Privacy Policy

Information You Provide

Inquiries and contact forms. When you reach out about a project, we collect your name, email address, business name, and whatever details you share about what you're looking to build.

Client and membership information. If we work together, we collect what's needed to deliver and manage your website: billing details, business information, brand assets, content, credentials you choose to share for project work, and communications between us.

Payments and subscriptions. Payments — including recurring membership billing — are processed by Stripe. We never see or store your full card number. Stripe's handling of your payment data is governed by its own privacy policy at stripe.com/privacy.

Communications. Emails, messages, and feedback you send us.

Free tools: if you run a site check and request the full report, we collect the URL you submit and your email address in order to deliver it.

Free resources: when you request a downloadable resource such as our compliance checklist, we collect your email address and your consent to contact you, along with the date of that consent, so we can send the resource and let you unsubscribe at any time.

Information Collected Automatically

When you visit the Site, we collect standard technical information: IP address, browser type, device type, pages visited, referring URLs, and general usage patterns. We use privacy-respecting analytics to understand how the Site is used. We do not use this data to build advertising profiles.

When you purchase a digital product from us — for example, Directory Stack — we collect and process the following:

• Payment details. Card and billing information is collected and processed by Stripe, our payment processor. We never see or store your full card number. We receive from Stripe a payment identifier, the last four digits of the card, the billing address, the amount, and the customer email address associated with the purchase. Stripe's handling of your payment data is governed by its own privacy policy at stripe.com/privacy.
• Purchase record. We store the purchase in our database, including the email address you used at checkout, the product purchased, the amount paid, the timestamp, and a unique download token linked to your purchase.
• Delivery data. We send you the product download link by email via Resend, our transactional email provider. Resend processes your email address and the message content on our behalf. Resend's privacy practices are available at resend.com/legal/privacy-policy.
• Download activity. When you click your download link, we log the timestamp and download count against your purchase record so we can enforce the delivery limits described in the Product Terms of Service and generate a fresh link if yours expires.
• Storage of the product file. The downloadable product file itself is hosted in private storage with our infrastructure provider (Supabase Storage). Access to the file is served only through short-lived signed URLs generated from a valid download token — the file is not publicly accessible.

Retention. Purchase records are retained indefinitely as part of our financial and tax records. Download tokens expire on the schedule described in the Product Terms of Service. Delivery email content is retained by Resend for the standard retention period defined in their policy.

No marketing use without consent. Your purchase email address is used to deliver the product you bought and to handle support requests you send us. It is not automatically added to a newsletter or marketing list. If you would like to receive future updates or offers, we ask you to opt in separately.

No training use. The purchase data we collect (your name, email, purchase record, download activity) is not sold, shared with advertisers, or used to train AI models.

We use the information we collect to:

• Respond to inquiries and provide quotes
• Build, host, maintain, and optimize client websites
• Process payments, manage memberships, and send invoices and receipts
• Prepare and deliver monthly performance reports to membership clients
• Communicate about your project or plan, including status updates and requests for feedback
• Maintain the security and performance of the Site
• Comply with legal obligations

We do not sell your personal information. We do not share it with third parties for their own marketing purposes.

When we host or manage a website for you, we work with data about that site's performance — analytics, search indexing data, traffic stats — to maintain it and prepare your monthly reports. In doing so, we may have access to your business data and, in some cases, data about your site's visitors or customers. In those situations:

• We act on your instructions and use that data only to deliver the agreed work.
• Visitor and customer data belongs to you; we process it on your behalf and don't use it for our own purposes.
• You remain responsible for having the legal right to share that data with us and for your own privacy obligations to your site's visitors (including maintaining your own privacy policy).
• We delete or return credentials and project data after an engagement or membership ends, except where we need to retain records for legal, accounting, or dispute-resolution purposes.

We use modern software tools, including automation and AI-assisted tools, in parts of our internal workflow — drafting, analysis, and routine maintenance tasks. Information you submit through the Site's contact forms is not used to train AI models, and we don't submit your sensitive business data to third-party tools beyond what's needed to deliver the Services.

We share information only in these circumstances:

Service providers. We use trusted third parties to operate our business: Stripe (payments and subscriptions), Vercel (hosting and analytics), and Resend (email delivery). These providers process data only as needed to perform their functions.

Legal requirements. We may disclose information if required by law, subpoena, or legal process, or to protect the rights, safety, or property of our business, our clients, or others.

Business transfers. If our business is sold or merged, information may transfer as part of that transaction. We'd notify you of any change in ownership that affects your data.

The Site uses a minimal set of cookies and similar technologies necessary for the Site to function and for basic analytics. We do not use third-party advertising cookies. You can control cookies through your browser settings; disabling them may affect how parts of the Site work.

Opt out. If you would like to opt out of cookies, ask what is stored on your device, or have us remove anything we hold tied to your visit, email hello@thedigitalbackoffice.com and we will handle it within five business days.

We keep inquiry information for as long as needed to respond and follow up. We keep client records (contracts, invoices, project communications, reports) for as long as needed for business, tax, and legal purposes — generally up to seven years. You can request deletion at any time, and we'll honor it except where we're legally required to retain records.

We use industry-standard measures to protect your information, including encrypted connections (HTTPS), access controls, and reputable infrastructure providers. No method of transmission or storage is 100% secure, but we take protecting your data seriously and limit access to what's necessary.

You can:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your information, subject to legal retention requirements
• Opt out of marketing emails at any time using the unsubscribe link or by emailing us

Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act (CCPA) or the EU/UK General Data Protection Regulation (GDPR), including the right to data portability and the right to lodge a complaint with a supervisory authority. To exercise any right, email us at hello@thedigitalbackoffice.com. We'll respond within 30 days.

The Site and Services are intended for businesses and adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we'll delete it.

The Site may link to other websites, including client projects in our portfolio. We are not responsible for the privacy practices of other sites. Review their policies before providing information.

We may update this Privacy Policy from time to time. When we do, we'll update the effective date at the top of this page. Material changes will be noted on the Site. Continued use of the Site after changes take effect means you accept the updated policy.

Questions about this Privacy Policy or your data?

The Digital Back Office
Email: hello@thedigitalbackoffice.com
United States