Privacy Policy

We collect information that you choose to give us and certain technical information generated when you visit the Website.

Information you provide

When you submit our contact form, we collect:

• Your name and email address
• Your company or organization name, if you give one
• The project type, budget range, and timeline you choose
• Your message and any other information you choose to share

Each submission also records the date and time it was sent and the page of the Website it was sent from.

If you contact us by email, phone, or text message, we collect your contact details and the information exchanged in those communications.

If we send you a link to review a quote, invoice, or agreement and you accept or sign it online, we record the name and email address you enter, the date and time, your IP address and browser details, and a fingerprint of the document you accepted, as a record of what was agreed.

Please do not submit passwords, payment card details, protected health information, sensitive personal records, or highly confidential business information through our contact form. If your project requires sharing sensitive information, contact us to discuss appropriate arrangements.

Information collected automatically

When you visit the Website, our hosting, analytics, and security providers process technical information such as:

• IP address and approximate location (such as country, region, and city)
• Browser, operating system, and device type
• Pages visited and the referring website
• Request times and technical diagnostic information, such as error and security reports from your browser
• Website performance measurements, such as how quickly pages load

Some of this information is processed as part of normal website hosting and security operations. Our analytics and performance tools give us aggregated, anonymous statistics, not profiles of individual visitors.

We use information collected through the Website to:

• Respond to inquiries, messages, and requests
• Understand prospective projects and business needs
• Communicate about proposals, services, and potential engagements
• Keep records of business correspondence, quotes, and agreements
• Operate, maintain, and improve the Website
• Analyze Website usage and technical performance
• Detect spam, fraud, security threats, and misuse
• Comply with legal obligations and protect our legitimate business interests

We do not sell your personal information or use Website visitor information for cross-site targeted advertising. Submitting a contact inquiry does not sign you up for a marketing mailing list.

Information you submit through our contact form is used to evaluate and respond to your inquiry, including any related project discussions and follow-up communications.

When you send the form, your submission is delivered to our business email by Twilio SendGrid and recorded as a new inquiry in our internal business management system, where we keep track of prospective projects, quotes, and clients. Only we sign in to that system, and nothing in it is published.

Cloudflare Turnstile checks that the form is being sent by a person rather than an automated program (see section 4). To limit repeated submissions, the Website’s server also briefly holds your IP address in temporary memory. Your IP address is not saved with your submission.

Submitting the contact form does not establish a client relationship, service agreement, or nondisclosure agreement. If you later become a client, additional information may be collected and processed under the applicable service agreement and related privacy or data protection arrangements.

We use trusted third-party services to run the Website and our business communications. These providers process information as needed to perform their services for us, under their own agreements and privacy practices.

Vercel

Vercel hosts the Website and our internal business management system, and provides website analytics and performance monitoring. Its hosting infrastructure processes technical request information, including IP addresses, to deliver pages and protect the Website.

Vercel Web Analytics records page views with the page visited, the referring website, approximate location, browser, operating system, and device type. It does not use cookies. It tells visits apart by a hash of the incoming request, which Vercel discards after 24 hours, so it cannot follow you over time or across other websites.

Vercel Speed Insights records anonymous performance measurements, such as how quickly a page loaded, with the page, browser, operating system, device type, connection speed, and country.

Neon

Neon hosts the database of our internal business management system, which stores contact form submissions and the quote, invoice, and agreement records described in section 1.

Cloudflare

Cloudflare provides our domain name (DNS) services. Website traffic does not pass through Cloudflare’s network; it goes directly to Vercel.

Cloudflare Turnstile protects our contact form against spam and automated submissions. It loads only on the contact page, runs when that page opens, and evaluates technical signals such as your IP address, browser and device characteristics, and the website it is running on. When you send the form, our server confirms the check with Cloudflare, including your IP address. Cloudflare uses these signals to tell people from automated programs and to improve its bot detection, as described in its Turnstile Privacy Addendum.

Twilio SendGrid

Twilio SendGrid delivers contact form submissions from the Website to our business email.

Google

Google Workspace provides our business email, and Google Voice provides our business phone number. Google processes and stores the emails, calls, and text messages you exchange with us.

Sanity

Sanity stores the Website’s text and images, which our hosting retrieves from it. Your browser does not connect to Sanity, and information you submit through the contact form is not sent to Sanity.

Where information is processed

We are based in the United States, and our service providers process information in the United States. Some providers may also process information in other countries where they operate.

We may change our service providers as the Website and our business evolve, and will update this Policy when we do.

The Website does not set cookies for visitors. We do not use advertising cookies or any technology intended to follow you across unrelated websites.

Website analytics

Vercel Web Analytics and Speed Insights do not use cookies. They provide aggregated information about traffic and performance (see section 4).

Session storage

To avoid replaying the Website’s introductory animation during the same visit, we store a single setting in your browser’s session storage. This setting stays on your device, is not sent to us, and is removed when your browser session ends.

Security checks

On the contact page, Turnstile runs in a frame served by Cloudflare, and Cloudflare may use cookies or similar storage within that frame as part of its check. If Vercel’s security systems need to challenge unusual traffic, they may set a short-lived cookie recording that your browser passed.

Site editors

Pages used only by our team to edit and preview the Website’s content use cookies and browser storage to keep editors signed in. Visitors do not receive them.

Do Not Track and Global Privacy Control

We do not track visitors over time or across other websites, and we do not allow third parties to do so through the Website. The Website works the same way whether or not your browser sends a Do Not Track or Global Privacy Control signal.

You can manage cookies and website storage in your browser settings. Blocking the contact page’s security check may stop the contact form from sending; you can always email us instead.

We do not sell personal information to data brokers or advertisers. We may disclose information in limited circumstances, including:

• Service providers: to providers that help us host the Website, deliver messages, maintain security, and operate our business.
• Legal requirements: when disclosure is required by applicable law, a valid legal process, or a lawful government request.
• Protection and security: when reasonably necessary to investigate misuse, prevent fraud, protect rights or property, or address security incidents.
• Business transfers: if our business is reorganized, merged, or sold, to the successor, who must handle the information consistently with this Policy.
• With your direction: when you ask us or authorize us to share information with another party.

We do not publish contact form submissions or use them to create publicly accessible profiles of prospective clients.

We keep personal information only as long as reasonably necessary for the purposes described in this Policy.

Contact inquiries and related communications are kept in our business email and business management system to manage prospective projects, maintain business records, respond to follow-up requests, resolve disputes, or meet legal obligations. Records of quotes, invoices, and agreements you accept online are kept for as long as needed for the engagement and for our business, tax, and legal records. Retention periods vary with the kind of information and whether a business relationship is established.

When information is no longer reasonably needed, we delete it or otherwise dispose of it appropriately, subject to applicable requirements and technical limitations. Some information may remain for a time in system backups or service providers’ records under their own retention and deletion processes.

We use reasonable administrative, technical, and organizational safeguards intended to protect personal information against unauthorized access, disclosure, alteration, or loss. These include access controls, encrypted connections, infrastructure security measures, and protections against automated misuse.

However, no website, electronic communication, or storage system can be guaranteed completely secure. Please do not send sensitive information through ordinary website forms or email unless appropriate protections have been arranged.

You may contact us to request:

• Access to personal information you have given us
• Correction of inaccurate personal information
• Deletion of personal information we hold
• Information about how your personal information has been handled
• That we stop sending you nonessential communications

We will review and respond to requests in accordance with applicable law and our legitimate recordkeeping obligations. We may need to verify your identity before fulfilling certain requests, to protect against unauthorized access or deletion. Some information may need to be kept for legal, contractual, security, or legitimate business purposes.

Depending on where you live, privacy laws may give you additional rights regarding your personal information. To make a privacy-related request, email hello@cleanslatetech.io.

The Website is intended for business and general informational purposes and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have, we will take appropriate steps to delete it, consistent with applicable law.

The Website may link to external websites, tools, or services that we do not operate. They have their own privacy practices and policies, which we encourage you to review before giving them information. This Privacy Policy does not govern the practices of third-party websites.

We may update this Privacy Policy to reflect changes in our business practices, the Website, our service providers, or legal requirements. When we do, we will update the “Last updated” date at the top of this page. Where required by applicable law, we will give additional notice or ask for your consent before making material changes.

If you have questions about this Privacy Policy or how your personal information is handled, contact us:

Clean Slate Technologies, LLC
Email: hello@cleanslatetech.io
Phone: (470) 208-3076
Website: cleanslatetech.io