Privacy Policy

Information We Collect

Personal Information

We may collect personally identifiable information that you voluntarily provide to us when you:

• Fill out our contact form
• Subscribe to our newsletter or email communications
• Request a consultation or proposal
• Communicate with us via email or phone

This information may include:

• Name
• Email address
• Phone number
• Company name
• Project details and requirements
• Any other information you choose to provide

Automatically Collected Information

When you visit our Site, we automatically collect certain information about your device and browsing behavior, including:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website addresses
• Device identifiers
• Geographic location (country/city level)

Accounts, Site Audits and Documents

Our free site audit and our client dashboard both need an account. This section explains what we keep for each account, where we store it and who can see it.

Signing In

You sign in with Google or with a 6-digit code we email to you, and we never ask for a password. If you sign in with Google, Google shares your name, your email address and a link to your profile picture with us. Your name fills in your details the first time, and we never see your Google password. A sign-in cookie keeps you signed in on that device for up to 30 days, and we record the date you last signed in.

When a new email address asks for a code, we record the IP address the request came from. Its only use is to limit how many new accounts one connection can open, and we clear out records older than a day each time someone new signs up.

Your Contact Details

Your account can hold your name, business name, phone number, website and address. Every field is optional, and you add or change them on your Account page. We can add or correct them for you, and we note the town your business is in. When you run a site audit, we copy the business name and town from the audit form into your account if those fields are empty.

We also keep private notes about our work with you on your account. They do not show on your dashboard, and you can ask us for a copy at any time.

Site Audits

The audit form asks for your business name, the kind of business, your town and the other towns you serve, your website and your Google Maps listing. It also asks for work you don't do and up to two competitors you know. We build your brief from those answers plus public search results, map listings, reviews and the public pages of your website. We keep each brief as a PDF, and you open it from your dashboard.

Each email address gets one free audit. If you delete your account, we still keep a record of your email address and the audit it used. The record stops the same address from claiming a second free audit.

Client Intake and Documents

Clients fill in an intake form about their business, their customers and the site they want, and the form saves each answer as they go. We store the documents we share with you, such as contracts and working files, in private storage that only you and we can open.

Who Sees Your Account

Only you and Beach Bird Studios can see your account, your details and your documents. We do not sell them, and we never show them to another client. To delete your account, email eric@beachbirdstudios.com. We then delete your account and everything in it, including your details, audit briefs, intake answers and documents.

How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your inquiries and provide customer service
• To send you information about our services, including proposals and consultations
• To process and fulfill service requests
• To send marketing communications (with your consent)
• To improve our website and user experience
• To analyze website traffic and usage patterns
• To detect and prevent fraud or abuse
• To comply with legal obligations
• To optimize our marketing campaigns and advertising effectiveness

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Site and store certain information. Cookies are small data files stored on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

Google Analytics 4

We use Google Analytics 4 to analyze website traffic and understand how visitors interact with our Site. Google Analytics collects information anonymously and reports website trends without identifying individual visitors. Google Analytics uses cookies to collect standard internet log information and visitor behavior information.

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout

Google Search Console

We use Google Search Console to monitor and maintain our Site's presence in Google Search results. This service helps us understand search traffic, optimize performance, and troubleshoot indexing issues.

Google Ads Conversion Tracking

We use Google Ads conversion tracking cookies to measure the effectiveness of our advertising campaigns. These cookies help us understand which ads lead to customer actions such as form submissions or phone calls. The conversion tracking cookie is set when you click on an ad served by Google.

Facebook Pixel

We use the Facebook Pixel, a tracking code that allows us to measure the effectiveness of our advertising on Facebook and Instagram. The pixel helps us:

• Track conversions from Facebook ads
• Optimize ads based on collected data
• Build targeted audiences for future ads
• Remarket to people who have already taken action on our Site

You can opt out of Facebook ads by adjusting your Facebook Ad Preferences: https://www.facebook.com/ads/preferences

Sign-In Cookies

Signing in sets cookies that keep you signed in, and the dashboard needs them to work. They end when you sign out or 30 days after you sign in.

Managing Cookies

Most web browsers allow you to control cookies through their settings. However, if you limit the ability of websites to set cookies, you may impact your overall user experience. For more information about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org

Third-Party Services

Resend (Email Service)

Resend sends our emails: replies to our contact form, your sign-in codes and messages about your account and site audit. Resend's privacy policy is at https://resend.com/legal/privacy-policy.

Supabase (Accounts and Storage)

Supabase stores your account, your contact details, your audit records, your intake answers and the documents we share with you. It also checks the sign-in codes we email to you. Supabase's privacy policy is at https://supabase.com/privacy.

Google (Sign-In)

Google confirms who you are when you choose Continue with Google. It then shares your name, email address and profile picture link with us. Google's privacy policy is at https://policies.google.com/privacy.

Cloudflare Turnstile (Bot Check)

Cloudflare Turnstile checks that a person, not a bot, is using our sign-in and contact forms. It reads signals from your browser to make that check. Cloudflare's Turnstile privacy policy is at https://www.cloudflare.com/turnstile-privacy-policy/.

Site Audit Services

Four services build your site audit, and none of them receives your email address. Trigger.dev runs the audit steps, and DataForSEO supplies the search results, map listings and reviews. Claude, from Anthropic, writes the brief from that data, and Vercel stores the finished PDF. Their privacy policies are at https://trigger.dev/legal/privacy, https://dataforseo.com/privacy-policy and https://www.anthropic.com/legal/privacy.

Vercel (Hosting)

Our Site is hosted on Vercel's infrastructure. Vercel may collect technical information such as IP addresses and access logs for security and performance purposes. Vercel's privacy policy can be found at: https://vercel.com/legal/privacy-policy

We carefully select third-party service providers who are committed to protecting your privacy and only use your information as necessary to provide their services to us.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for data transmission
• Secure hosting infrastructure with Vercel
• Regular security assessments and updates
• Limited access to personal information by authorized personnel only
• Secure API key management for third-party integrations

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law. Specifically:

• Contact form submissions: Retained for up to 3 years or until you request deletion
• Email communications: Retained as long as necessary for business purposes
• Analytics data: Aggregated and anonymized data retained indefinitely
• Marketing cookies: Typically expire after 30-90 days
• We keep your account, contact details, audit briefs, intake answers and documents until you ask us to delete them.
• We keep the record of your email address's free audit after you delete your account.
• Each new sign-up request deletes the IP addresses we recorded more than a day before it.

Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

General Rights

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Objection: Object to our processing of your personal information
• Restriction: Request restriction of processing of your information
• Portability: Request transfer of your information to another service
• Withdraw Consent: Withdraw consent for marketing communications at any time

GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with a supervisory authority.

CCPA Rights (California Residents)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including:

• Right to know what personal information we collect, use, and disclose
• Right to request deletion of your personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise any of these rights, please contact us at eric@beachbirdstudios.com. We will respond to your request within 30 days.

Children's Privacy

Our Site is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information from our systems.

Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites you visit that you do not want to have your online activity tracked. At this time, our Site does not respond to DNT signals. However, you can disable cookies and opt out of tracking as described in the Cookies and Tracking Technologies section above.

International Data Transfers

Your information may be transferred to and processed in the United States or other countries where we or our service providers operate. These countries may have data protection laws that differ from those in your country. By using our Site, you consent to the transfer of your information to these countries. We take steps to ensure that your information receives an adequate level of protection in accordance with this privacy policy.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by:

• Posting the new privacy policy on this page
• Updating the "Last Updated" date at the top of this policy
• Sending an email notification (for significant changes)

We encourage you to review this privacy policy periodically to stay informed about how we protect your information.

Contact Us

If you have questions, concerns, or requests regarding this privacy policy or our privacy practices, please contact us:

• Studio

  Beach Bird Studios · Asheville, NC, United States

• Email

  eric@beachbirdstudios.com