Privacy Policy
Frac7 collects only the information needed to respond to inquiries, operate invited client workspaces, and deliver agreed services.
Information we collect
Inquiry forms collect your name, work email, brand, advertising-spend range, and any details you choose to provide. Invited portal accounts use your email address and connection metadata. When you authorize a supported provider, access credentials are encrypted in Supabase Vault and are not exposed to the browser.
Public pages use Vercel's cookieless analytics to count page views and record coarse technical context such as referring site, country, and device type. They also load Google Tag Manager to manage public-page measurement tags. Google Tag Manager does not itself set analytics cookies; the Google Analytics tag may set first-party analytics cookies and process information under Google's applicable policy. Microsoft Clarity may process public-page interaction data, such as clicks, scrolling, and session behavior, under Microsoft's applicable policy. Authenticated client portal pages do not load these services.
How we use information
We use information to respond to requests, administer client access, operate authorized integrations, monitor connection health, prevent abuse, and meet legal obligations. We do not sell personal information.
Service providers and transfers
Frac7 uses Vercel for website hosting and cookieless Web Analytics, Google Tag Manager and Google Analytics for public-page measurement, Microsoft Clarity for public-page behavior analytics, and Supabase for authentication, database, and encrypted secret storage. These providers process data under their own security and privacy commitments. Data may be processed in the United States.
Retention and security
Inquiry and client records are retained only while needed for the relationship, security, or legal requirements. OAuth state is short-lived and single-use. Client sessions are invitation-only, database access is protected by row-level security, and provider tokens are encrypted at rest.
Your choices
You may request access, correction, or deletion of your information, subject to legal exceptions. You may disconnect an integration from the client portal and should also revoke access in the provider account when the portal identifies manual revocation as required.
Contact
Email privacy or data requests to christian@frac7.com.