Privacy should be clear.

Draft for review — not an approved production policy. Effective date pending approval. This policy describes how Flarello Digital's website and private project workspace are designed to handle information. Review the policy against actual production hosting and third-party integrations before launch.

What we collect

When you use our project inquiry form, we may collect your name, business name, email address, phone number, requested service, and message. When a client project is created, our team may store a project brief, notes, and work product related to that project.

How we use it

We use the information to respond to inquiries, discuss project scope, provide requested services, manage projects, and maintain records necessary for those purposes. We do not sell customer inquiry information.

Where information is stored

The preview application is hosted on Render. Inquiries and project records use a connected Supabase database. Public inquiry submissions remain disabled during preview. The owner-only workspace requires authentication. The website and workspace use HTTPS. No service can guarantee absolute security.

AI-assisted production

If AI services are enabled for a project, relevant project briefs, notes, and drafts may be sent to the configured OpenAI and xAI API services to produce content and feedback. We should remove unnecessary sensitive information before those calls. Each provider's data handling terms apply to its service. AI processing is not enabled unless we configure provider API credentials.

Email and payments

Business correspondence uses Namecheap Private Email. Resend is configured to deliver owner notifications about website inquiries to our business inbox when public inquiries are enabled. Those notifications can include the contact details and project message submitted in the form. Public inquiries remain closed during final launch checks, and online payments are not currently enabled.

Cookies

The private owner workspace uses an authentication cookie to maintain the administrator's signed-in session. Public marketing pages do not currently include advertising pixels or analytics scripts. Hosting providers may record technical request information, including IP addresses and timestamps, for security and operations.

Information retention and requests

Contact us to ask about correcting or deleting your inquiry information, subject to any legitimate business or legal retention requirements. Our hosting infrastructure and operational procedures may affect how deletion requests are implemented.

Contact

For privacy questions, contact hello@flarello.com.

This initial policy is a practical draft for business review and is not legal advice.