Privacy Policy

1. What we collect

Information you give us. When you submit the contact form or request a free site audit, we collect your name, email address, optional company and phone, project description, and any other details you choose to share. When you book a discovery call we collect your calendar availability and meeting details. When you become a customer we collect billing information processed by Stripe (we never see or store your card number).

Information collected automatically. Standard server access logs (IP, timestamp, user-agent, page requested) are kept on Cloudflare for security and reliability for up to 30 days. We use privacy-first analytics (Plausible) which does not set tracking cookies and does not collect personal information. We do not use Google Analytics, Hotjar, FullStory, or any session-replay tooling on this Site.

Cookies. The Site uses only first-party functional cookies required to operate (e.g. remembering whether you accepted this privacy notice). We do not use third-party advertising cookies.

2. How we use your information

• To respond to your inquiries and deliver any audit, demo, or service you request
• To deliver, operate, secure, and improve the Services if you become a customer
• To send transactional emails (audit reports, contact-form receipts, billing notices)
• To prevent fraud, abuse, and security incidents
• To comply with legal obligations

We do not sell, rent, or trade your information. We do not send marketing email unless you have opted in.

3. Sharing with subprocessors

We rely on the following service providers to operate the Site and Services:

• Cloudflare — DNS, CDN, edge security
• HostGator — static hosting for the marketing Site
• Cloudflare Workers — contact form and audit form processing
• Mailgun — transactional email delivery
• Stripe — payment processing if you become a customer
• Cal.com — discovery call scheduling
• Plausible Analytics — privacy-first traffic analytics
• Fly.io — application hosting for our productized services (sushinearme.online, learnnearme.app)
• Turso — database hosting for productized services

Each subprocessor is bound to confidentiality and processes information only as necessary to provide its service. We give customers at least 30 days' notice of any change to this list as part of the Master Services Agreement.

4. How long we keep it

• Contact form submissions: 24 months from receipt, then deleted
• Audit form submissions: 12 months, then deleted
• Server access logs: 30 days at Cloudflare
• Customer account and billing records: as required by tax/accounting law (typically 7 years)
• Email correspondence: until the matter is closed plus a reasonable retention period

5. Your rights

Depending on your jurisdiction you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your information
• Object to or restrict certain processing
• Receive a portable copy of your information
• Lodge a complaint with a supervisory authority

To exercise any of these rights, email [email protected]. We respond within 30 days.

6. Security

The Site enforces TLS 1.2+ in transit, HSTS, a strict Content Security Policy, X-Frame-Options DENY, X-Content-Type-Options nosniff, and a Permissions-Policy that disables camera, microphone, geolocation, and other powerful features by default. Form submissions are rate-limited and validated server-side at Cloudflare. Customer data on our Services is encrypted at rest and segregated per tenant. No system is perfectly secure; we will notify affected customers without undue delay (and within 72 hours) of any confirmed breach affecting their data.

7. Children

The Site is not directed to children under 13 (or under 16 in the EU/UK). We do not knowingly collect personal information from children. If you believe a child has submitted information, contact us and we will delete it.

8. International users

Silverwolf is based in the United States. If you access the Site from outside the US, your information will be transferred to and processed in the US. Where required, we rely on Standard Contractual Clauses for international transfers.

9. Changes to this policy

We may update this policy. The "Last updated" date at the top reflects the most recent change. For material changes that affect existing customers, we will provide notice by email or in the customer dashboard at least 30 days before the change takes effect.

10. Contact

Questions or requests? Email [email protected] or use our contact form.