Privacy policy

Effective 24 September 2026. This policy describes what ActaPack actually collects on this host today, and what we will collect only when a named service exists.

Who we are

ActaPack is a monthly public-site accessibility evidence program. This website is operated by ActaPack LLC in Minneapolis, Minnesota, United States.

Contact: hello@actapack.com.

What this policy covers

This policy covers actapack.com and, when they exist, related ActaPack product surfaces (including a later clerk app). It is about our handling of personal information. It is not legal advice about your city’s Title II duties, and it is not a WCAG certification.

This marketing host is public. Sign in is a link to the clerk app. This marketing host does not collect a password or a login email. The contact form collects the name, email, and message you type.

Information we collect

On this public marketing host. When you load a page, the host that serves it typically sees your IP address, browser type, and the page you requested. Cloudflare processes that traffic. Type on this host is IBM Plex Sans, served from this host. We do not load fonts from Google. We do not send Google your name or email. Advertising pixels are not installed. Google Tag Manager loads only if you allow optional third parties, and not when Global Privacy Control or Do Not Track is on.

Public-directory research. We may copy a public official’s name, title, and email from a city’s public contact page into a private company ledger used to reach clerks about this program. That information is already published by the city. Inbound message bodies do not go in that ledger.

If you later pay for ActaPack. We will collect the account email used to sign in (magic link or Google / Microsoft), the public hostname you add, and copies of public pages and public PDFs we fetch so we can send the monthly file. First look may open a few public pages and keep glance shots for 90 days. Optional later collection, only if you turn it on or send it to us: staff-page URLs you list; inbound mail to hello@ and published aliases (From, subject, body, attachments); pack-ready and opted-in alert mail; an optional webhook URL; an optional Web Push endpoint on your browser. We do not put passwords in the pack. We do not fetch student, employee, or other behind-login records unless a later written terms change says so.

If you write from this website. The contact form collects your name, email, and message, plus a Cloudflare spam check so automated mail does not reach the inbox. We send that note to hello@ through Postmark. Contact-form mail does not go on the outreach list.

Ask us in the clerk app. Signed-in clerks can write from Ask us. We receive the mailbox they sign in with, the organization and public website on that file, and the message body. Postmark sends that note to support@actapack.com. It lands in Google Workspace. We do not keep a help-ticket table.

We do not collect payment card numbers (Stripe would, if you pay) or passwords for city website logins. We do not sell city data.

Cookies and similar technologies

Cookies and similar technologies are small files or scripts that remember a choice or measure a visit. ActaPack does not need a separate cookies page. The categories, and how to change them, are here.

• Necessary. Needed to show the page, keep it secure, and remember whether you allowed optional tools. Always on. Not a choice in the banner.
• Optional third parties. One switch. Covers site analytics, performance tools, and marketing when those tools exist. Today that is Google Analytics 4 through Google Tag Manager, only after you allow optional tools. Advertising pixels (including Meta, LinkedIn, and TikTok) are not installed yet. Used to understand which pages are used, and later to measure visits from ads. We do not put your email into those tools.

Cookie preferences in the footer opens a tool with one Accept optional and one Reject optional control, same visual weight. No nested categories. Optional third parties stay off in Minnesota and other places that require a prior choice, until you accept. In other places they may start on until you reject them. Allowing optional tools loads Google Tag Manager. Advertising pixels are not installed yet.

A later clerk app, if it exists, will use a session cookie only. No advertising pixels on that app.

Global Privacy Control and Do Not Track

If your browser sends Global Privacy Control (GPC) or Do Not Track, we treat that as a refusal of optional third parties. Those technologies must not load. The signal does not stop a pack-ready email after you pay — that mail is the monthly file you bought.

We treat GPC as an opt-out of “sale” or “sharing” of personal information and of targeted advertising, as those words are used in US state privacy laws. We do not sell personal information for money.

How we use information

• Operate, secure, and understand this website
• Respond to email you send us
• Provide the paid monthly file and tickets when you are a customer
• Keep the dated pack for seven years and glance shots for 90 days
• Measure the site or show advertising only if you allow optional third parties

How we share information

We use companies that process information for us. We name only vendors that exist or that this policy says will exist when that service is on:

• Today: Cloudflare, for this website and a spam check on the contact form. Postmark sends contact-form notes.
• When product mail is live: Postmark for pack-ready and other product mail, in addition to contact-form notes.
• When you allow optional third parties: Google (Tag Manager and Analytics), and Meta, LinkedIn, or TikTok for the pixels you allowed.
• Later, when those services exist: Stripe for payment; Google Workspace for inbound mail to hello@; Google Cloud and Neon when the clerk app stores data.

Customer Slack or Teams addresses you give us for alerts are your destination, not ActaPack vendors. We do not share ActaPack data with Lokker. We do not sell city data. We may disclose information if the law requires it.

This policy is not a data processing agreement. If a district later needs one, that is a separate document.

How long we keep information

• Paid packs: seven years
• Glance screenshots: 90 days
• Host logs: whatever the host (Cloudflare) retains for security and abuse
• Public-directory ledger entries: until the outreach is finished or we delete them
• Contact-form notes: in the hello@ inbox until we reply or delete them. We do not publish them.

Your choices and rights

You can email us to ask what we hold, to correct it, or to delete it. If you are a customer, you can also close the account. Depending on where you live — including Minnesota, California, and other US states with consumer privacy laws, and the European Economic Area or United Kingdom — you may have further rights to access, deletion, correction, and to opt out of targeted advertising. We honor GPC for that opt-out. We will not deny the service, charge a different price, or lower quality because you exercised a privacy right.

We do not claim that every US state privacy statute currently applies to us. We still honor deletion requests and GPC. To make a request, email hello@actapack.com. We may need to verify it is you. If we decline, you may ask us to look again.

Children

This site is for city and township staff and their website vendors. It is not directed at children under 13, and we do not knowingly collect personal information from children.

Where information is processed

ActaPack is operated from the United States. If you visit from another country, your information is processed in the United States. Optional cookies for visitors in the EEA, United Kingdom, Switzerland, and US states that require a prior choice stay off until you accept them.

Changes

We will change this page when collection changes, and we will update the effective date. Material changes will be described on this page.

Contact

Privacy questions and requests: hello@actapack.com. Operator: ActaPack LLC, Minneapolis, Minnesota, United States.

Counsel reviews this policy before we take payment or run paid advertising. Until then, treat the “today” paragraphs as the current collection on this host.