Privacy

Last updated: August 2026.

What we collect

Form submissions: the URL you submit, your email, optional company, scanner output you paste, and qualification answers. Standard request metadata (IP, user agent) is kept in server logs.

Why

To respond to your inquiry, send your decode or audit, and keep records of who we've spoken with.

Sharing

We don't sell personal data. Submissions are stored in our managed backend. We use a calendar provider for booking and an email provider for delivery.

Sub-processors

We share data with the following third-party processors:

  • Lovable Cloud (Supabase). Stores form submissions, lead records, and application data. Data center: US East. Retention: leads and applications retained until deletion request; scan_requests retained 12 months then purged.
  • Resend. Delivers transactional email notifications. Receives recipient email address and notification content only. No marketing use.
  • Cal.com. Provides booking scheduling for qualified applicants. Receives name and email when a booking is initiated.
  • PostHog (US region). Product analytics. Collects page views and named interaction events. Session recording is disabled. Text masking is enabled. Personal data in URLs is stripped before ingestion. PostHog sets cookies on your browser (name prefix ph_); you can opt out via browser controls.
  • Cloudflare Turnstile. Bot protection on submission forms. Receives the challenge token and request IP only.

No data is sold. No data is used for advertising targeting.

Cookies

We use one analytics cookie set by PostHog (name prefix ph_, purpose: analytics, duration: 1 year). No advertising cookies. You can clear or block it from your browser at any time.

Retention

Active leads are kept while we have a relationship. Stale unqualified leads are deleted on a routine cadence.

Contact

Email us to access, correct, or delete your data.