What do we collect?
We collect what you enter in the project form: name, email, optional phone and company, service, investment range, timeline, and project description. We may also record campaign source, landing page, referring host, a non-reversible network address fingerprint, and limited browser information for abuse prevention. The separate privacy-rights form asks only for name, email, request type, and a short explanation.
Why do we use it?
We use the data to assess fit, understand the need, communicate about it, prepare scope or a proposal when agreed, and protect the form from automated abuse. A project request does not automatically subscribe you to marketing.
Session cookies and local storage
We use an essential encrypted session cookie to protect the form and retain its result. When campaign tags are present in a link, the browser may keep them temporarily for the session so a request can be attributed to its source. The site currently runs no third-party advertising cookies or external analytics and does not sell tracking data.
How long is it kept?
We keep a request as needed to review, communicate, and document the decision. An inactive inquiry is normally deleted or de-identified within 24 months unless work begins or a contractual or legal duty requires longer retention. Privacy requests and completion records are retained only as needed to evidence the response.
Your choices and rights
You may ask to access, correct, delete, or object to processing of your data where the law permits. Use the short privacy request form and enter the email associated with your earlier request; unrelated project fields are not required, and we may need additional verification before acting.
Security and boundaries
We use input validation, rate limits, CSRF protection, and storage separated from operational customer records. Never send passwords, access keys, customer records, trade secrets, or identity documents through a public form.