How we handle the personal data you submit through our forms.

What we collect

When you submit a form on this site — the contact form, the /get-started intake, or another public lead surface — we collect the fields you provide: your name, email address, and the body of your message. We also capture a standard metadata set at the moment the form is posted: a timestamp, the IP address the request came from, and the user-agent string your browser sent.

We do not collect payment details, government identifiers, or sensitive categories of personal data through any of these forms.

How we use it

The data you submit is used to reply to your inquiry, run the qualifying-spec conversation detailed on /pricing, and route any follow-up sales communication. It is not sold, rented, or synced to a third-party marketing list, and it is not used to build advertising profiles of you.

If you ask us a question we cannot answer in-house, we may share your message with a specialist advisor under confidentiality — and we will tell you when that happens.

How it is stored

Submissions are stored in our application database — a managed Postgres instance provisioned and configured by our hosting platform. Access is restricted to operators who hold a valid session, and the application-level controls (auth, audit logging) are the same ones that govern the rest of the app.

We do not store payment data on our own infrastructure — billing flows are handled by a third-party payment provider on its own pages, under its own privacy posture.

Cookies

This site sets a small number of cookies. An authentication cookie is set when you sign in to the dashboard, a theme-preference cookie remembers your light-or-dark choice, and — if the deploy has analytics enabled — an analytics cookie counts aggregate page views. No advertising cookies are set, and no third-party retargeting pixels load on any page.

The /api/contact endpoint — the route the lead forms post to — sets no cookies of its own.

Retention

We retain contact submissions for as long as needed to respond to your inquiry and to operate the business relationship that follows. If you want your submission deleted, email us at the address below and we will remove the record within a reasonable window — and confirm in writing when it is done.

Aggregated, non-identifying analytics may be retained longer than individual records.

Your rights

You can ask us what we hold about you, ask for a correction, or ask for the record to be deleted. Send the request to the email address below; we respond within a reasonable window and confirm the action in writing. While we do not need a government ID to process a request, we may ask for one piece of corroborating information (the email the inquiry came from, for example) so we do not act on a request from someone other than you.

Contact

Questions, deletion requests, and redlines all go to quorum-reach-2@polsia.app. We treat every privacy request as a written record — even the ones that arrive out of band — and we reply in writing when the action is complete.