Privacy Policy
Frac7 collects only the information needed to respond to inquiries, operate invited client workspaces, and deliver agreed services.
Information we collect
Inquiry forms collect your name, work email, brand, advertising-spend range, and any details you choose to provide. Invited portal accounts use your email address and connection metadata. When you authorize a supported provider, access credentials are encrypted in Supabase Vault and are not exposed to the browser.
How we use information
We use information to respond to requests, administer client access, operate authorized integrations, monitor connection health, prevent abuse, and meet legal obligations. We do not sell personal information.
Service providers and transfers
Frac7 uses Vercel for website hosting and Supabase for authentication, database, and encrypted secret storage. These providers process data under their own security and privacy commitments. Data may be processed in the United States.
Retention and security
Inquiry and client records are retained only while needed for the relationship, security, or legal requirements. OAuth state is short-lived and single-use. Client sessions are invitation-only, database access is protected by row-level security, and provider tokens are encrypted at rest.
Your choices
You may request access, correction, or deletion of your information, subject to legal exceptions. You may disconnect an integration from the client portal and should also revoke access in the provider account when the portal identifies manual revocation as required.
Contact
Email privacy or data requests to contactchristiansierra@gmail.com.