Privacy Policy

Information you give us

We collect the information you choose to submit through our forms:

• Project inquiry (including Website Rescue requests): the type of project, business name, website or social link, a description of what you want, budget range, timeline, your name, email, and (optionally) phone number, plus the care plan or Website Rescue fix you chose, if any.
• Free website check: the website you want reviewed, your email, and (optionally) your name and notes.
• Website Launch Package intake: your order reference, email, business and contact details, service area, services, desired pages, brand colors, links to your assets, social or review links, example sites, the contact details you want displayed, your domain status, and any notes.
• Filter Engine early-access application: your creator type, platforms, audience size (optional), a description of the character you want, style, whether you have existing artwork, a reference link (optional), your camera and OBS setup, the package you're interested in, your target launch timing, creator/channel name (optional), name, email, and notes.

Our forms do not accept file uploads. If you share links to files (for example a Google Drive folder), we access only what you choose to share through that link.

Information collected automatically

When you submit a form, we also record the page you submitted it from, the referring page, any campaign parameters in the link you used (such as utm_source), and your browser's user-agent string. This helps us understand where inquiries come from and protects the forms from spam.

Our server uses your IP address briefly to limit repeated submissions; we don't store it with your submission. Like most websites, our hosting provider keeps standard server logs, which include IP addresses.

We use analytics to understand how the site is used:

• Vercel Web Analytics, for aggregated page-view statistics. It does not use cookies.
• Google Analytics 4, when enabled and outside the regions listed under “Cookies and your choices,” for usage and conversion events (for example, starting or submitting a form, or completing a Website Launch Package checkout). Google Analytics uses cookies.

To decide whether Google Analytics may load, the site checks which country (and, in Canada, which province) your connection comes from, using our hosting provider's location data. We don't store it.

Payments

Payments for the Website Launch Package are processed by Stripe on Stripe-hosted checkout pages. We never receive or store your card number.

When a payment completes, Stripe notifies our server. We keep a record of the checkout session: its status, the amount and currency, and the order reference that links it to your intake form. Stripe also gives us the name and email address you used at checkout, which we include in our internal payment notification.

Stripe's handling of your payment information is governed by Stripe's own privacy policy.

How we use information

• To respond to your inquiry or application and to scope, quote, and deliver projects.
• To match a paid Website Launch Package order with its intake details.
• To send ourselves an internal notification when a new form is submitted.
• To understand and improve the website and our services.
• To prevent spam and abuse of our forms.

We do not sell your personal information, and we do not use it for third-party advertising.

Service providers who process data for us

• Vercel — website hosting, server logs, and page-view analytics.
• Supabase — secure storage of form submissions and payment records.
• Resend — delivery of our internal email notifications about new submissions and payments. These emails go to Wavy Sites, not to you; when we reply, we write to you personally.
• Google (Google Analytics 4, when enabled) — usage and conversion analytics.
• Stripe — payment processing for the Website Launch Package.

These providers process information on our behalf and under their own terms and privacy policies. Some may store or process data outside your state or country.

Cookies and your choices

When Google Analytics 4 is enabled, it sets cookies to distinguish visits. We don't load it for visitors in places that require consent before analytics cookies or tracking are used: the European Union and European Economic Area, the United Kingdom (with its Crown Dependencies and Gibraltar), Switzerland, Andorra, Monaco, San Marino, Vatican City, Türkiye, China, and Québec. Nothing is requested from Google and no analytics cookie is set until our server has confirmed the location; if it can't, Google Analytics stays off.

Our configuration denies advertising-related storage and ad personalization, and no Google Ads tag is loaded on this site.

The site also saves a few small settings in your browser's storage, such as whether you've already seen the intro, whether you paused the video reel, and the order reference that connects a Website Launch Package checkout to your intake form. These aren't cookies and aren't used to track you. Where Google Analytics runs, the site also notes that a completed purchase was already counted, so it isn't counted twice.

You can block or delete cookies and site data in your browser settings, and you can opt out of Google Analytics using Google's browser add-on. The site works without analytics cookies.

How long we keep information

We keep information only as long as we need it. After that we delete it, or anonymize it by removing everything that identifies you. These periods are applied to our database automatically every day:

• Suspected spam submissions: deleted after 30 days.
• Inquiries that don't become a project (project inquiries, Website Rescue requests, free website checks, and Filter Engine applications): anonymized 18 months after the last activity on them.
• Client project records, including Website Launch Package intakes: anonymized 5 years after the project ends, because claims on a written contract can be brought for up to five years under Florida law.
• Payment records: kept for 7 years for tax and accounting purposes, then deleted. They don't include your name or card details.

Copies of our new-lead notification emails are deleted from our inbox 18 months after they arrive; emails about a client project are kept with that project's records. Our email delivery provider keeps its own delivery records for about 30 days.

Where Google Analytics runs, it keeps event-level data for 2 months; reports built from it contain only totals. Our hosting provider keeps server logs for no more than a day.

If information is needed for a legal claim, a dispute, or a legal requirement, we keep it until that is resolved, then apply the periods above. Database backups, where we have them, are replaced within 7 days, so deleted information leaves them within that time.

Your requests

You can ask us to access, correct, or delete the information you've submitted. Send your request through our contact form, or by email to wavyfaithstudios@gmail.com, and tell us which form you used and the email address you submitted. We'll respond within a reasonable time. We delete or anonymize information on request, except records the law requires us to keep, such as payment and tax records, which we keep only for the period above.

Security

Form submissions and payment records are stored in a database that is not publicly accessible and is written to only by our server. We take reasonable measures to protect information, but no method of transmission or storage is completely secure.

Children

This site is intended for businesses and adult creators and is not directed to children under 13. We do not knowingly collect information from children.

Changes to this policy

We may update this policy as the site or our services change. The date above shows when it was last updated.