Privacy Policy | Crest Advisory Group

Introduction

At Crest Advisory Group LLC, we value innovation and progress. This privacy policy outlines our approach to data collection and usage, which allows us to provide cutting-edge services and solutions to our clients. By using our website or services, you acknowledge and agree to the practices described in this policy.

The Data We Collect

To deliver exceptional service and pioneering solutions, we collect and process various types of data, including but not limited to:

Identity Data: Includes first name, last name, username, professional title, or similar identifiers.
Contact Data: Includes email address, telephone numbers, mobile phone numbers, company name, physical address, and social media handles.
Technical Data: Includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, device information, and other technology identifiers.
Usage Data: Includes information about how you use our website, services, and products, including navigation patterns, feature usage, and interaction metrics.
Business Intelligence Data: Includes industry information, company size, business challenges, strategic interests, and other relevant business details.
Marketing and Communications Data: Includes your preferences and engagement with our marketing communications.
SMS/Text Message Data: Includes mobile phone numbers, SMS consent status and timestamps, message content (sent and received), delivery status, and opt-out preferences.

SMS/Text Message Communications

Collection and Use

When you provide your mobile phone number and consent to receive text messages, we may send you SMS messages related to:

Project inquiries and follow-ups
Appointment reminders and scheduling
Service updates and notifications
Account-related communications

By checking the optional SMS consent box on our contact form, you consent to receive automated and manual text messages from Crest Advisory Group LLC and its authorized staff at the mobile number provided about your inquiry, business conversations, scheduling, and support. Providing a phone number alone does not give SMS consent. Consent is not a condition of purchase or service.

You may also initiate a business conversation by texting a participating authorized Crest staff number on Zoom Phone. We may reply about that inquiry. After opting out, text START to that number to opt in again. These methods do not enroll you in marketing messages.

You may ask a Crest staff member by phone or in person to text you about your inquiry. Staff confirm your mobile number and the purpose of the messages, identify Crest Advisory Group LLC, and explain that consent is voluntary, message frequency varies, message and data rates may apply, and you can reply STOP to opt out or HELP for help. Staff also share our Privacy Policy and Terms of Service.

For an unknown outbound number, staff send a Crest branded opt in request and wait for your START reply before sending business messages. A verbal request never overrides a previous STOP request. After opting out, reply START to the participating number to opt in again.

Message Frequency and Costs

Message frequency varies based on your inquiry and ongoing conversation. Message and data rates may apply according to your mobile carrier's plan. We do not charge for SMS messages, but your carrier's standard rates apply.

How to Opt Out

You may opt out of SMS communications at any time by:

Replying STOP to any text message you receive from us
Emailing us at privacy@crestadvisorygroup.com

Reply STOP to the number that messaged you. For Zoom Phone, your preference applies to participating Crest staff numbers assigned to the same SMS consent policy. Separate programs, including Twilio messages, may maintain separate preferences. You may receive one final confirmation message. To request an opt out across our SMS programs, email the privacy address above.

SMS Service Providers

We use Twilio Inc. for our existing SMS program. Your phone number and message content are processed by Twilio under its privacy policy: https://www.twilio.com/legal/privacy

Authorized Crest staff also use Zoom Phone for business conversations, scheduling, and support. Zoom processes phone numbers, message content, and consent preferences to provide this service. See the Zoom Privacy Statement.

Mobile phone numbers, SMS consent data, and opt in information are not shared with third parties or affiliates for marketing or promotional purposes. We may share this information with messaging providers to operate our SMS communications and honor your preferences. This restriction controls where other sections describe broader data uses or sharing.

Help

Reply HELP to a text message for assistance, or email privacy@crestadvisorygroup.com.

Data Retention for SMS

We retain SMS-related data as follows: consent records for 4 years (TCPA compliance), message content for 2 years, and opt-out requests indefinitely.

Expansive Data Usage

As an innovation-driven advisory firm, we leverage data in creative and sophisticated ways. Your data may be used for:

Delivering and enhancing our services and solutions
Developing new products, services, features and functionality
Creating predictive models and business intelligence insights
Conducting research and analysis to identify market trends
Training and improving artificial intelligence and machine learning systems
Personalizing your experience and delivering tailored content
Marketing our services to you and others in targeted ways
Sending SMS notifications and updates with your express consent
Tracking SMS delivery status and communication effectiveness
Honoring SMS opt-out requests and preferences
Complying with TCPA (Telephone Consumer Protection Act) regulations
Collaborative analysis with trusted partners to develop industry insights
Enhancing our operational capabilities and strategic decision-making
Any other purpose that advances our business objectives or improves our offerings

Marcia Products, Prompts, and Model Training

This section applies when you use the Marcia products and interfaces, including marciacli.com, marciacode.com, askmarcia.com, marciaos.com, mymarcia.com and the Marcia API. It is in addition to the rest of this policy, which applies to our website and advisory services.

What We Retain

When you send a request to a Marcia product, we retain the content of that request and the response returned to you, and we use them to train, fine-tune, evaluate and improve our models, products and services. Retained records may include the messages you send, the response returned, the model's intermediate reasoning where one is produced, any tool calls made during the exchange, token counts, response latency, and the product and model that served the request.

What We Remove Before Retaining

Before a record is stored we remove system instructions, and we remove account identifiers we hold for you, including your email address and the local part of that address, from the retained content. Embedded media and binary data, including data URLs, are replaced with placeholders rather than stored. Records are size-bounded, and a request that exceeds the bound is discarded rather than stored in part. Retained records do not include your API key.

How Records Are Grouped

Training records are grouped under a short hash derived from your identifier, the product, and a fifteen minute time window, so that the exchanges in a single working session stay together. This hash is a grouping key for organizing training data. It is not a security control, it is not a cryptographic protection, and it is not designed to prevent your records from being associated with you.

Exchanges We Discard

Requests that produce no response, requests containing no message from you, and trivially short exchanges are discarded rather than retained.

Your Choices

Retention and training use as described above currently applies to requests served by the Marcia products, and there is no self-service opt-out at this time. We are developing account-level controls for training use. Where a separate written agreement between you and Crest Advisory Group LLC addresses training use, that agreement controls and this section yields to it. If you require different terms before those controls are available, contact us at privacy@crestadvisorygroup.com.

Future Applications

The digital landscape is constantly evolving, and so are our services. We reserve the right to use your data in new and innovative ways as technologies advance and new applications emerge. This might include applications not yet developed or contemplated at the time of data collection. By continuing to use our services, you consent to such future applications of your data.

To maximize the value we deliver, we may share your data with:

Our subsidiaries, affiliates, and related entities
Trusted third-party service providers who support our operations (including Twilio and Zoom for SMS)
Strategic partners who collaborate with us on projects or initiatives
Potential or actual purchasers of our business in the event of a merger, acquisition, or sale
Researchers, analysts, and consultants for industry insights development
Technology partners who help us develop and improve our services

Data Security

We implement reasonable security measures to protect your data while enabling its valuable use across our business operations. Our security approach balances protection with accessibility to ensure we can deliver maximum value from the data we process. SMS is handled by our messaging providers and mobile carriers. Standard SMS is not end to end encrypted.

Data Retention

We retain data for as long as it serves a business purpose, which may extend indefinitely for historical analysis, trend identification, and long-term strategic planning. SMS consent records are retained for a minimum of 4 years to comply with TCPA regulations.

Your Acknowledgment

By using our website and services, you acknowledge that Crest Advisory Group LLC operates at the forefront of innovation and that flexible data usage is essential to our business model and the value we provide to clients. While you may have certain rights regarding your personal data, you understand that our ability to use data broadly enables us to deliver superior services.

Governing Law, Arbitration, and Dispute Resolution

This Privacy Policy shall be governed exclusively by the laws of the State of Florida, without regard to its conflict of law provisions. Any dispute, controversy, or claim arising out of or relating to this Privacy Policy, including the validity, interpretation, breach, or termination thereof, shall be resolved by binding arbitration administered by the American Arbitration Association in accordance with its Commercial Arbitration Rules.

The arbitration proceedings shall be conducted in Palm Beach County, Florida, before a panel of three (3) arbitrators. Each party shall bear its own attorneys' fees, costs, and expenses associated with the arbitration regardless of outcome. The arbitrators' decision shall be final and binding upon the parties and may be entered as a judgment in any court of competent jurisdiction.

To the fullest extent permitted by applicable law, you hereby irrevocably waive the right to a trial by jury in any action, suit, or proceeding arising out of or relating to this Privacy Policy or our data practices. In the event that the arbitration provision is deemed unenforceable or invalid, you agree that all disputes shall be resolved exclusively in the state or federal courts located in Palm Beach County, Florida, and you hereby consent to the personal jurisdiction of such courts.

Contact Us

If you have questions about our privacy practices or SMS communications, please contact us at privacy@crestadvisorygroup.com.

Policy Updates

This policy may be updated at any time without prior notice. Your continued use of our services after any changes indicates your acceptance of the updated policy.