Legal
This policy covers only what WLR Advisory actually does. It is short because the practice is small and the data handling is narrow. Where an executed engagement letter sets stricter handling for a particular engagement, that letter controls.
WLR Advisory LLC, a Massachusetts limited liability company, trading as WLR Advisory. Cambridge, Massachusetts. hello@wlradvisory.com.
Name, email address, company name, billing address, and — on service purchases — phone number, service area, company website and the operational details the checkout asks for. Payment is processed by Stripe. WLR.ai never receives or stores full card numbers. Stripe holds the payment credential; WLR.ai sees only the last four digits, the card brand and the outcome.
This site uses Plausible Analytics for aggregate traffic measurement. Plausible does not use cookies, does not collect personal data, and does not track visitors across sites or over time. It records page views, referrer, and coarse device and country information in aggregate. There are no advertising pixels, no cross-site trackers, and no data broker integrations on this site.
Two kinds of information, and the distinction matters:
To deliver the product or engagement, to bill and keep tax records, to prevent fraud and abuse, and to improve WLR.ai’s methods in anonymized form. Nothing else.
Stripe processes payments. Plausible measures aggregate site traffic. Netlify hosts this website. Email and files — including the inbox that receives purchase notifications — are hosted by Google Workspace, which processes them to operate the practice. Where an engagement requires an additional email platform, spreadsheet host or CRM, the engagement letter names it before any client data reaches it.
WLR.ai does not sell personal information, does not share it for cross-context behavioral advertising, and does not provide it to data brokers.
Checkout and billing records are kept as long as tax and accounting rules require. Engagement files are kept for the paid period plus three years, unless a longer legal hold applies.
Three different requests get three different answers, and it is worth being exact about which is which. A person named in a contact record can require that their address be suppressed, and WLR.ai will suppress it. A client can require deletion of material it supplied. Business contact information WLR.ai researched from published sources is kept in the engagement file for the retention period above unless a legal duty requires earlier deletion — suppression, not deletion, is the remedy there.
Client ownership of contact records under the Terms of Service does not override a suppression request. Where a person asks to be removed, the address is suppressed for that engagement regardless of who owns the record.
An Operator Sheet URL is issued to named users, is not transferable, and may be revoked on chargeback, non-payment or termination. It must not be shared or publicly linked.
WLR.ai maintains administrative, technical and physical safeguards appropriate to the sensitivity of the information held. WLR.ai does not request or store Social Security numbers, driver’s license numbers, or financial account numbers of individuals.
To ask what WLR.ai holds about you, to correct it, or to ask for it to be suppressed or deleted as Section 7 provides, email hello@wlradvisory.com. If you received an outreach message from a WLR.ai client and want to be removed, tell us and the address is added to suppression for that engagement and passed to the client, who is the sender of record unless the engagement letter states that WLR.ai transmitted as the client’s agent.
The version in force is the version published on this page, with the effective date shown at the top. Material changes are dated here.