Legal

    Privacy
    Policy

    Last updated: September 22, 2026

    Rain of Eden Enterprises LLC

    Effective Date: September 22, 2026  |  Version: 1.1

    1. INTRODUCTION AND SCOPE

    This Privacy Policy describes how Rain of Eden Enterprises LLC (“Rain of Eden,” “we,” “us,” “our”) collects, uses, shares, and protects personal information in connection with our website at rainofeden.com (the “Website”) and the software portals, applications, and services we provide to our business clients (together, the “Services”).

    This Policy also applies to the client software portals and applications we host at our subdomains, where we process client business information and, on our clients’ behalf, their customers’ information as a service provider; requests concerning a client’s customers should be directed to that client.

    This Policy does not apply to consumer-facing websites we build and manage for our clients. Those websites are operated by our clients under their own posted privacy policies, and the client — not Rain of Eden — determines how information collected there is used.

    We do not sell products through the Website and we collect no payment card information on it. Our Services are business-to-business, are directed to users in the United States, and are not intended for individuals under eighteen (18).

    2. OUR TWO ROLES

    1. 2.1 As Data Controller. For information we collect for our own business purposes — inquiry and prospect records, client account and billing information, business contact details, and usage analytics — we determine the purposes and means of processing and act as the data controller.
    2. 2.2 As Data Processor. When our clients upload, import, or collect their own customers’ personal information through our portals and services (“End-Customer Data”), the client is the data controller and Rain of Eden acts strictly as a data processor and service provider. We process End-Customer Data only on the client’s instructions and as described in our Master Services Agreement, we do not sell it, and we do not use it for our own marketing. Privacy requests concerning End-Customer Data are referred to the relevant client.

    3. INFORMATION WE COLLECT

    1. 3.1 Information You Submit. When you complete a contact, inquiry, or scheduling form, or otherwise communicate with us, we collect the information you provide — typically name, company, email address, telephone number, and the details of your inquiry or project.
    2. 3.2 Client and Account Information. For clients: business contact details, portal login credentials and user roles, billing contacts, invoicing records, payment status, and records of agreement or terms acceptance including date, time, and version.
    3. 3.3 Payment Information. Payment card details are collected and processed directly by PCI-DSS-compliant third-party processors (for example, Stripe) and are not stored on our systems. We retain only limited transaction records such as payment confirmations and tokenized identifiers.
    4. 3.4 Information Collected Automatically. When you browse the Website or use a portal, we and our analytics providers automatically collect technical information such as IP address, device and browser type, operating system, pages viewed, referring pages, log data, and interactions, using cookies and similar technologies.
    5. 3.5 Mobile and Text Messaging Information. If you provide a mobile telephone number, we collect that number together with records of your messaging relationship with us, including the consent language presented to you, the date, time, and source of any consent, message delivery records, and opt-out (suppression) records.
    6. 3.6 End-Customer Data. Customer records, contact lists, order histories, and related information our clients process through the Services, handled in our processor role under Section 2.2.

    4. HOW WE USE INFORMATION

    We use information to:

    • respond to inquiries and communicate about potential and ongoing business-to-business services;
    • prepare proposals and manage client relationships;
    • provide, operate, secure, and improve the Services;
    • provision and administer portal accounts and permissions;
    • invoice and collect fees;
    • provide support;
    • monitor performance, deliverability, and acceptable use;
    • maintain records of agreement and terms acceptance;
    • market our own services to business contacts in accordance with applicable law, with opt-out available;
    • enforce our agreements; and
    • comply with legal obligations.

    Acting as processor, we use End-Customer Data only to deliver the contracted Services on the client’s behalf.

    5. NO SALE OF DATA; TEXT MESSAGING DATA

    1. 5.1 No Sale or Trade. We do not sell, rent, or trade personal information — including prospect, contact-form, client, or End-Customer Data — and we do not share it with third parties for their own marketing purposes.
    2. 5.2 Mobile and Text Messaging Data. Mobile telephone numbers and text messaging originator opt-in data and consent are not sold, rented, or shared with any third parties or affiliates for marketing or promotional purposes under any circumstances. Mobile information is shared only with our text messaging platform providers, telecommunications carriers, and similar service providers, solely as necessary to deliver the messages you have requested or consented to receive and to honor opt-out requests. All other categories of data sharing described in this Policy exclude text messaging originator opt-in data and consent.
    3. 5.3 Text Message Program. We use mobile information to send the transactional messages relating to your inquiry, project, or account that you have requested, and, where you have separately consented, marketing messages. Message frequency varies. Message and data rates may apply. You may opt out at any time by replying STOP to any message. For help, reply HELP or contact us at 813-564-1440. We retain consent and suppression records as necessary to honor your preferences and to comply with applicable law, including the Telephone Consumer Protection Act and the Florida Telephone Solicitation Act (Section 501.059, Florida Statutes). Our full text message program terms appear in Section 13 of our Terms and Conditions.

    6. HOW WE SHARE INFORMATION

    Subject to the exclusion in Section 5.2, we share personal information only:

    • (a) with the third-party platforms and subprocessors used to deliver the Services — including GoHighLevel, Stripe, Zapier, Glide, Google Workspace, and the cloud infrastructure underlying them — which may process it only to provide services to us;
    • (b) with professional advisors and service providers supporting our business (accounting, legal, security), bound by confidentiality;
    • (c) to comply with law, regulation, legal process, or governmental request, or to enforce our agreements and protect rights, property, or safety; and
    • (d) in connection with a merger, acquisition, financing, or sale of all or substantially all of our business or assets, subject to protections comparable to this Policy.

    7. COOKIES AND ANALYTICS

    We use cookies and similar technologies for essential functions (sessions, login, security), preferences, and analytics that help us understand usage and improve the Services. You can manage or block cookies through your browser settings; blocking essential cookies may impair functionality, including portal access. We do not currently respond to browser “Do Not Track” signals, for which no industry standard has been adopted.

    8. DATA SECURITY (FLORIDA INFORMATION PROTECTION ACT)

    We take reasonable measures to protect and secure personal information in electronic form, consistent with the Florida Information Protection Act, Section 501.171, Florida Statutes (“FIPA”), including administrative, technical, and physical safeguards appropriate to our business, and we require our subprocessors to do the same. No method of transmission or storage is completely secure. Clients are responsible for maintaining the confidentiality of their credentials and managing their users’ access.

    9. DATA BREACH NOTIFICATION

    1. 9.1 Our Own Data (Controller Role). In the event of a breach of security involving personal information for which we act as controller, we will notify affected Florida residents as expeditiously as practicable and no later than thirty (30) days after determination of the breach, subject to extensions and law-enforcement delays authorized by FIPA; notify the Florida Department of Legal Affairs where five hundred (500) or more Florida residents are affected; and notify the major consumer reporting agencies where more than one thousand (1,000) individuals are notified.
    2. 9.2 End-Customer Data (Processor Role). Where we maintain End-Customer Data on a client’s behalf as a third-party agent under FIPA, we will notify the affected client of a breach of our systems no later than ten (10) days after its determination, so the client can meet its own obligations as controller.

    10. DATA RETENTION

    We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including contract administration, billing and tax records, terms-acceptance records, messaging consent and suppression records, dispute resolution, and legal compliance. End-Customer Data is retained and exported in accordance with our Master Services Agreement, including its offboarding and export provisions, after which we have no obligation to retain it. When information is no longer needed, we take reasonable measures to dispose of it securely.

    11. YOUR CHOICES AND RIGHTS

    You may request access to, correction of, or deletion of personal information we hold about you as controller by contacting us at admin@rainofeden.com. We will respond within a reasonable time and honor verified requests except where retention is required or permitted by law — for example, billing records, acceptance logs, messaging suppression records, and information needed to establish or defend legal claims. You may unsubscribe from marketing emails using the link in any message and may opt out of text messages by replying STOP. Requests concerning End-Customer Data are referred to the relevant client under Section 2.2.

    12. THIRD-PARTY SITES AND SERVICES

    The Services rely on third-party platforms and may link to third-party websites whose privacy practices we do not control. Their privacy policies, not this one, govern information they collect directly from you.

    13. CHANGES TO THIS POLICY

    We may update this Policy from time to time. The Effective Date above reflects the most recent revision. Material changes will be posted on the Website or presented in the portal, and continued use of the Services after a revision constitutes acceptance.

    14. CONTACT US

    Rain of Eden Enterprises LLC — 3508 South Waverly Place

    admin@rainofeden.com  |  813-564-1440