Privacy Policy
Clear information about how BrandastraCO handles website, project, agreement, and Client Portal data.
BrandastraCO is operated solely by its owner under the BrandastraCO name in Las Vegas, Nevada, United States. Privacy questions and requests may be sent to brandastraco@gmail.com.
1. Scope
This policy explains how BrandastraCO handles information submitted through this website, secure agreement pages, the invitation-only Client Portal, and communications connected with BrandastraCO services.
2. Information collected
Depending on how you interact with BrandastraCO, information may include:
- Name, business name, email address, phone number, service area, website, domain, and social-page information.
- Project goals, requested services, pages and features, budgets, timelines, design preferences, content, images, and messages.
- Client, project, maintenance, invoice, and administratively recorded payment information. Payments occur outside this website; BrandastraCO does not currently collect card numbers, bank-account credentials, government IDs, or Social Security numbers through the website, Admin, or Portal.
- Portal authentication identifiers, approved email, membership status, access timestamps, notification status, and client-visible project or service records.
- Agreement invitations and acceptance evidence, including signer name and email, business name, typed signature, language, consent, agreement version, terms hash, agreed pricing, request identifier, and server-recorded acceptance time.
- Transactional email delivery status and provider message identifiers.
- Form/request identifiers, timestamps, and reasonable infrastructure, security, and error logs.
- A Web Push subscription endpoint and related browser keys only if optional Web Push is enabled and permission is granted.
3. How information is collected
Information is received when someone submits a form, communicates with BrandastraCO, becomes a client, accepts an agreement, signs in to the Client Portal, submits a maintenance request, or otherwise uses a secured workflow. Public form submissions may be processed by the BrandastraCO server workflow and, when needed, Netlify Forms fallback processing.
4. How information is used
Information is used to answer inquiries, prepare quotes, provide and support contracted services, administer projects and Website Care, maintain Portal access, process maintenance requests, present invoices and recorded payment status, document agreements, deliver transactional messages, prevent abuse, protect the service, maintain internal business records, and satisfy legitimate contractual, accounting, dispute-resolution, security, and legal obligations.
5. Providers and disclosure
BrandastraCO uses Netlify for hosting, server functions, and form fallback; Supabase for authentication and database services; Resend for transactional email; and jsDelivr to deliver the Supabase browser library. These providers process information under their own terms and privacy practices. Information may also be disclosed when reasonably necessary to comply with law, protect rights or security, or complete a client-authorized service.
Admin and client business data is currently accessed only by the owner. BrandastraCO has no employees or contractors with such access. BrandastraCO does not sell client information or use it for lead resale.
6. Browser storage, cookies, and analytics
The public website stores a language preference in local storage. Supabase authentication uses persistent browser storage to maintain authorized Admin and Client Portal sessions. The current website does not intentionally use Google Analytics, advertising pixels, or advertising cookies. Infrastructure providers may use their own essential security, delivery, and operational technologies.
7. Email and notifications
BrandastraCO may send inquiry receipts, direct replies, Portal setup and recovery messages, optional one-time login codes, agreement invitations and receipts, service notices, and other transactional communications. These messages support an inquiry, account, agreement, or client relationship and are not marketing campaigns. Important Portal notifications may supplement email but do not replace a notice required by a specific agreement or applicable law.
8. Security
BrandastraCO uses authentication, restricted memberships, row-level database security, server-side authorization, expiring agreement links, hashed agreement tokens, and other reasonable safeguards. No internet or storage system can be guaranteed completely secure. Portal credentials must not be shared, and suspected unauthorized access should be reported promptly.
9. Retention
Information is retained for as long as reasonably necessary to provide services, operate and secure the business, maintain contractual and agreement evidence, preserve legitimate accounting and business records, resolve disputes, and meet legal obligations. Different records may require different retention periods. Agreement acceptance evidence may be preserved as an immutable business record. Backups and provider logs may remain for a limited period after primary records change or are removed.
10. Access, correction, and deletion requests
Requests may be sent to brandastraco@gmail.com. BrandastraCO may verify the requester’s identity and authority before acting. A request may be limited when records reasonably must be preserved for an agreement, accounting, security, dispute resolution, legal obligations, or protection against fraud. Where complete deletion is not appropriate, correction, restriction, or reasonable de-identification may be considered.
11. Legal capacity and business authority
BrandastraCO does not knowingly direct its business services to children. A person submitting binding instructions or accepting an agreement must have the legal capacity to do so and authority to act for the business they represent where applicable.
12. Changes and language
This policy may be updated prospectively as services or legal requirements change. Material changes will be communicated reasonably where appropriate. A Spanish translation is provided for convenience; if there is a material conflict, the English version controls to the extent permitted by applicable law.
13. Contact
BrandastraCO · Las Vegas, Nevada, United States · brandastraco@gmail.com