Privacy, in plain language
What this site collects
If you send the free audit form, we get what you typed: your company name, an optional website or profile link, the email address or phone number you gave us, how you want to be contacted, and anything you wrote about what feels broken. The site asks for nothing else.
The site also uses Google Analytics to count visits and see which sections and buttons get used. Analytics events never include your name, email, phone number, or anything you typed into the form. Google Analytics sets cookies to do its counting; it can still see your IP address and browser details, which is why we do not describe it as anonymous.
Who processes it and why
We do not sell your information, share it with advertisers or list brokers, or add you to a newsletter you did not ask for. We do use a few services to receive and store what you send. The four services that handle the form itself may not use it for their own purposes. Google Analytics never receives form contents and runs under Google's terms.
| Service | What it does with your form |
|---|---|
| Supabase (database hosting) | Stores the audit request as a lead record so it cannot be lost if an alert fails. |
| Resend (email delivery) | Emails a copy of your request to Joshua. |
| Twilio (text messaging) | Sends Joshua a short text alert with your company name and the contact you gave. If you chose text, the reply may come from Joshua's own phone or through the same texting service. |
| Vercel (website hosting) | Serves the site and runs the form handler. Standard server logs apply. |
| Google Analytics | Counts visits and button use. Receives no form contents. |
How it is used
Your contact information is used for one thing: to reply about your audit, by the method you chose. If you chose text, we text you about your audit and nothing else. Message and data rates may apply; reply STOP at any time to opt out. If the conversation turns into work together, the same details move into the project record.
How long it is kept
Audit requests are kept while the audit is open and for up to twenty-four months after our last contact, so a follow-up conversation has its context. After that they are deleted. Ask sooner and it is deleted sooner.
Who can see it
Joshua Hill and the people who help him run the office, plus the services listed above acting on our instructions. The lead record sits in an access-controlled account; the public website cannot read it back.
Cookies
Google Analytics sets cookies to count visits. If you block cookies in your browser, the site and the form work exactly the same.
Questions, corrections, or deletion
Want your information corrected or deleted, or have a question about any of this? Send the audit form with "privacy request" in the notes, or reply to any message you received from us. A privacy request is not treated as an audit request; it is handled by a person within one business day and then deleted along with the rest.