Privacy Policy

1. Who We Are

Rise Above 360 is a service operated by Image Forward LLC, based in Tampa, FL, United States. We provide internet presence management software, including the AI 360 Search Visibility WordPress plugin and the Rise Above 360 dashboard at riseabove360.com.

Questions about this policy: [email protected]

2. Information We Collect

From dashboard users (agency/admin accounts):

• Name and email address (used for account login)
• Business information entered into the Brand Guide (business name, address, phone, hours, social links)
• Google Business Profile data accessed via OAuth (location info, review data)
• Payment information is processed by Stripe and not stored on our servers

From WordPress sites with the AI 360 plugin installed:

• Site domain and WordPress version (for plugin registration)
• Anonymized visitor event data (page views, AI referral source, session hash — no personally identifiable information)
• Contact form submissions (name, email, phone, message) forwarded from the site
• Keyword ranking data from Google Search (via Serper.dev)

Automatically collected:

• IP address and browser user-agent (for security and abuse prevention)
• Log data (request timestamps, error logs) retained for 30 days

3. How We Use Your Information

• To operate and improve the Rise Above 360 dashboard and plugin
• To generate AI-assisted SEO content, schema markup, and reports for your site
• To track keyword positions and send rank-change notifications
• To sync your Google Business Profile data for display in your dashboard
• To send transactional emails (account notices, monthly reports) via Resend
• To send SMS notifications if you have opted in (see Section 7)
• To detect and prevent fraudulent or abusive use of the service

We do not sell your personal data to third parties. We do not use your data to train AI models without your explicit consent.

4. Third-Party Services

We use the following third-party services to operate the platform:

5. Google API Data

Rise Above 360 uses Google OAuth to access your Google Business Profile data. Access is limited to the business.manage scope, which allows us to read your business location, reviews, and profile information for display in your dashboard.

We store your Google OAuth refresh token in encrypted form (AES-256-GCM) and use it only to refresh your GBP data on your behalf. We do not access, share, or use your Google data for any purpose other than displaying it to you in your dashboard. You may disconnect Google access at any time from your site settings.

Our use of Google API data complies with the Google API Services User Data Policy, including the Limited Use requirements.

6. Data Retention

• Account data: retained while your account is active; deleted within 30 days of account closure on request
• Analytics events: retained for 12 months, then purged
• Keyword ranking history: retained for 24 months
• Contact form submissions: retained for 12 months
• Server logs: retained for 30 days

7. SMS Communications

If you provide a mobile phone number and opt in to SMS notifications, Rise Above 360 may send you transactional text messages such as rank-change alerts, audit completion notices, or account notifications.

• Consent: SMS messages are sent only to users who have explicitly opted in
• Frequency: Message frequency varies based on activity; typically 2–8 messages per month
• Opt-out: Reply STOP at any time to unsubscribe. Reply HELP for support
• Carriers: Message and data rates may apply. Supported carriers include all major US carriers
• No sharing: Your phone number is never sold or shared with third parties for marketing

SMS services are provided by Twilio. See Twilio's Privacy Policy.

8. Your Rights

You may request at any time:

• Access — a copy of the personal data we hold about you
• Correction — correction of inaccurate data
• Deletion — deletion of your account and associated data
• Portability — your data in machine-readable format
• Objection — to stop processing your data for specific purposes

To exercise any right, email [email protected]. We will respond within 30 days.

9. Cookies

The Rise Above 360 dashboard uses session cookies for authentication (NextAuth.js). We do not use advertising cookies or cross-site tracking. The AI 360 plugin installed on client sites does not set any cookies on end-user browsers.

10. Security

All data is transmitted over HTTPS. OAuth tokens are encrypted at rest using AES-256-GCM. We use Fly.io's private networking for internal service communication. We perform regular security reviews and will notify affected users within 72 hours of becoming aware of a data breach.

11. Children

Rise Above 360 is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has submitted data, contact us and we will delete it promptly.

12. Changes to This Policy

We may update this policy periodically. We will post the new policy on this page with an updated effective date. For material changes, we will notify registered users by email at least 14 days before the change takes effect.

13. Contact

Image Forward LLC d/b/a Rise Above 360
Tampa, FL, United States
[email protected]