Taft Consulting

Privacy Policy

This is a draft policy prepared for review. It should be reviewed by legal counsel before being treated as binding.

Last updated 2026-09-18.

Who we are

This site and the dealer portal at portal.taft-consulting.com are operated by Taft Consulting, 1580 N Batavia, Suite 2, Orange, CA. If you have a question about this policy or about your own data, write to [email protected].

What we collect

We collect only what running the site, the dealer portal and our own billing require:

  • Account information. The email address you sign in with, and, optionally, a name and phone number if you add them to your profile. Signing in uses either a magic link sent to your email or a password with a required second factor (an authenticator app or a backup code) — we do not offer, and this policy does not describe, sign-in through Google, Facebook or any other third party.
  • Dealer/company information. If you represent a Control4 dealer, we hold your company name, contact name and phone number, a mailing address, and the billing country and state you give us (used only to work out which sales-tax jurisdiction applies — see below).
  • Billing address and jurisdiction. We keep a billing country/region so purchases are taxed correctly. We do not store card numbers, card expiry dates or CVV codes on our own servers — see "Payments" below.
  • Support requests. Tickets and messages you send us, so a case has context the next time you write in.
  • Technical and log data. IP addresses and session records used for signing you in securely, rate-limiting abusive login attempts, and diagnosing problems.
  • Site analytics. See "Analytics and session replay" below.

We do not knowingly hold personal details about the end users in a home a dealer services — a site in our system is identified by a dealer-chosen label and the controller's own hardware identifier, not by a homeowner's name or address.

Payments

All card payments — one-off driver licence purchases and recurring service-plan billing on a card kept on file — are processed by Square. When you enter a card number, it goes directly to Square; our own servers never receive or store it. We keep records of what was charged, when, and the outcome of the charge, but the instrument itself is Square's to hold, under Square's own privacy policy and PCI-compliant infrastructure.

Analytics and session replay

We use PostHog for product analytics, which includes session replay — a recording of how a page was used (mouse movement, clicks, scrolling and on-screen input) that lets us see what a real visit looked like when we're trying to understand a problem or a confusing page. This is more than a page-view count, and we are naming it specifically rather than folding it into a generic "we use analytics" line. Fields that are clearly sensitive (such as password inputs) are masked before a recording is captured. This policy describes PostHog's role in the product truthfully; it does not itself grant consent — wherever this site presents a cookie/analytics choice, that choice governs whether analytics and session replay run for you.

Why we use this data

  • To operate your account, your company's dealer portal access, and licence grants.
  • To process payments and calculate the tax owed on a sale.
  • To respond to support tickets and messages.
  • To secure sign-in and detect abusive login activity.
  • To understand how the site is used and fix what doesn't work.

Who else sees it

We share data with the vendors that make this possible — Square for payment processing, PostHog for analytics — and with nobody else for advertising or resale. We do not sell personal data.

How long we keep it

Licensing, billing and audit records are kept for as long as the account is active and for a period after, because a licence dispute or a tax question can reach back to a sale that happened years earlier. Support tickets and account records are kept for the life of the account.

Accessing, exporting or deleting your data

We do not currently offer a self-service "export my data" or "delete my account" button. If you want a copy of the personal data we hold about you, or want your account closed and its personal data removed where we are not required to keep it (for example, billing records we must retain for tax purposes), write to [email protected] and we will handle the request by hand.

Changes

If this policy changes in a way that matters, we'll update the date at the top of this page.