What we collect, and why

• Your brief — business details, services, contact info, and the answers you give in our forms. We collect it because it's literally the material we build your website from.
• Photos and logos you upload — stored so we can put them on your site.
• Support email — messages to support@plainsmith.co and our replies, kept so we have the history of your account.
• Domain searches — the names you type into our domain checker are sent to public registry servers (RDAP) to check availability. We cache results briefly for speed; we don't build profiles from them.
• Payments — handled by Stripe. Your card details go to Stripe, not to us; we see the payment status and receipt details.

What we don't do

• We don't sell or rent your information to anyone.
• We don't run advertising trackers or third-party analytics cookies on this site.
• We never identify visitors: websites we host report aggregate visit counts back to us (page viewed, referring site, rough location) so the owner can see their traffic in their account. No cookies, no names — a visitor identifier rotates daily and can't be traced back to a person.
• We don't use your content for anything except building and supporting your site (your finished site may appear in our portfolio unless you ask us not to — see Terms).
• We don't share your brief with anyone beyond the processors named below.

Where it lives

Briefs and support records are stored on Cloudflare infrastructure (databases and file storage) in the United States. Payments live in Stripe. When your site goes live, its content is served from Cloudflare's network. When we send you a new-brief notification internally, it goes through Pushover (name and email only).

How long we keep it

For as long as you're a customer, plus a reasonable wind-down period so you can come back for your files. If you never become a customer, briefs are deleted within 12 months.

Your rights

Email support@plainsmith.co and we'll send you a copy of what we hold about you — or correct it, delete it, or export it, your choice — usually within 7 days. If you're in a jurisdiction with formal privacy rights (GDPR, CCPA and friends), those requests are honored the same way, no forms required.

Changes

If this policy changes in a way that matters, we'll note it here with a new date, and email active customers about anything material.