Privacy Policy

Who we are

PSAReach operates this website, psareach.com. We provide PSA tracking, distribution and delivery, media intelligence, reporting, Google Ad Grants, paid media, planning and digital marketing services to nonprofit and mission-driven organizations in the United States. Send questions about this policy through our contact form.

What we collect

This is a static marketing website. It collects very little, and most of that only when you choose to provide it.

Contact form. When you send us a message through the contact form, we receive the fields you complete: your name, your organization, your email address, your message and optional fields such as a phone number or campaign timing. Cloudflare Turnstile checks for bots and processes technical information such as your IP address and browser signals. The server also checks a signed form-start time, a hidden spam field, field lengths and submission frequency. Matching first and last name parts are flagged for our review rather than automatically rejected. These checks protect the form from abuse and run independently of optional analytics consent.

Email subscriptions. If you subscribe to PSAReach updates or to receive PSAs for your station, we collect your email address and the interests you choose. Station signups also ask for your station name, call sign and whether it is TV or radio, and any name you add. We record the page you signed up from, the time and the version of the consent wording you saw. We send one email asking you to confirm, and nothing else until you do. Cloudflare Turnstile and the form’s own checks protect the form from abuse, as with the contact form. Each email we send links to a page where you can change what you receive or unsubscribe. Signups for one interest never enroll you in the other.

Website assistant. When you use the assistant, we save the questions, replies, source pages, answer type, conversation reference and service usage so our team can answer follow-up requests and improve the service. Common answers come from published site content. If AI answers are enabled, OpenAI processes your question and a limited amount of conversation context and published site content. We mask obvious email addresses and phone numbers in saved conversation text, but other personal information you type may remain. Please avoid sensitive information. We collect your name, email and optional organization or callback number only when you submit a handoff request and agree to being contacted. A private hash of your email lets us count repeat contacts and compare leads from the contact form with leads from the assistant. IP addresses are converted into short-lived private hashes for abuse limits; raw IP addresses are not stored in the assistant database.

Analytics, only after consent. When configured, we use Google Analytics 4 to understand which pages help visitors. Nothing from the analytics service loads until you choose “Accept” in the cookie banner. Analytics storage is then allowed; advertising storage, advertising user data, Google signals and ad personalization remain disabled. If you reject, or never choose, no analytics script is loaded and no analytics cookie is set. Essential form and assistant functionality works independently of optional analytics.

Server logs. Like almost every website, our hosting provider records standard server logs: the page requested, the time, the IP address, the browser type and the referring page. We use these only to keep the site running and to investigate abuse.

We do not collect payment information, and we do not ask for or knowingly collect sensitive personal information.

Why we use it

To reply to your contact request and, if you ask, to arrange a conversation about our services.
To send the emails you subscribed to, and to honor your choices to change or stop them.
To understand which pages and guides are useful, so we can improve them.
To keep the site secure and available, and to detect spam and abuse.

We rely on your consent for analytics and on our legitimate interest in responding to inquiries and operating the site for the rest.

How long we keep it

Contact requests are kept while we are in conversation and for up to 24 months, after which they are deleted unless you have become a client, in which case our client agreement governs. Analytics data is retained according to the retention setting in our analytics account, which we keep at the shortest available period. Server logs are rotated on a short cycle by our hosting provider.

Subscription records are kept while you are subscribed. If you never confirm, we delete the signup after 30 days. If you unsubscribe, we keep your address on a do-not-send list, with the record of what you agreed to and when, so that we do not email you again; ask us if you want that record erased instead.

Assistant transcripts and handoff details are deleted from the active assistant database after 90 days. Pseudonymous lead-source records are kept for up to 24 months. Aggregate daily counts do not contain message text or contact details and may be kept longer. Handoff emails in our team inbox follow the contact-request retention period above. Hosting backups may retain deleted records temporarily under the provider’s backup policies.

We do not sell your data

We do not sell, rent or trade personal information. We do not share it with anyone for their own marketing.

Third parties

A small number of service providers process information on our behalf, and only for the purposes above.

Analytics provider. Google, for Google Analytics 4, only after you consent.
Form and security provider. Cloudflare runs the contact endpoint, Turnstile bot checks and email delivery to our team inbox. See Cloudflare’s privacy policy.
Subscription storage and email. Cloudflare stores the subscriber list in a separate database and delivers the confirmation and subscription emails.
Assistant hosting and storage. Cloudflare runs the assistant and stores its conversation records in D1. If AI responses are enabled, OpenAI processes the relevant questions and context under its API data policies.
AI assistant connector. If you add our public connector to ChatGPT or Claude, that provider handles what you type under its own privacy terms. Our connector answers from public pages and calculators, asks for no personal details, and does not store your requests. Cloudflare, which runs it, keeps standard operational logs.
Hosting provider. The company that serves the website and keeps server logs.

These providers may be located in the United States. Each is bound by its own privacy terms and by our instructions.

Cookies and local storage

Your consent choice is stored in your browser’s local storage so the banner does not reappear on every page. The contact form holds a short-lived signed verification token in memory while the page is open. Essential security checks may process browser information independently of analytics consent. If you allow analytics, Google Analytics sets its own cookies to distinguish visitors and sessions. No advertising cookies are set by this site.

The assistant keeps a conversation access token in your browser’s session storage so your chat can continue as you move between pages in the same tab. The token expires two hours after the conversation starts; closing the tab also ends access through that tab. Saved transcripts remain in the active assistant database for 90 days. Saved operational conversations and security checks support the requested chat service; optional Google Analytics events still require analytics consent. Conversation text and contact details are not sent to Google Analytics.

Your choices

Reject or withdraw consent. Choose “Reject” in the banner, or open “Cookie settings” in the footer to change a previous choice. Your choice is remembered in the same browser, so the banner does not repeat on every visit. Clearing site storage or using another browser shows the banner again. Withdrawing consent stops future analytics collection and removes this site’s analytics cookies; it does not delete data already collected by the analytics provider.
Access, correction or deletion. Send a request through our contact form and we will confirm what we hold about you, correct it or delete it, subject to any legal obligation to keep it.
Do not track. Analytics loads only after consent; your choice in the banner controls it. Essential form security runs independently.

Residents of U.S. states with privacy laws may have additional rights, including the right to know what is collected and to request deletion. We honor those requests from anyone, regardless of location.

Children

This website is intended for adults working in or with nonprofit organizations. We do not knowingly collect information from anyone under 16. If you believe a child has sent us information, let us know through our contact form and we will delete it.

Changes

We will update this policy when the site or our practices change. The date at the top shows the most recent revision. Material changes will be noted on this page.

Contact

Reach PSAReach through our contact form. We aim to respond within two business days.

This policy is a working draft. PSAReach will have counsel review it before launch.