Privacy Policy

Last updated: October 5, 2026

1. Data Controller

Otospex Solutions LLC (doing business as KonvertMax) 1209 Mountain Road PL NE, STE R Albuquerque, NM 87110, United States Email: hello@konvertmax.com

2. What Data We Collect

We collect the following categories of personal data:

• Contact form submissions: Name, email address, phone number (optional), selected service, budget range, message content, and whether you arrived from one of our free audit tools.
• Audit tool submissions: When you request the full report from one of our free website audit tools, we collect your name, email address, the website address you asked us to check, the resulting score, and which tool you used.
• Advertising attribution: If you accept cookies and arrived from an advertisement, we store the campaign parameters in that link (utm_source, utm_medium, utm_campaign, utm_content, utm_term, fbclid, gclid) so we can tell which campaign brought you here. Nothing is stored if you decline cookies.
• Usage data: Pages visited, time on page, referral source, browser type, device type, and IP address (anonymized).
• Cookies: See Section 5 below for details on cookies and tracking technologies.

We do not store the audited website's content. Each audit fetches the page, runs the checks and discards the page.

3. Legal Basis for Processing (GDPR Art. 6)

• Consent (Art. 6(1)(a)): Analytics and marketing cookies are only set after you provide explicit consent via our cookie banner.
• Contractual necessity (Art. 6(1)(b)): Processing contact form data to respond to your inquiry and provide the requested services.
• Legitimate interest (Art. 6(1)(f)): Operating and securing our website, analyzing aggregated usage patterns to improve our services.

4. Contact Form and Audit Tool Data Handling

When you submit our contact form, your data is transmitted to two data processors acting on our behalf:

• Brevo (Sendinblue SAS, France) — stores your details as a contact and sends transactional email. Privacy policy.
• LeadGenPal — receives the enquiry so we can track and respond to it.

When you request a report from one of our free audit tools, Brevo sends you that report by email and stores your details, the audited address, the score and the tool used, so we can follow up about the findings.

We retain contact form and audit tool data for the duration of the business relationship or inquiry, and delete it upon request or after 12 months of inactivity.

Legal basis for the audit tools: consent (Art. 6(1)(a)). You give it by ticking the box on the form; you can withdraw it at any time by unsubscribing from any email we send you, or by writing to hello@konvertmax.com.

5. Cookies & Tracking Technologies

Our website uses cookies — small text files stored on your device — to improve your experience and analyze site usage.

Optional audit progress

If you select “Remember my progress for 7 days” in the homepage check, a first-party cookie named km_audit_progress_{locale} links to a snapshot in your browser's local storage under the same name. This stores the current step, business details you enter and public audit results, so you can resume on this browser. It does not save your personal contact fields, marketing consent or reCAPTCHA tokens. The snapshot expires after 7 days without an update and is removed when you next open the homepage after expiry. This choice is separate from marketing cookies. Uncheck the option or use “Delete saved progress” in the check to remove it; rejecting cookies in Cookie settings also clears it. Without this option, closing and reopening the modal only retains progress while the page remains loaded.

Essential Cookies

These are necessary for the website to function (e.g., remembering your cookie consent preference). They do not require consent.

• km_cookie_consent — Stores your cookie consent decision, so we do not ask again on every page. Stored in your browser's local storage until you clear it or change your decision.

Fonts

Our webfonts are served from our own domain. They are not loaded from Google Fonts or any other third-party font service, so displaying this page transmits your IP address to no one but us.

Analytics & Marketing Cookies

These are only set after you accept cookies via our cookie banner.

• Google Analytics 4 (GA4): Collects anonymized usage data. Provider: Google Ireland Limited. Privacy Policy.
• Facebook Pixel: Tracks conversions from Facebook ads. Provider: Meta Platforms Ireland Limited. Privacy Policy.
• Google Ads: Conversion tracking for Google advertising campaigns. Provider: Google Ireland Limited.

All analytics and marketing tools are loaded via Google Tag Manager (GTM), which only activates after explicit cookie consent.

Advertising Attribution

If you accept cookies, the campaign parameters from the link you arrived on are kept in your browser's session storage under km_attribution and cleared when you close the tab. If you later submit a form, they are sent to Brevo alongside your details so we can tell which campaign reached you. Only the first link you arrive on is recorded. If you decline cookies, nothing is stored and nothing is sent.

Managing Your Cookie Preferences

Select Cookie settings in the footer of any page. You can change your decision as often as you like, and withdrawing is exactly as easy as giving consent.

Withdrawing does more than stop future collection: we delete the analytics and advertising cookies already set, clear any stored advertising attribution, and reload the page without the tracking scripts.

6. Third-Party Services

Everything in the "Yes" rows loads through Google Tag Manager, which is not placed on the page at all until you accept cookies.

Google reCAPTCHA is loaded only when you submit a protected form, not merely when you view a page. Its use is subject to Google's Privacy Policy and Terms of Service.

When you run an audit, DataForSEO visits the website address you submit, renders the publicly accessible page and returns the page analysis and technical measurements to us. DataForSEO states that the Live API tasks used for these checks are not retained after their results are returned. Its processing is governed by the DataForSEO Privacy Policy and Data Processing Agreement.

The TidyCal scheduler is loaded only after you select View available times. Scheduling is provided by Sumo Group Inc. (United States) under TidyCal's Privacy Policy and Data Processing Agreement. Its DPA provides for EU Standard Contractual Clauses where required for international transfers.

To reduce waiting, your browser may download the embed script from TidyCal's content delivery network when you hover over or focus a booking link. This downloads static code without executing it or opening the calendar.

Webfonts are served from our own domain and appear in no row above, because they involve no third party.

Our hosting provider, Cloudflare, processes your IP address to deliver the site and protect it from abuse. This is necessary to operate the website (Art. 6(1)(f)) and cannot be declined while still viewing the site.

Where data is transferred outside the EEA, appropriate safeguards are in place, including Standard Contractual Clauses (SCCs).

7. Your Rights (Data Subject Rights)

Under the GDPR, you have the following rights:

• Right of Access (Art. 15): Request a copy of the personal data we hold about you.
• Right to Rectification (Art. 16): Request correction of inaccurate personal data.
• Right to Erasure (Art. 17): Request deletion of your personal data ("right to be forgotten").
• Right to Restriction (Art. 18): Request restriction of processing in certain circumstances.
• Right to Data Portability (Art. 20): Receive your data in a machine-readable format.
• Right to Object (Art. 21): Object to processing based on legitimate interests.
• Right to Withdraw Consent (Art. 7(3)): Withdraw consent at any time without affecting prior processing.

To exercise any of these rights, contact us at hello@konvertmax.com. We will respond within 30 days.

8. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. As our services target users in the EU, you may contact the supervisory authority in your EU member state of residence.

9. Changes to This Policy

We may update this privacy policy from time to time. The "Last updated" date at the top indicates the latest revision.