CASA Tier 2
Cloud Application Security Assessment
Passed against Google's Tier 2 requirements, verified by an independent third party.
Legal
Privacy
Policy.
Last updated: October 31, 2026.
Security and compliance
- CASA Tier 2 validated
- GDPR compliant
- Encrypted in transit
- Data-minimal by design
Who we are
This website is operated by Aldasouqi L3C dba ACORP, located at 5982 Shadowlawn Ct, East Lansing, MI 48823.
What we collect
When you contact us through this website — by email, form, or phone — we receive the information you choose to share: your name, contact details, and the content of your message. Our AI receptionist answers calls and may collect the details needed to book an appointment or route your request, such as your name, phone number, and reason for contacting us.
Calls are not recorded
We do not record calls. Calls to our published number are answered live by our AI receptionist and, where needed, transferred to a human. We keep no call audio and no call transcripts from these interactions.
No analytics or advertising cookies
ACORP does not set cookies to track visitors and does not use analytics or advertising trackers on this website. The AI Business Planner saves entries in your own browser storage so your notes remain available on that device; this is not used to track you or sent to ACORP. If you follow a link to Stripe checkout, Stripe may use cookies under its own privacy practices. This site does not load Stripe tracking scripts.
Service providers
This website is hosted by Vercel Inc. Form and onboarding submissions are delivered to our team inbox through a server-side email relay operated for this website. Payments, where offered, are processed by Stripe, Inc.; card details are entered on Stripe's checkout and are tokenized there — they never traverse ACORP systems. HubSpot, Inc. provides our customer relationship management service and handles email addresses and course enrollment/consent records submitted through the free course form.
Free course signups
When you submit the free course signup form, we collect your email address to record your enrollment and deliver the free course, including course emails once email delivery is available. Submitting the form is your consent to receive course emails and your acceptance of the Course Terms of Use and this Privacy Policy; no separate checkbox is used. Course email delivery is not currently active. You can request earlier deletion at any time. The public lessons remain available without signup.
How long we keep it
Contact form, onboarding, and course signup submissions are retained for 12 months, then deleted. Subscription and billing records are kept for the period required by tax and accounting rules. You can request earlier deletion at any time.
How we use it
We use your information to respond to you, schedule and prepare for conversations, and operate the services you request. We do not sell your personal information.
AI disclosure
Calls to our published phone number are answered by an AI receptionist. It identifies itself as AI during the interaction and can transfer you to a human on request. See our security & privacy credentials and full privacy policy for how your information is protected.
How we protect data
Connections to this website are encrypted in transit. We follow data-minimization: we collect only the information needed to respond to you and operate the services you request. We do not sell your personal information, and we do not run third-party advertising trackers on this website.
Your choices
You can ask us what we hold about you, request corrections, or ask us to delete it — email a@acorpagency.com and we will act on your request. To cancel a subscription, use our cancellation page; we confirm within three business days.
Security & privacy credentials
Independently tested.
Not self-graded.
GDPR
EU data protection
Data Subject Rights, lawful basis for processing, and EU Standard Contractual Clauses for international transfers.
CCPA / CPRA
California
We act as a service provider and do not sell or share personal information.
Google API User Data Policy
Workspace data
Workspace data is used only to power features the user authorizes, never to train or improve generalized models.
PCI DSS
Payment card data
Card data is tokenized at the browser and never traverses ACORP systems.
Data isolation
Client separation
Each client's data sits in its own separate instance and database, isolated from every other client.
Encryption
AES-256 encryption at rest and TLS 1.2+ in transit.
Monitoring
24/7 logging and on-call security monitoring.
Independent verification
Our controls are not self-graded — certifications and regulatory alignments are tested by independent third parties on a regular basis.
Certifications and regulatory alignments are tested by independent third parties on a regular basis. Details reflect ACORP's own security documentation.
What we do
The checklist.
In plain terms.
What we do
- 24/7 AI receptionist that answers, books and hands off to a human
- Inbox, calendar and scheduling support under your instructions
- Lead follow-up and outreach support shaped around your criteria
- Social and content drafted in your voice, published on your approval
- Documents organized and clauses flagged in plain English
- A website built and kept current by asking
- Your data isolated in its own instance, separate from every other client
- Nothing sends, posts or books without your approval
What we don't do
- We do not sell or share your personal information
- We do not train or improve generalized models with your data
- Card data never traverses ACORP systems — it is tokenized at the browser
- No legal advice: qualified counsel keeps legal judgment
- No implied endorsements: certifications are independently tested, not self-graded