Privacy

Updated October 25, 2026.

Website inquiries

The contact form saves your name, email, optional business name, selected service and design direction, and message to a private Supabase database. Coastal Web Works uses these details to respond and manage your project inquiry. Submitting the form does not subscribe you to marketing. Call and text links open your device’s phone or messaging app.

Hosting and service providers

Cloudflare hosts this website and runs its server functions. Supabase provides authentication and database storage. These services may process technical request information, including IP addresses, to deliver and secure the website. Inquiry rate limits use a hashed identifier rather than storing the raw IP address in the inquiry record. This website uses system fonts and has no added analytics or advertising trackers.

Cookies and browser storage

Signing in sets two essential, secure, HTTP-only session cookies. These let the server verify access to your workspace; they are unavailable to page scripts. Access cookies last up to one hour and the refresh cookie up to eight hours, renewed when a session is refreshed. Signing out clears these cookies in that browser. No analytics or advertising cookies have been added.

The public site stores a non-personal inquiry receipt in session storage to display its thank-you message for ten minutes. It does not store your form details in browser storage. Animation preferences last only while the page is open. Essential sign-in cookies are described here; there is no optional tracking to accept or reject.

Client and owner workspaces

Client accounts are created by the owner. Each client can view their own assigned projects, submit change requests, and read replies. Other clients cannot access these records. The owner can manage all client accounts, projects, inquiries, and requests. Pausing a client account removes that account’s portal access without deleting its records.

The separate owner business dashboard is restricted to the authorized owner. Customer accounts cannot view its internal records or financial information. Current signed-in records are not saved to local storage by this version. Previous local preview records, if any, remain in that browser until removed. Exported backups are files under your control; keep them secure.

Private setup links allow account password creation or reset. Keep them confidential and share them only with the intended client. Do not include passwords, payment card details, or highly sensitive information in inquiries or change requests.

Retention and your choices

Inquiry and project records are retained while needed to respond, deliver services, maintain business records, or meet applicable obligations. This version does not automatically delete records on a fixed schedule. To request access, correction, or deletion of your information, email [email protected]. We will review the request, verify identity where appropriate, and explain any records that must be retained.

PayPal payments

The payments page links to PayPal. When you follow the link or scan the code, PayPal processes your payment and payment details under its own terms and privacy policy. Coastal Web Works does not collect card numbers or security codes through this page. Payments are checked manually; the link does not start recurring billing.

AI assistance

AI assistance is enabled for the signed-in owner. When the owner asks an AI question, the question and selected saved workspace fields are sent through a server-side function to OpenAI. These may include business names, task and project descriptions, dates, statuses, and financial amounts, with up to the latest 100 records in each supported category.

Dedicated email, phone, website URL, and free-form notes fields are omitted from the workspace snapshot. Questions and included text fields are sent as entered, so avoid putting sensitive information in them. The server requests store: false; this does not guarantee zero provider retention. Provider processing and retention remain subject to their applicable terms and settings.

AI answers do not directly change records or send communications. Supported action commands prepare a local draft; a record is written only after the owner confirms it in the review form. API credentials stay in server-side settings and are not included in AI questions.

Service providers and contact

Learn more from Cloudflare, Supabase, OpenAI, and Google.

Privacy questions: [email protected].