Privacy Policy

POLD (“we”, “us”) provides digital design and development services through this website and the POLD client portal. This policy explains what information we collect, why we collect it, and the choices you have. It applies to the website, the client portal, and the communication that happens through them.

We collect information you provide directly:

• Account information — your name, email address, optional phone number and company or brand name, and a password (stored only in hashed form by our authentication provider — we never see or store your plain-text password).
• Project requests — the details you submit when requesting a project: project type and name, description, desired features, reference links, budget range, and timeline.
• Maintenance requests — the request type, priority, description, and any links to screenshots or files you choose to share with us.
• Inquiries — anything you send through the contact form or by email.

We also process a limited amount of technical information needed to operate the website securely: authentication session cookies, server logs, and anonymized (hashed) network identifiers used for rate limiting and abuse prevention. We additionally collect aggregated, non-identifying usage statistics (such as which pages are visited) through an analytics service, as described below. We do not run advertising or cross-site tracking.

We use the information above to:

• Create and secure your client account, including verifying your contact details (currently your email address) with one-time codes.
• Review, respond to, and manage your project requests.
• Communicate with you about your projects, including status updates.
• Handle maintenance requests for completed projects.
• Provide customer support.
• Keep the website and portal secure — for example, preventing abuse through rate limiting.
• Improve our services.

We do not sell personal information.

We rely on a small number of service providers to run the website and portal. They process information only as necessary to provide their services on our behalf:

• Database & authentication — Supabase stores account, project, and request data, and handles authentication.
• Hosting — Vercel hosts the website and processes requests to serve it.
• Transactional email — Resend delivers account and project emails, such as verification codes and status updates.
• SMS delivery — Twilio delivers phone verification codes by SMS, where phone verification is in use.
• Analytics — Google Analytics measures aggregate website usage, such as page views and general traffic patterns. We have disabled advertising features and personalization signals, and we never send it your name, email, phone number, or the contents of your requests.

Each provider operates under its own terms and privacy policy. We do not use advertising or cross-site tracking services on this website.

We retain personal information only as reasonably necessary to provide our services, maintain your account, fulfill business and contractual purposes, meet legal obligations, resolve disputes, and keep our systems secure. When information is no longer needed for these purposes, we delete or anonymize it.

We take reasonable technical and organizational measures to protect personal information — including encrypted connections (HTTPS), hashed password and verification-code storage, and access controls that restrict each account to its own data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to respond appropriately if an issue arises.

You can:

• Access and update your profile information from your account settings.
• Request a copy of the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and associated personal information, where we are not required to retain it.
• Withdraw consent for optional processing, where processing is based on consent.

Depending on where you live, local law may give you additional rights. To exercise any of these rights, contact us using the details below.

This website uses two kinds of cookies:

• Essential cookies — authentication session cookies that keep you logged in to the client portal, set by our authentication provider.
• Analytics cookies — cookies set by Google Analytics to distinguish visits in aggregate statistics. They are not used for advertising or cross-site tracking, and you can block them in your browser settings without affecting how the website works.

We do not use advertising cookies or third-party tracking cookies.

We may update this policy as our services evolve. The latest version is always available on this page, with the date of the most recent update shown at the top. For significant changes, we will take reasonable steps to notify account holders.

For privacy questions or to exercise your rights, contact us at agencypold@gmail.com or through the contact page.