FootHold SystemsFootHold AEO
Free scan

FootHold Systems

Privacy
policy

Last updated 24 August 2026

Short version: we collect your email address and your website address so we can run your scan and send you the report. We do not sell them, we do not share them with anyone outside the services that make this site work, and you can have them deleted by asking.

Who we are

FootHold Systems, 403 E Arrow Hwy Suite 306, San Dimas, CA 91773. You can reach us at maximilian@footholdsystems.com. We are the ones who decide what happens to the information described here.

What we collect

  • Your email address and your website address. You type these into the scan request form. That is the whole form. We do not ask for your name, your phone number, or a card.
  • A record of your consent. When you tick the boxes we store the exact wording you were shown, the date and time, your IP address and your browser's user-agent string. We keep this so that if anyone later asks us to prove you agreed to the emails or to being called, we can. We record it the same way if you decline.
  • How the page gets used. Pages viewed, how far down you scrolled, where you clicked, roughly what country you are in, and which of our ads you arrived from. This is behavioural, not personal, and it is not tied to your name.

Why we collect it

  • To send you your scan report. You asked for it, so sending it is simply doing the thing you requested.
  • To send you follow-up emails about AI visibility for businesses. This one runs on your consent and nothing else. The box you tick reads: “Yes, send me my scan results and occasional AI visibility tips. Unsubscribe any time.” You can withdraw at any time and we stop.
  • To run the scan. Your website address is sent to Ora, the service that performs the technical assessment. It is a public web address and carries nothing personal about you.
  • To work out whether the site and the ads are any good. Which headline gets read, where people give up, which ad brought them. We do this because running ads without it means paying for guesses.

If you are in the UK, the EEA or Switzerland: our legal basis for the emails is your consent, and for the analytics and site security it is our legitimate interest in understanding and protecting our own website. Where consent is the basis, ticking the box is genuinely optional, and your scan report is sent either way.

Cookies and similar technology

We set two small cookies of our own. fh_vid is a random string that lets us count one browser once instead of twice. If an A/B test is running, fh_exp_… remembers which version of the page you were shown, so you do not get a different one on every visit. Both last 90 days, and neither carries anything about you.

The analytics and advertising services listed below set their own cookies. Clearing cookies in your browser, or using its tracking-protection settings, removes them. Nothing on this site stops working if you do.

Who else sees it

Only the services that make this site run. Each one sees the part it needs and no more. We do not sell personal information, and we do not share it for anyone else's advertising.

Resend
Sends your scan report and the follow-up emails. Holds your email address.
Ora
Runs the technical scan. We send it the website address you give us, nothing about you. It returns the findings your report is built from.
Whop
Takes the payment if you buy the fixes. Whop handles the card details; we never see or store them. We receive a confirmation that a payment succeeded and which report it was for. Whop also sets a tag on this site that records page views, so a purchase can be matched to the visit that led to it.
Vercel
Hosts the site. Keeps standard server logs, and reads an approximate country from your IP address so the form knows which consent wording to show.
Neon / Vercel Postgres
Stores the consent record and the anonymous page-view counts behind our A/B testing.
Google Analytics 4
Aggregate traffic reporting: pages viewed, roughly where visitors came from.
Microsoft Clarity
Heatmaps and session replay. Records how pages are scrolled and clicked so we can see which parts confuse people. Clarity masks text input by default, so what you type in the form is not captured.
Meta (Facebook) Pixel
Tells us which of our Facebook ads led to a scan request, so we know which ones to stop paying for.
Calendly
Runs the booking page. If you book a call, Calendly holds the name, email and any answers you give it.

How long we keep it

Your email address stays on our list until you unsubscribe or ask us to delete it. Consent records are kept for as long as we hold your email and for three years afterwards, because the whole point of the record is to outlive the thing it is evidence for. Analytics data expires on each provider's own schedule, which is 14 months for Google Analytics and 13 months for Clarity.

What you can ask us to do

  • Stop emailing you. Every email we send has an unsubscribe link in it. One click, no questions. Or email us and we will do it by hand.
  • Tell you what we hold. Ask and we will send you everything we have that is tied to your email address.
  • Correct it or delete it. Ask and we will. The only thing we keep after a deletion is the fact that you asked, which is what stops you being added back later.

Email maximilian@footholdsystems.com for any of these. We will not charge you and we will not make it difficult. If you are in the UK or the EEA and you think we have handled this badly, you can complain to your national data protection authority.

Children

This is a site that sells business services. It is not aimed at children and we do not knowingly collect anything from anyone under 16.

Changes

If we change how any of this works, we change this page and update the date at the top. If a change is significant and you are on our list, we will tell you by email rather than hoping you re-read the page.