Privacy Policy

Who We Are

JS Bongiovanni Company ("JSBC," "we," "our," or "us") is a U.S.–Italy cross-border accounting and tax consulting firm. We operate offices in the United States and Italy and serve clients internationally.

U.S. Office: 4616 N Drake Ave, Chicago, IL 60625
Italian Mailing Address: Corso Umberto I, 78, 92020 San Biagio Platani (AG), Italy

What Information We Collect

We collect information you voluntarily provide when you:

• Fill out a contact form on our website
• Book a consultation through our scheduling system
• Complete the pre-meeting questionnaire
• Use our tax assessment quiz
• Subscribe to receive communications from us

This information may include:

Data Type	When Collected
Name, email address	Contact form, booking, quiz
Phone number	Contact form (optional)
Tax situation details	Pre-meeting questionnaire, quiz
Filing status, income range	Tax assessment quiz
Preferred contact method	Contact form
Audio and video recordings of consultation calls	Scheduled consultations
Written transcripts of consultation calls	Scheduled consultations
AI-generated summaries, notes, and derived insights from consultation calls	Scheduled consultations

How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and provide the services you request
• Prepare for scheduled consultations
• Record, transcribe, summarize, and analyze consultation calls (see "Consultation Call Recording and AI Processing" below)
• Generate internal lessons learned, training material, and knowledge-base entries from consultation content
• Send you relevant follow-up information related to your inquiry
• Improve our advisory quality, internal processes, website, and services

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Consultation Call Recording and AI Processing

When you book and attend a consultation with JSBC, you acknowledge and expressly consent to the following:

• Recording. The full audio and, where applicable, video of the consultation is recorded using Fireflies.ai or a comparable meeting-intelligence service. Recording typically begins when the meeting starts and ends when it concludes.
• Transcription. The recording is automatically transcribed into a written record of the conversation.
• AI processing. The recording, transcript, and any associated notes may be submitted to artificial intelligence and large language model services (which may include providers such as OpenAI, Anthropic, Google, or comparable vendors) to generate summaries, action items, follow-up emails, structured notes, redacted case studies, internal training material, knowledge-base entries, and similar derived outputs. These outputs may themselves be stored and reused.
• Storage. Recordings, transcripts, and AI-generated derivatives are stored on JSBC systems and on the third-party platforms identified in the "Third-Party Services" section below. They may be retained indefinitely for advisory continuity, quality assurance, training, lessons-learned libraries, and legal and regulatory recordkeeping, subject to your rights described in this policy.
• Internal reuse as "lessons learned". Insights extracted from consultations — including anonymized or de-identified patterns, recurring questions, model fact patterns, and worked examples — may be incorporated into JSBC's internal knowledge base, training materials, AI assistants, and team enablement resources, and used to improve future client advisory work.
• No public disclosure of identifying details. JSBC will not publish content that personally identifies you (such as your name, contact information, or specific identifying facts) without your separate, prior written consent. General insights, anonymized examples, and aggregated learnings derived from consultations may be used in internal and published material.
• Confidentiality. All recording, transcript, and AI-derived content is treated as confidential client information and is subject to JSBC's professional confidentiality obligations.

By scheduling a consultation, attending the call, and/or remaining on the call after being notified that recording is in progress, you provide your informed consent to the recording, transcription, AI processing, storage, and internal reuse described above. If you do not consent, please notify us in writing before the call begins (privacy@jsbc.it) and we will either conduct the meeting without recording or reschedule.

You retain the right at any time to (i) withdraw consent for future recordings, (ii) request access to recordings or transcripts of meetings in which you participated, and (iii) request deletion of recordings, transcripts, and AI-derived material that personally identify you, subject to legitimate business and legal-retention exceptions described in "Data Retention" below.

Third-Party Services

Our website, client engagement, and consultation workflow use the following third-party services that may process your data, including (where indicated) recordings, transcripts, and content derived from consultation calls:

Client engagement, document handling, and communications

Service	Purpose	Privacy Policy
TaxDome	Tax practice management — secure client portal, document collection and storage, tax-return delivery, e-signature, engagement letters, billing, messaging	taxdome.com/privacy
HubSpot	CRM, lead management, marketing automation, and client communications	legal.hubspot.com/privacy-policy
Microsoft 365 (Outlook, OneDrive, Teams, SharePoint)	Business email, document storage and sharing, calendaring, video conferencing, and internal collaboration. Files, emails, and call recordings related to your matter may be stored on Microsoft cloud infrastructure.	privacy.microsoft.com/privacystatement
OpenPhone	Business telephony and SMS — calls and texts with our team may be logged, recorded (where lawful), and transcribed	openphone.com/privacy
Calendly	Consultation scheduling	calendly.com/privacy
Formspree	Website form submission processing	formspree.io/legal/privacy-policy

Recording, transcription, and AI processing

Service	Purpose	Privacy Policy
Fireflies.ai	Consultation call recording, transcription, and AI summarization	fireflies.ai/privacy
OpenAI	AI processing of transcripts, notes, summaries, and derived insights	openai.com/policies/privacy-policy
Anthropic (Claude)	AI processing of transcripts, notes, summaries, and derived insights	anthropic.com/legal/privacy
Google (Gemini / Google AI)	AI processing of transcripts, notes, summaries, and derived insights	policies.google.com/privacy
n8n	Workflow automation — routing of form submissions, lead alerts, and data between the systems listed in this policy	n8n.io/legal/privacy
Supabase	Backend database and file storage — stores form submissions, article content, and chunked transcripts/embeddings used for our internal AI knowledge base	supabase.com/privacy
Pushover	Internal staff notifications when new leads or messages are received	pushover.net/privacy

Hosting, analytics, and advertising

Service	Purpose	Privacy Policy
Vercel	Website hosting and edge delivery	vercel.com/legal/privacy-policy
GitHub	Source-code hosting for this website (does not process visitor personal data, but listed for transparency)	github.com privacy statement
Google Tag Manager	Tag management — loads the analytics and marketing tags listed below	policies.google.com/privacy
Google Analytics (GA4)	Site-traffic and behavior analytics (loaded via Google Tag Manager)	policies.google.com/privacy
Microsoft Clarity	Session replay and heatmap analytics to help us understand how visitors use the site	privacy.microsoft.com/privacystatement
Meta (Facebook) Pixel	Conversion measurement and audience targeting on advertising landing pages	facebook.com/privacy/policy
Google Fonts	Typography	policies.google.com/privacy

This list reflects the third-party services in use as of the "Last updated" date above. JSBC may add, substitute, or remove comparable AI, transcription, CRM, telephony, document-management, hosting, analytics, or workflow vendors over time. Where a new vendor is materially different in nature from those listed above, we will update this Privacy Policy.

Cookies and Tracking

Our website uses Google Tag Manager (which may load Google Analytics, Microsoft Clarity, and HubSpot tracking) and the Meta (Facebook) Pixel for analytics, attribution, and advertising-conversion measurement on certain pages. You can decline non-essential cookies via the cookie banner shown on first visit. Third-party embeds (Calendly, Google Fonts) may set their own cookies according to their respective privacy policies listed above.

Data Security

We take reasonable measures to protect your personal information from unauthorized access, alteration, or destruction. Our website is served over HTTPS, and form submissions are transmitted securely. However, no method of internet transmission is 100% secure, and we cannot guarantee absolute security.

Your Rights Under GDPR

If you are located in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your personal data
• Right to restrict processing — request that we limit how we use your data
• Right to data portability — request your data in a structured, machine-readable format
• Right to object — object to our processing of your personal data

To exercise any of these rights, contact us using the information below.

Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Contact form submissions and consultation records are retained for the duration of our business relationship and for a reasonable period afterward for legal and administrative purposes.

Consultation call recordings, transcripts, and AI-generated summaries may be retained for the duration of the engagement and afterward for advisory continuity, quality assurance, internal training, lessons-learned libraries, and legal or regulatory recordkeeping. Anonymized or de-identified insights extracted from those materials — i.e., insights that no longer reasonably identify you — may be retained indefinitely as part of JSBC's internal knowledge base. You may request deletion of personally identifiable recordings, transcripts, and AI-derived material at any time, and we will honor such requests subject to overriding legal-retention obligations and ongoing-engagement needs.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us and we will promptly delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this page periodically.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, you can reach us at:

• Email: privacy@jsbc.it
• Phone (U.S.): +1 312-614-1337
• Phone (Italy): +39 333-861-5627