Privacy Policy

Acceptance of this policy

By using the Services, you acknowledge that you have read this Privacy Policy and agree to its terms. If you do not agree, please discontinue use of the Services. This policy does not apply to third parties we do not own or control.

Information we collect

• Contact form details. When you submit our contact form, we collect the name, email, optional company, project type, and message you provide, so that we can respond and evaluate project fit.
• Technical data. Standard server and security data such as IP address and browser user agent, used for spam prevention, rate limiting, and security.
• Cookies. We use a small number of cookies to operate the Site and, only with your consent, to understand how it is used. See our Cookies Policy for details and controls.

We do not display any email address on this Site, and we do not use advertising or cross-site tracking cookies.

How we use information

• To respond to your inquiry and evaluate project fit.
• To provide, maintain, and improve the Services.
• To protect the Site against spam, fraud, and abuse.
• To send administrative messages related to your inquiry, where relevant.
• To meet legal, accounting, and security obligations.

We process this information based on our legitimate interest in responding to inquiries and operating our business, and, where applicable, your consent in submitting the form or accepting non-essential cookies.

Information sharing and disclosure

We do not sell, trade, or rent your personal information. We may share it only in these limited circumstances:

• Service providers (sub-processors). Trusted providers that help us operate the Services, who process data only as needed to provide their service to us and under a written contract or data processing agreement (DPA). For this public Site these are Vercel (hosting), Resend (transactional email), and Cloudflare (bot protection / Turnstile). Our client portal and admin platform additionally use the following sub-processors: Neon (database), Clerk (authentication), Stripe (payment processing), Cloudflare R2 / Stream (file & video storage), Anthropic (AI features), Zoom (meetings & recordings), Google (calendar connect), Sentry (error monitoring), and Checkly (uptime monitoring). Each processes data only as needed to perform its function, under contract / DPA.
• Legal requirements. When required by law or in response to valid requests by public authorities.
• Business transfers. In connection with a merger, acquisition, or sale of assets, where your information may be transferred as part of that transaction.

AI processing

For clients engaged with us, content such as a project brief or meeting notes may be processed by our AI provider (Anthropic) to help draft proposals and summaries. This content is sent only to generate the requested output and is not used by us or by Anthropic to train any AI models— non-training is the default for Anthropic's API. We minimize personal information in these prompts, sending only what is needed for the task, and we do not send public Site visitors' contact-form submissions to AI services for any automated decision-making.

International data transfers

We are based in the United States and use service providers located in the United States. If you access the Services from outside the U.S., your information may be transferred to, stored, and processed in the U.S. Where required, such transfers are protected by appropriate safeguards — namely Standard Contractual Clauses, or provider data processing agreements that incorporate the Standard Contractual Clauses — with our providers.

Data retention

We retain contact submissions for as long as needed to respond and to maintain business records, then delete or anonymize them. You may request deletion at any time (see “Your rights”).

Your rights and choices

Depending on where you live, you may have rights regarding your personal information, including the right to:

• Access and receive a copy of your personal information.
• Correct or update your personal information.
• Delete your personal information.
• Restrict or object to certain processing.
• Data portability.

To make a request, use the contact form on our Site and we will respond as required by applicable law.

Security

We apply reasonable technical and organizational measures to protect information, including transport encryption (HTTPS), input validation, and access controls. No method of transmission or storage is perfectly secure.

Children's privacy

Our Site and services are not directed to children under 13, and we do not knowingly collect information from them. If you believe a child has provided us information, contact us through the contact form and we will delete it.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above. We encourage you to review this policy periodically.

Contact

Questions about this policy or our privacy practices? Reach us through the contact form. Mailing address: 1070 Montgomery Road, Unit 369, Altamonte Springs, FL 32714.