Privacy Policy

We count page views so we can see which pages are read. For each view we store the page address, the website you came from (its name only, not the full link), whether you were on a phone, tablet or computer, and your country.

We do not store your IP address or your browser's details, and we do not put a cookie or any other identifier on your device. To tell two visitors apart on the same day, the server makes a one-way scrambled value from your IP address, your browser type and the date. It cannot be turned back into your IP address, and it changes every day, so it cannot be used to recognize you tomorrow or to follow you to another site.

The contact form asks for your name, your email address and what you would like help with. You can also tell us your business name, phone number, type of business, current website, what is frustrating about how things run now, the features you are interested in, a rough budget and a timeline. Only your name, email, business type and a description of what you need are required.

What you send is delivered to us by email so we can reply. We use it to answer you and, if you go ahead, to scope and quote the work. We do not add you to a mailing list.

To do the work and bill for it we keep:

• your contact details — name, business name, email, phone number and billing address;
• your invoices, the service agreement for your project, and any written reports and files we send you;
• a record of each email and text message we send you about an invoice or a report, as it was sent;
• the payments recorded against your invoices.

When you accept or decline an invoice or a service agreement online, we record the name you typed, the email address you gave, the date and time, the option and payment method you chose, and the IP address and browser the response came from. That record is the evidence of what was agreed, by whom and when, and it is kept with the document.

Invoices, agreements and reports are shared with you through private links that cannot be guessed. Anyone who has a link can open that document, so keep it to yourself and to the people you want to see it.

Card payments are processed by Stripe. You enter your card details on Stripe's own page or in Stripe's secure form on the invoice; they go directly to Stripe and never pass through or get stored on our systems.

Stripe tells us whether the payment went through, the amount, a reference number, the card brand, the last four digits, and whether the card is a credit, debit or prepaid card. We keep the amount, the reference and the card type with the payment record. We never receive or store your full card number, expiry date or security code.

Stripe handles your payment information under its own privacy policy, at stripe.com/privacy.

We text clients only if they have agreed to it, and only about their own invoices — that an invoice is ready, has been updated, or is overdue. Message frequency varies with your invoices. Message and data rates may apply.

Reply STOP to any message to stop receiving texts, or HELP for help. Agreeing to texts is never a condition of working with us.

We do not sell or share mobile phone numbers, or the fact that you agreed to receive texts, with anyone for their own marketing.

• to reply to you and to scope, quote and carry out the work;
• to issue invoices and agreements, take payment and keep accounting records;
• to send you updates about your project and your invoices;
• to understand in aggregate how the site is used;
• to keep the site and client records secure and to prevent fraud;
• to meet legal, tax and accounting obligations.

We do not sell personal information, and we do not use it for advertising.

We use a small number of companies to run the site and the business. Each receives only what it needs to do its part:

• Vercel — hosts the website;
• Neon — hosts the database that holds client records, invoices and page-view counts;
• Resend — delivers email, including inquiries sent through the contact form;
• Twilio — delivers text messages to clients who agreed to them;
• Stripe — processes card payments.

We may also disclose information if the law requires it, or to protect our rights, our clients or others from fraud or harm. If the business is ever sold or reorganized, client records would pass to the new owner under the same commitments.

The public pages of this site set no cookies.

When an invoice can be paid by card, Stripe's payment form may set its own cookies on the invoice page. Stripe uses them to prevent fraud and to make the payment work.

The private administration area, which only we use, sets one cookie to keep us signed in.

Inquiries are kept for as long as they are useful for answering you. Client records, invoices, payments and signed agreements are kept for as long as we need them for accounting, tax and legal purposes, and to be able to show what was agreed. Page-view counts contain nothing that identifies a person.

You can ask us to delete information we hold about you. We will, except where we are required to keep it — for example an invoice or a signed agreement we must retain for our records.

You can ask what information we hold about you, ask us to correct it, or ask us to delete it. Email hello@sitesbynu.com. Depending on where you live you may have further rights under your local privacy law, and we will honor them.

You can stop text messages at any time by replying STOP.

The site is served over an encrypted connection. Client records sit behind a password-protected administration area, sign-in sessions are stored only in hashed form, and documents are shared through unguessable links rather than attachments. No system is perfectly secure, and we cannot promise that information will never be accessed without authorization, but we work to prevent it and will tell affected clients if it happens.

This site is for businesses and the adults who run them. We do not knowingly collect information from anyone under 18.

If what we collect or how we use it changes, this page will be updated and the date at the top will change with it.

Questions about this policy, or about information we hold about you: hello@sitesbynu.com.

Sites by Nu is operated by J KISS LLC, based in Dallas–Fort Worth, Texas.