Privacy Policy

Who we are

HelloSavvy ("we", "us", "our") is a boutique software studio operating at hellosavvy.design. We build custom websites, go-to-market systems, and software for small businesses. This policy explains how we handle information when you visit our site or use our client portal at app.hellosavvy.design.

Information we collect

Information you give us directly. When you book a call, purchase a Blueprint, or create an account in the client portal, we collect your name, email address, and any details you share about your project.

Authentication data. Our client portal uses Google OAuth and email magic links (via Supabase Auth). We store your email address and the name provided by your identity provider. We never see or store passwords.

Usage data. We may log standard server-side request data (IP address, browser, pages visited) for security and performance purposes.

How we use your information

• To provide and manage the services you have engaged us for.
• To give you access to project documents, status updates, and communications in the client portal.
• To respond to enquiries and schedule calls.
• To send transactional emails (sign-in links, project updates). We do not send marketing email without your consent.
• To comply with legal obligations.

Sharing your information

We do not sell your personal information. We share it only with the service providers necessary to operate our business:

• Supabase: database and authentication hosting.
• Vercel: website and application hosting.
• Stripe: payment processing for Blueprint purchases. We do not store card details.
• Google: OAuth sign-in, if you choose to use it.

Each provider has their own privacy policy and processes data only as needed to deliver their service.

Data retention

We keep your account data for as long as your relationship with HelloSavvy is active. You may request deletion at any time by emailing us. We will remove your personal data within 30 days, except where we are required by law to retain it.

Security

All data is transmitted over HTTPS. Access to the client portal requires authentication; document storage uses private, signed URLs. We follow industry-standard practices to protect your information, but no system is completely immune to breach.

Your rights

You have the right to access, correct, or delete the personal information we hold about you. To exercise these rights, contact us at the address below.

Cookies

Our site uses only functional cookies required for authentication (session tokens). We do not use advertising or tracking cookies.

Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects when it was last revised. Continued use of our services after an update constitutes acceptance.

Contact

Questions about this policy? Email us at hello@hellosavvy.design.