ManageMyDirectory.com Privacy Policy

Last updated: October 4, 2026.

See also: ManageMyDirectory.com Terms of Service

ManageMyDirectory.com respects the privacy of all of its users.

Summary

At ManageMyDirectory.com, we believe privacy and transparency go hand in hand. ManageMyDirectory.com is the platform where customers sign in to manage their account and their directory websites. We design our systems to safeguard your information, minimize unnecessary data collection, and avoid transmitting sensitive form or credential information to advertising or analytics platforms. We strive to operate our platform in a secure, responsible, and compliant manner. This Summary and the Key Highlights below do not replace the full Privacy Policy.

Key Privacy Highlights

• You control your data. Customers determine how they collect and manage their own users' data on the platform.
• Google data only for the features you turn on. If you sign in with Google or connect a Google account, we use what Google shares with us only to provide those features. We never sell it, never use it for advertising, and never use it to train AI models. See Section 2A.
• No sensitive form transmission. We do not transmit form field contents, login credentials, financial data, or other personally identifiable information to advertising or analytics platforms.
• No interception of communications. We do not wiretap, intercept, or access the contents of communications while in transit.
• Browser-initiated requests only. Third-party scripts operate through standard browser-initiated HTTP requests.
• No sale of personal information. We do not sell personal information. We limit data sharing to what is reasonably necessary to operate the Service and support limited advertising functions as described in this Policy.
• Compliance-minded operations. We design our practices to align with applicable U.S. state privacy laws and international data protection requirements where applicable to our operations.

Questions about privacy? Email us at support@managemydirectory.com.

We Value Security & Privacy

ManageMyDirectory.com is operated by Pacific Holdings, LLC, a Nevada limited liability company. ManageMyDirectory.com ("Company," "we," "us," or "our") respects the privacy of our users and is committed to protecting personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you access or use ManageMyDirectory.com and our related websites, software, platforms, plugins, APIs, mobile applications, and related services (collectively, the "Service").

By accessing or using the Service, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

1. Scope of This Policy

This Privacy Policy applies to information collected through ManageMyDirectory.com (including its subdomains, its sign-in page, and its Sign in with Google and Connect Google features) and through other websites and URLs owned or operated by us that link to this Policy, unless otherwise specified. Section 2A (Google User Data) explains how we handle information we receive from Google.

This Policy does not apply to third-party websites, integrations, plugins, advertising networks, analytics providers, or services that operate independently of us.

2. Information We Collect

Information You Provide

• Name
• Email address
• Phone number
• Mailing or billing address
• Billing and payment information
• Business information
• Account credentials
• Communications submitted to us
• Job application information

Information About Others

If you provide personal information about another individual (for example, colleagues, clients, or referrals), you represent that you have the authority and necessary permissions to provide such information.

Information From Other Sources

We may receive updated delivery information, demographic data, fraud-prevention data, transaction verification data, or publicly available information from service providers and business partners.

If you choose to sign in with Google or to connect a Google account in ManageMyDirectory.com, we receive information from Google as described in Section 2A.

Information Collected Automatically

• IP address
• Browser type and version
• Device type
• Operating system
• Date and time of visit
• Referring URL
• Pages viewed
• General interaction events (e.g., page views)
• Sign-in and account activity records in ManageMyDirectory.com (for example, when you sign in, and notable changes made to your account or websites, such as connecting or disconnecting a Google account)

We collect and process personal information only to the extent reasonably necessary and proportionate to provide the Service, maintain security, comply with legal obligations, and support legitimate business purposes.

2A. Google User Data

ManageMyDirectory.com offers two optional features that use Google's sign-in and authorization system: Sign in with Google, and Connect Google for a website. You decide whether to use them, and the rest of the Service works without them. This section explains what we access from your Google account, how we use, store, protect, and share it, and how to remove it. It applies in addition to the rest of this Policy; where they differ, this section controls for information we receive from Google.

Limited Use

ManageMyDirectory.com's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

What we access, and why

Sign in with Google (basic sign-in permissions: openid, email, and profile)

• What we receive: your name, email address, Google account ID, and profile picture.
• How we use it: only to identify you and sign you in to your existing ManageMyDirectory.com account.
• Sign in with Google gives us no access to any other data in your Google account, such as your email messages, files, contacts, or calendar, and does not let us act in your Google account.

Connect Google (one connection per website; each permission is requested only when you turn on the feature that needs it, and you can decline any of them on Google's consent screen)

• Your Google account identity (openid and email). We receive the email address and Google account ID of the Google account you connect. We use them to show you, and the other administrators of that website, which Google account is connected, and to detect when a different Google account is connected so that one account's data is never mixed with another's.
• Google Search Console, read-only (https://www.googleapis.com/auth/webmasters.readonly). We read: the list of Search Console properties the connected account can access, with its permission level on each; for the property that matches your website, the sitemaps submitted for it and their status (submission and download dates, whether processing is pending, warnings, errors, and submitted and indexed counts); and, only when you ask about a specific page of your website, Google's URL Inspection result for that page (index status, coverage, robots.txt status, last crawl time, the canonical URL you declared and the one Google selected, the mobile usability verdict, and a link to the full report in Search Console). We use this only to show you in ManageMyDirectory.com how Google sees your website. To help you confirm that the right account is connected, the panel lists up to 50 of the account's Search Console properties. This access is read-only: nothing in your Search Console can be changed through ManageMyDirectory.com.
• Google Cloud (https://www.googleapis.com/auth/cloud-platform). We use this permission only to create a Google Maps API key for your website inside your own Google Cloud project. With it we: list your active Google Cloud projects (project ID and name) and check whether billing is enabled on each, so you can choose one that can serve maps; when you choose a project and confirm, enable the Google services a Maps key needs in that project (the API Keys, Maps JavaScript, Geocoding, and Places APIs); create one API key, named "ManageMyDirectory.com - " followed by your website's domain and restricted to your website's domain and to Google Maps services; and read that key's value so it can be saved in your website's settings, where your website uses it to display maps. We do not read, change, or delete any other resources in your Google Cloud projects, and the only billing information we use is whether billing is enabled on a project. Google may charge the billing account linked to your project for Maps usage, as described in our Terms of Service.

How we use Google user data

• We use Google user data only to provide and improve the user-facing features described above, which you see and control in ManageMyDirectory.com.
• We do not use Google user data for advertising, including retargeting and personalized or interest-based advertising, and we do not use it for marketing.
• We do not sell Google user data, and we do not use it to determine creditworthiness or for lending purposes.
• We do not use Google user data to develop, improve, or train generalized or non-personalized artificial intelligence or machine-learning models, and we do not provide it to the AI-assisted tools described in Section 5 or to any third-party AI provider.

How we store and protect it

• Search Console and Google Cloud project information is requested from Google when you open or refresh the relevant panel, or ask about a page, and is shown to you. We do not save it in our database.
• Connect Google connection record. For each connected website we keep one record in our database, containing: the connected Google account's email address and Google account ID; the permissions you granted; the OAuth access token and refresh token; when the access token expires; and when the connection was made and last updated. The access token and refresh token are stored in encrypted form. They are used only by our servers, to call Google on your behalf for the features you use; they are never sent to your browser or shown in ManageMyDirectory.com, and they are removed from error messages. The refresh token lets your connection keep working without asking you to approve it again every hour; we keep it until the connection is removed, as described below.
• Google Maps API key. A key created through Connect Google is saved in your website's settings, where your website uses it to display maps. Like any Google Maps browser key, it appears in the code of the pages that show maps, which is why it is restricted to your website's domain and to Google Maps services. ManageMyDirectory.com shows it only in shortened, masked form.
• Sign in with Google. We use your name, email address, Google account ID, and profile picture to sign you in, and we keep only what we need to recognize your Google account when you sign in again.
• Protection. All requests to Google are made over encrypted HTTPS connections. The connection step is protected against forgery and replay: it uses single-use values that expire after 15 minutes, PKCE (Proof Key for Code Exchange), and checks, including a short-lived security cookie, that tie the connection to the website, browser, and administrator that started it. Access to our servers and database is restricted, and the safeguards described in Section 13 apply.

Who can see it, and who we share it with

• Within your account. The connected Google account's email address, and the Search Console and Google Cloud information described above, are shown in ManageMyDirectory.com to the administrators of that website who can open its Connect Google page.
• No sale, no advertising, no data brokers. We do not sell Google user data, and we do not share it with advertising networks, analytics providers (including the Analytics & Advertising Tools described in Section 4), data brokers, CRM platforms, or AI providers.
• Limited transfers. We transfer Google user data only: (a) as necessary to provide or improve the features you use, for example by saving the Maps API key to your website so its maps work, or by storing data with the infrastructure providers that host our servers on our behalf; (b) for security purposes, such as investigating abuse; (c) to comply with applicable law, regulation, or legal process; or (d) as part of a merger, acquisition, or sale of assets, with notice to you.

Human access

Our personnel do not read your Google user data unless: you give us permission (for example, by asking our support team to look at your Connect Google page with you); it is necessary for security purposes, such as investigating abuse or a security incident; or it is required to comply with applicable law.

Retention and deletion

• While connected. We keep a website's Connect Google record for as long as that website stays connected.
• Disconnect in ManageMyDirectory.com. On the Connect Google page, select Disconnect. We ask Google to revoke ManageMyDirectory.com's access, and we immediately delete that website's connection record (the tokens, the Google account email address and ID, and the granted permissions) from our database. We delete our record even if Google cannot be reached at that moment, so we recommend also checking https://myaccount.google.com/permissions.
• Remove access in your Google account. You can remove ManageMyDirectory.com's access at any time at https://myaccount.google.com/permissions. Google then stops honoring the stored authorization, and we delete the connection record the next time ManageMyDirectory.com tries to renew its access for that website, which happens when that website's Google panels are next used. To have the record deleted straight away, also select Disconnect, or email us.
• Changing accounts. Connecting a different Google account to the same website replaces the previous connection record.
• Search Console and Google Cloud project information is not stored, as described above.
• Google Maps API key. The key stays in your website's settings until you change or remove it, and in your Google Cloud project until you delete it there. Disconnecting Google does not remove it, because your website keeps using it to display maps.
• Temporary security records. The records used to secure the connection step contain no Google user data. They expire after 15 minutes and are deleted when used or during later clean-up.
• Cancelling a website or closing your account. Please disconnect Google first, or email us and we will revoke our access and delete the connection record for you.
• Backups. Copies of deleted records in our system backups are rotated out on our normal backup schedule and are not restored to live systems (see Section 12).
• Deletion requests. To ask us to delete the Google user data we hold, email support@managemydirectory.com with the subject "Google data deletion", naming the website and the Google account email address. We may verify your identity as described in Section 9A. We will revoke our access, delete the Google user data we hold for that website or for your sign-in, and confirm to you when it is done.

Google's own policies

Google's handling of your data is governed by the Google Privacy Policy. Before we use Google user data in a new way, we will update this Policy and ask for your consent.

3. Cookies & Tracking Technologies

We use cookies, web beacons, pixels, SDKs, and similar technologies to:

• Maintain session integrity
• Secure user accounts
• Analyze traffic patterns
• Improve performance
• Prevent fraud
• Measure marketing effectiveness

ManageMyDirectory.com uses cookies that are strictly necessary to keep you signed in and to protect the sign-in and Connect Google steps, including a short-lived security cookie that ties a Google connection to the browser that started it.

Where required by applicable law (including certain U.S. state or international laws), non-essential cookies may be enabled only after user consent.

Users may control cookies through browser settings. Disabling cookies may limit certain functionality.

At this time, our Service does not respond to browser-based "Do Not Track" signals, as there is no universally accepted technical standard for recognizing or honoring such signals.

4. Analytics & Targeted Advertising

We use third-party analytics and advertising technologies, including but not limited to Meta (Facebook) Pixel, Google Analytics, Google Ads, and LinkedIn Insight Tag ("Analytics & Advertising Tools"). These tools allow us to serve "retargeting" or "remarketing" advertisements to users who have previously visited our Service when they visit other websites or social media platforms.

These tools typically collect technical metadata through standard browser-initiated requests, such as:

• IP address and device identifiers;
• Browser characteristics and operating system;
• Timestamp and Page URL;
• Referrer information and general interaction events.

Non-Transmission of Sensitive Data: We have configured our tracking implementations to strictly avoid transmitting sensitive or personally identifiable information—such as form field contents, names, email addresses, phone numbers, passwords, payment card numbers, or financial data—to these advertising or analytics platforms.

We do not enable "Automatic Advanced Matching" or transmit hashed email addresses or similar identifiers to advertising platforms.

Analytics & Advertising Tools never receive Google user data (see Section 2A).

We do not intercept, wiretap, access, or acquire the contents of electronic communications exchanged between users and our servers while in transit. We do not utilize "session replay" or "keystroke logging" scripts designed to record or monitor individual user interactions or private form entries.

When third-party scripts are present, a user's browser independently initiates separate, outbound HTTP requests to third-party domains as part of standard web functionality. These browser-initiated requests are independent of the communication between the user and our servers and do not constitute an interception or duplication of that communication by us.

Analytics and advertising providers process information pursuant to their own privacy policies and act as independent data controllers with respect to information their systems receive via these browser-initiated requests.

The non-transmission principles described in this section apply specifically to third-party advertising and analytics networks and do not limit the transmission of information to authorized service providers as described in Section 8 for operational and contractual purposes.

5. How We Use Information

• Provide and maintain the Service
• Process transactions
• Provide customer support
• Improve performance and security
• Prevent fraud and abuse
• Communicate administrative updates
• Enforce agreements
• Comply with legal obligations

Google user data is used only as described in Section 2A.

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects concerning individuals.

The Service may include AI-assisted tools that generate content or provide informational responses based on user input. These tools operate on a prompt-and-response basis and do not analyze user behavior for profiling, personalization, credit evaluation, employment decisions, or other similarly significant determinations.

AI-assisted tools may transmit user-submitted prompts, content, and limited contextual account information to authorized third-party AI infrastructure providers for processing and response generation. These providers act solely as service providers or subprocessors and process data only to provide contracted AI functionality, maintain security, and support operational integrity. We do not provide Google user data to AI-assisted tools or AI infrastructure providers.

AI interaction data, including prompts and generated outputs, may be logged and retained for limited periods as reasonably necessary for debugging, abuse prevention, system monitoring, billing and cost tracking, security review, and service optimization purposes, consistent with our legitimate business interests and contractual obligations.

Use of AI-assisted features is voluntary. Users who prefer not to have content processed through AI functionality may choose not to use those features.

6. Legal Basis for Processing (GDPR and Similar Laws)

Where applicable, we process personal data based on:

• Performance of a contract;
• Legitimate business interests (security, analytics, fraud prevention);
• Compliance with legal obligations;
• User consent where required by law.

Sign in with Google and Connect Google rely on your choice to use them and on the performance of our contract with you.

7. Data Controller & Processor Roles

When customers use the Service to collect or process personal data of their own users, those customers act as independent data controllers and are responsible for their own compliance obligations. ManageMyDirectory.com acts solely as a service provider or data processor, processing data only as necessary to provide the Service in accordance with customer instructions and applicable law.

For customers subject to the GDPR or similar data protection laws, a Data Processing Addendum (DPA) is available upon request to govern our role as a data processor.

Customer account data is logically segregated within our systems. We do not combine or aggregate personal information across unrelated customer accounts for marketing, profiling, or advertising purposes.

8. Data Sharing

We may share information with:

• Authorized service providers, cloud hosting partners, CRM platforms, payment processors, and infrastructure providers that process information solely to provide contracted services under their own applicable privacy and security obligations;
• Professional advisors including legal, financial, or compliance counsel;
• Law enforcement or regulatory authorities when legally required;
• Successors in interest during a merger, acquisition, or asset sale.

Google user data is shared only as described in Section 2A, which is narrower than this Section.

No Sale of Personal Information: We do not sell personal information.

We do not compile, aggregate, license, or sell consumer profiles independent of a direct relationship with our customers, and we do not operate as a data broker.

Use of Analytics and Marketing Tools: We use limited third-party tools to support analytics and marketing measurement. Information transmitted is limited to technical identifiers and usage data as described in Section 4 of this Privacy Policy and does not include user-submitted form data. Users may opt out using the methods described in Section 9 and applicable browser-based controls.

9. Your Privacy Rights & Choices

Depending on your location (including California, Virginia, Colorado, and other jurisdictions), you may have the following rights regarding your personal information:

• Access & Portability: The right to know what data we collect and receive a copy.
• Correction & Deletion: The right to update inaccurate data or request removal.
• Opt-Out of Targeted Advertising: The right to opt-out of the "sharing" of your data for cross-context behavioral advertising or retargeting purposes.
• Non-Discrimination: We will not penalize you for exercising your privacy rights.

How to Exercise Your Rights: To submit a request for access, deletion, or to opt-out of targeted advertising, please email support@managemydirectory.com.

We may take reasonable steps to verify your identity before fulfilling a request. We may decline requests that are manifestly unfounded, excessive, or where retention is required for legal, security, or compliance purposes.

Technical Opt-Outs: You may opt-out of third-party retargeting by adjusting your browser's cookie settings, utilizing browser-based privacy preference signals such as "Global Privacy Control" (GPC), where supported, or visiting industry opt-out pages such as aboutads.info or networkadvertising.org.

9A. Data Access, Deletion & Correction Requests

Subject to applicable law, individuals may request access to, correction of, or deletion of their personal information. This includes rights commonly referred to as the "Right to Know," "Right to Delete," "Right to Correct," or "Right to be Forgotten."

To submit a privacy-related request, please contact us at:

support@managemydirectory.com

We may take reasonable steps to verify the identity of the requesting individual before fulfilling a request. Where permitted by law, we may decline requests that are manifestly unfounded, excessive, or where retention is required for legal, security, fraud prevention, contractual, or compliance purposes.

Where applicable under U.S. state privacy laws, individuals may designate an authorized agent to submit requests on their behalf, subject to verification requirements.

Residents of certain U.S. states may have the right to appeal a denial of a privacy request by responding to our decision notice within the timeframe required by applicable law.

Residents of the European Economic Area (EEA), United Kingdom, and Canada may have additional rights under applicable data protection laws, including the right to object to processing, restrict processing, withdraw consent, and lodge complaints with a supervisory authority.

Requests to delete Google user data are handled as described in Section 2A.

9B. California Privacy Rights (CCPA/CPRA)

This section applies to California residents and supplements the rights described in Sections 9 and 9A.

Our Role

We provide a platform for customers to operate their own websites and act as a service provider in that context. Customers are responsible for the data they collect, use, and disclose on their websites.

Information Collected (Last 12 Months)

In the preceding 12 months, we have collected categories of personal information consistent with those described in this Privacy Policy.

Selling and Disclosure

We do not sell personal information. We may disclose information to service providers for business purposes necessary to operate our platform.

We do not use or disclose sensitive personal information for purposes other than those permitted by applicable law.

Users may exercise applicable opt-out rights using the methods described in Section 9.

California residents have rights described in Sections 9 and 9A, including the right to know, access, delete, correct, and opt out of the sale or sharing of personal information, where applicable, as well as the right to non-discrimination.

Customer Website Data

Requests relating to data collected on customer-operated websites should be directed to the applicable website owner.

Global Privacy Control

We recognize and respond to Global Privacy Control (GPC) signals where applicable.

We retain personal information as described elsewhere in this Privacy Policy and as required to operate our services and comply with legal obligations.

10. Other U.S. State Privacy Rights

Residents of states including Colorado, Virginia, Connecticut, Utah, Texas, Oregon, Montana, and other jurisdictions with applicable privacy statutes may have similar rights.

11. International Data Transfers

Information may be transferred to and processed in the United States or other jurisdictions where data protection laws may differ.

12. Data Retention

We retain personal information only as long as reasonably necessary to fulfill business, legal, compliance, security, or operational purposes.

Account information is retained for the duration of an active customer relationship and for a limited period thereafter as required for tax, legal, fraud prevention, contractual, or compliance purposes.

Google user data is retained and deleted as described in Section 2A.

System backups are maintained for disaster recovery and business continuity purposes in accordance with a structured retention schedule (including daily, weekly, and monthly rotations). Backup files are stored in restricted-access environments and automatically rotated out after their designated retention periods.

In the event of a verified deletion request, personal information will be removed from all live production systems and will not be restored to live systems from backup archives following their scheduled rotation.

Aggregated or anonymized data that cannot reasonably identify an individual may be retained indefinitely.

13. Security

We implement commercially reasonable administrative, technical, and organizational safeguards designed to protect personal information. However, no system can be guaranteed completely secure.

14. Public Forums & User Content

Information voluntarily posted in public areas (such as directories, reviews, or forums) may be publicly visible and collected by others.

15. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13.

16. Plugins & Embedded Content

Some plugins may embed content from our own content servers or third-party services (e.g., Google Fonts, YouTube). These services may set cookies independently and operate under their own privacy policies.

Pages of ManageMyDirectory.com may also load third-party services, such as Google reCAPTCHA on the sign-in page, which helps protect accounts against automated abuse, and Google Fonts. These services operate under their own privacy policies.

17. Third-Party Websites

Third-party websites linked from our Service operate independently and have their own privacy policies.

18. No Rights of Third Parties

This Privacy Policy does not create rights enforceable by third parties.

19. Changes to This Policy

We may update this Privacy Policy periodically. Continued use of the Service after updates constitutes acceptance. We post changes on this page and update the "Last updated" date above. Changes to how we use Google user data are also subject to Section 2A.

20. Contact Us

If you have questions, contact: support@managemydirectory.com

For requests to delete Google user data, please use the subject line "Google data deletion".

ManageMyDirectory.com is operated by Pacific Holdings, LLC, a Nevada limited liability company.