Privacy policy

What we collect

• What you type into Start a project: your name, business, email, phone if you give it, and your answers about your business and project.
• If you become a client: your sign-in email, the messages, edit requests, forms, and files you send through the portal, and your billing details. Card and bank details are handled by Stripe and never stored by us.
• Basic site analytics: page views, the referring site, and general device and country information. This is counted without cookies and without identifying you personally.

How we use it

• To reply to you, prepare for our call, and build and run your project.
• To send you sign-in codes and notices about your account, such as a new message or invoice.
• To see which pages are useful, so we can improve the site.
• To keep notes from our calls. We record calls with you for that, and say so when you book. Ask us not to and we won't.
• If you connect an account like Google, to run the features you connected it for. We keep the access encrypted, use it for nothing else, and you can disconnect any time from your portal.

We don't sell or rent your information, and we don't use it for advertising.

Who else handles it

A few service providers process data on our behalf: website hosting and analytics, the database and file storage behind the portal, email delivery, and payments (Stripe). They may only use it to provide their service to us. We'll share information if the law requires it.

Cookies and storage

The public site sets no tracking cookies. Signing in to the portal sets a cookie that keeps you signed in. Your light or dark theme choice is saved in your own browser.

How long we keep it

Inquiries are kept while we're talking and for up to two years after. Client records are kept for as long as you're a client and 90 days after you leave, so you can download them, then deleted. Invoices and tax records are kept as long as the law requires, and signed agreements for 7 years. Nightly backups are kept for 35 days.

Your choices

Clients can download their portal records any time from Your account in the portal, as spreadsheets or JSON: business details, messages, edit requests, uploaded files, invoices, quotes, signed documents, and form answers. They can change their sign-in email there too. This covers the information on this page, not a client's website, its code, or their domain: what a client gets when they leave is set out in their service agreement.

Anyone can ask to see, correct, or delete the personal information we have about them: email hello@torynmorgan.com and we'll respond within 30 days. Some records, like invoices, have to be kept for tax purposes.

Security

Everything travels over an encrypted connection. Portal files are private to your account, client sign-in uses one-time codes, and admin access requires two-step verification. No system is perfect, but we take reasonable steps and will tell you promptly if your information is ever affected.

Children

This site is for businesses and isn't directed to children under 13.

Changes

If this policy changes, the date at the top will change too. Clients will be told about any significant change by email.