Privacy Policy
Last updated October 28, 2026. Written in plain English as a good-faith draft; it has not yet been reviewed by a lawyer.
Who we are
Brassplate, operated by [OWNER LEGAL NAME: placeholder until provided], a sole proprietor in New York. Reach us through the contact form. Mailing address: [POSTAL ADDRESS: placeholder until provided].
What we collect
- Public business information (name, phone, address, hours, public business email, wording on the business's own website) that we use to build previews and contact businesses.
- What you send us through our forms or by email: your name, email, phone, business details, photos or links, and your message.
- Client records: plan, billing status and correspondence. Card payments are handled entirely by Stripe or PayPal. We never receive full card numbers, and we never ask for Social Security or ID numbers.
- Technical data: like every website, our host (Cloudflare) processes your IP address and basic request data to deliver and protect the site. Our form endpoint uses your IP address briefly, in memory only, to limit repeated submissions. We don't keep it.
Why we use it
To build and send previews, reply to you, build and run your site, bill you, keep records the law requires, and prevent spam and abuse. We email businesses about previews we built for them. Every email says who we are, includes our mailing address and a working way to opt out, and we honor opt-outs the same business day, well within the 10 business days the law allows.
Who processes it (never sold)
We don't sell personal information or share it for targeted advertising. We use only the providers needed to run the service: Cloudflare (website hosting and our form endpoint), FormSubmit, a form-delivery service (our server passes your form message to it for delivery to our inbox; your browser talks only to brassplate.pages.dev), our email providers (our business inbox and Google Gmail for replies), and Stripe or PayPal (payments, for clients only). Each handles data under its own privacy terms. We may disclose information if the law requires it.
Cookies and analytics
This website sets no cookies, runs no analytics, and loads no third-party scripts, fonts or trackers. Fonts and images are served from our own site. Because we don't track you, there's nothing to opt out of, and browser "Do Not Track" or Global Privacy Control signals are effectively always honored.
How long we keep it
- Preview data and prospect contact details: deleted 30 days after a "no" or no reply.
- Form messages from non-clients: deleted within 90 days unless you become a client.
- Opt-out list: kept indefinitely, containing only the email address and date, so we never contact you again.
- Records of emails we sent: 2 years (to show we followed email law).
- Client content: while you're a client, then 1 year (you get an export when you leave).
- Payment and tax records: 7 years, as tax law requires.
Security
We keep as little as we can. Data is sent over encrypted HTTPS, access is limited to the people and systems running Brassplate, accounts use strong unique passwords, and no card or ID numbers are stored. This follows New York's SHIELD Act. If a breach ever affects your private information, we'll notify you and the authorities as New York law requires.
Your choices and rights
Ask to see, correct, or delete what we hold about you, or to stop all contact, through the privacy request form (or reply to any of our emails). We confirm within 1 business day and normally finish the same week, within 30 days at most. We may keep what the law requires (such as tax records) and the minimum needed to honor an opt-out.
Children
Brassplate is a business service for adults. It isn't directed at children under 13, and we don't knowingly collect their information. If you think a child has sent us information, contact us and we'll delete it.
Client websites
On sites we run for clients, visitor enquiries go to the client's own inbox through the same kind of private form endpoint. We don't use or keep copies of those messages. Each client is responsible for how it uses the enquiries it receives.
Changes
We'll post any update here with a new date, and email active clients about material changes.