We only collect what we actually need to do the work you hired us for.
We don't sell your data.
There are no advertising trackers on this site. Cloudflare is used for basic analytics.
We hang onto records only as long as we need them or the law requires, then they're gone.
You can ask to see what we have on you, fix it, or have it deleted, any time.
Section 2
What We Collect
Account data - your name, email, phone, organization, billing address. Needed to deliver service and invoice you.
Operational data - server logs (IP, user agent, timestamps), authentication events, and error reports. Used only for operating and securing the service.
Section 3
How We Use It
Only for: (a) doing the work you hired us for, (b) billing for that work, (c) operating this website and customer portal securely, (d) complying with legal obligations.
Section 4
How We Store It
Account, engagement, and billing data live in encrypted, access-controlled systems hosted in the United States. Passwords are hashed with argon2id. Customer-visible sessions are stored server-side and cookies are HttpOnly, Secure, and SameSite=Strict.
Section 5
Sharing
Our payment processor (Stripe).
Our DNS, web security, and analytics provider (Cloudflare).
Sub-processors listed in your engagement agreement as needed to provide services requested by you.
Law enforcement only when compelled by valid legal process, and only the minimum responsive to that process. We will notify you unless prohibited by law.
We do not share your data with advertisers or data brokers.
Access the personal information we hold about you.
Correct inaccurate information.
Delete information, subject to legal retention requirements.
Receive a portable copy.
Object to processing.
Section 7
Breach Notification
If we determine that a security incident has affected your data, we will notify you without unreasonable delay and, where required by law, within the applicable legal window. Notification will include what happened, what data was involved, what we are doing, and what you can do.
Section 8
Children
This service is not directed to children under 13, and we do not knowingly collect personal information from them.
Section 9
Customers Outside the United States
We do not market to, or provide services for, businesses or individuals outside of the United States.
Section 10
Changes
We will post changes here and, for material changes, also notify account holders by email at least 30 days before they take effect.
