Global Privacy Control, when we can reasonably detect and apply them.

11. Targeted Advertising and Privacy Choices

We may use advertising and analytics providers to measure campaigns, understand website activity, or deliver advertising.

Some privacy laws may define certain advertising-related disclosures as “sharing,” “targeted advertising,” or a “sale,” even when no money is exchanged for personal information.

CNCS Direct does not sell personal information for money.

Depending on the technologies used on our website, we may disclose identifiers, device information, cookie identifiers, or internet activity to advertising or analytics providers for marketing measurement or cross-context behavioral advertising.

Where required by applicable law, you may opt out by:

Using the cookie or privacy preference tool available on our website.

Enabling a legally recognized browser-based opt-out preference signal.

Contacting us at [email protected].

We do not knowingly sell or share the personal information of individuals under sixteen (16) years of age.

12. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients.

12.1 Service Providers and Subprocessors

We may disclose information to vendors that assist with:

CRM services.

Website hosting.

Cloud storage.

Email delivery.

SMS and telephone communications.

Artificial intelligence.

Call recording and transcription.

Payment processing.

Analytics.

Advertising.

Customer support.

Cybersecurity.

Domain registration.

Google Workspace.

Calendar and appointment services.

Professional and administrative services.

These providers may process information only as permitted by their contracts, configurations, privacy terms, and applicable law.

12.2 CNCS Direct Clients

When you interact with a CNCS Direct client through a form, website, calendar, campaign, telephone call, email, text message, AI agent, or other feature, information may be disclosed to that client.

The client’s privacy policy and practices may also apply.

12.3 Affiliates and Referral Partners

If you sign up through an affiliate or referral partner, limited information may be disclosed for referral tracking, commission calculation, onboarding, and support.

This may include your name, company, email address, plan, purchase status, or other information reasonably necessary to manage the referral relationship.

12.4 Professional Advisors

We may disclose information to attorneys, accountants, auditors, insurers, consultants, and other professional advisors when reasonably necessary.

12.5 Legal and Safety Purposes

We may disclose information when we reasonably believe it is necessary to:

Comply with a law, subpoena, court order, or government request.

Protect the rights, property, or safety of CNCS Direct, our clients, users, or others.

Investigate fraud, abuse, security incidents, or policy violations.

Enforce contracts and legal rights.

Respond to an emergency.

12.6 Business Transfers

Personal information may be disclosed or transferred as part of a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or other business transaction.

13. Third-Party Platforms and Integrations

Our Services may contain links to or integrations with third-party services.

Third-party services may collect information directly from you and process it according to their own privacy policies and terms.

CNCS Direct is not responsible for the privacy, security, availability, or data practices of independent third parties.

We encourage you to review the privacy policies and permissions of connected services before enabling an integration.

14. Social Media and Third-Party Logins

If you interact with us through social media or use a third-party login, we may receive information consistent with your account settings and the permissions you authorize.

This may include:

Name.

Email address.

Profile photograph.

Account identifier.

Public profile information.

Social media page information.

Access tokens or integration permissions.

You may be able to modify or revoke these permissions through the applicable third-party platform.

15. Payment Processing

Payments may be processed through third-party payment processors.

Payment processors may collect payment-card information, billing information, fraud-prevention data, and transaction details directly from you.

Their privacy policies and terms govern their processing of payment information.

CNCS Direct may receive transaction identifiers, payment status, payment method type, billing details, and other information needed to manage your purchase or subscription.

16. Data Retention

We retain personal information for as long as reasonably necessary to:

Provide the Services.

Maintain active accounts.

Complete transactions.

Fulfill contracts.

Provide support.

Maintain consent and opt-out records.

Protect security.

Prevent fraud and abuse.

Resolve disputes.

Enforce agreements.

Satisfy tax, accounting, legal, and regulatory requirements.

Retention periods vary based on the type of information, the purpose for which it was collected, the sensitivity of the information, contractual requirements, technical needs, and legal obligations.

Examples include:

Account information may be retained while the account is active and for a reasonable period afterward.

Transaction and billing records may be retained as required for tax, accounting, dispute, and legal purposes.

Support and business communications may be retained for operational, training, security, and dispute-resolution purposes.

Call recordings, transcripts, and AI interactions may be retained according to the applicable service configuration, client instructions, troubleshooting requirements, and legal obligations.

Consent and opt-out records may be retained to demonstrate compliance.

Backup copies may remain for a limited period after information is deleted from active systems.

When information is no longer reasonably needed, we may delete, anonymize, or securely dispose of it, subject to technical and legal limitations.

17. Data Security

We use commercially reasonable administrative, technical, and organizational safeguards designed to protect personal information.

These safeguards may include:

Access controls.

Authentication measures.

User-permission controls.

Vendor management.

Monitoring.

Encryption where appropriate and available.

Security policies and procedures.

Incident-response practices.

No system, transmission method, storage platform, or security measure is completely secure.

We cannot guarantee that personal information will never be accessed, used, altered, disclosed, or destroyed without authorization.

You are responsible for protecting account credentials, controlling user access, using multifactor authentication where available, and promptly notifying us of suspected unauthorized activity.

18. International Data Transfers

CNCS Direct and its service providers may process or store information in the United States and other countries.

Privacy and data-protection laws in those countries may differ from the laws where you live.

Where required, we use legally recognized safeguards for international transfers.

By using the Services, you understand that information may be processed outside your state, province, or country, subject to applicable law.

19. HIPAA and Protected Health Information

CNCS Direct is not a HIPAA-covered entity by default.

HIPAA-related functionality is available only through an active HIPAA-enabled subscription and, when required, an executed Business Associate Agreement.

You may not upload or process protected health information through CNCS Direct unless:

The appropriate HIPAA-enabled subscription is active.

The required Business Associate Agreement has been executed.

The account and applicable features are properly configured.

Your use is otherwise permitted by law.

If the HIPAA-enabled subscription ends, the applicable Business Associate Agreement terminates according to its terms, except for obligations that legally survive termination.

Clients remain responsible for determining whether HIPAA applies to them, configuring access, training users, maintaining required policies, and complying with their obligations as covered entities or business associates.

20. Children’s Privacy

The Services are intended for businesses and adults and are not directed to children under eighteen (18).

We do not knowingly collect personal information directly from children under thirteen (13).

If you believe a child has provided personal information to us without appropriate authorization, contact us at [email protected].

We will review the request and take appropriate action as required by law.

Clients are responsible for ensuring that their use of the Services involving minors complies with applicable laws and includes any required parental or guardian consent.

21. Your Privacy Rights

Depending on where you live and subject to applicable law, you may have the right to:

Confirm whether we process your personal information.

Access personal information we maintain about you.

Request specific pieces or categories of personal information.

Correct inaccurate personal information.

Request deletion of personal information.

Obtain a portable copy of certain information.

Restrict or object to certain processing.

Withdraw consent where processing is based on consent.

Opt out of targeted advertising.

Opt out of the sale or sharing of personal information.

Limit certain uses of sensitive personal information.

Appeal the denial of a privacy request.

Receive equal service and not be discriminated against for exercising a privacy right.

These rights are not absolute. We may deny or limit a request when permitted by law, including when information must be retained for security, fraud prevention, legal compliance, accounting, contractual, or dispute-resolution purposes.

22. California Privacy Rights

If the California Consumer Privacy Act or California Privacy Rights Act applies to CNCS Direct’s processing of your information, California residents may have the right to:

Know the categories and specific pieces of personal information collected.

Know the categories of sources from which information was collected.

Know the business or commercial purposes for collecting, using, selling, or sharing information.

Know the categories of third parties to whom information was disclosed.

Request deletion.

Request correction.

Opt out of the sale or sharing of personal information.

Limit certain uses or disclosures of sensitive personal information.

Receive equal service and pricing without unlawful discrimination.

For purposes of California law, CNCS Direct does not sell personal information for money.

Certain advertising or analytics disclosures may be considered “sharing” for cross-context behavioral advertising. Where legally required, California residents may opt out through our available privacy controls, a recognized opt-out preference signal, or by contacting us.

23. Exercising Your Privacy Rights

To submit a privacy request, contact us at:

Email: [email protected]

Mail:

CN Consulting LLC d/b/a CNCS Direct
4864 South Yale Avenue
Tulsa, Oklahoma 74135

Please include:

Your name.

Your email address.

Your relationship with CNCS Direct.

The right you wish to exercise.

Enough information for us to identify the applicable account or records.

We may need to verify your identity before completing a request. Verification may require matching information you provide with information already maintained by us.

We will use verification information only to process and document the request.

You may use an authorized agent where permitted by law. We may request documentation showing the agent’s authority and may verify your identity directly.

We will respond within the period required by applicable law.

If we deny a request, you may have the right to appeal by replying to our decision or contacting us at [email protected] with “Privacy Appeal” in the subject line.

24. Client-Controlled Data Requests

If CNCS Direct processes your information on behalf of one of our clients, we may direct your request to that client.

The client is generally responsible for deciding how to respond to requests involving Client Data.

CNCS Direct may assist the client as required by contract or law but may not be authorized to independently delete, change, or disclose information controlled by the client.

25. Do-Not-Call and Do-Not-Contact Requests

CNCS Direct honors legally valid do-not-call, unsubscribe, and do-not-contact requests relating to communications sent directly by CNCS Direct.

If a communication was sent by a CNCS Direct client, that client is responsible for maintaining and honoring the request.

You may use the opt-out method included in the communication or contact the sender directly.

You may also contact [email protected] if you need assistance identifying the responsible sender or processing an opt-out through the Services.

26. Tax and Compliance Features

If you use tax calculation, payment, messaging compliance, consent-management, or other compliance-related features, you remain responsible for determining your legal obligations and verifying the accuracy of the results.

These features are tools and do not constitute legal, tax, accounting, or regulatory advice.

27. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, business practices, technology, vendors, or legal requirements.

The updated version will be posted with a revised effective date.

When required by law, we may provide additional notice by email, through the Services, or by another appropriate method.

Your continued use of the Services after an updated Privacy Policy becomes effective constitutes acknowledgment of the revised policy.

28. Contact Information

CN Consulting LLC d/b/a CNCS Direct

4864 South Yale Avenue
Tulsa, Oklahoma 74135

Email: [email protected]

Website: www.cncsdirect.com