Skip to content
Start a project

Draft for review by a Utah attorney. Not legal advice.

Privacy Policy

Last updated: [DATE] · Version 1.0 (draft)

Snowpine Code LLC (“Snowpine Code”, “I”, “me”) is a one-person Utah company in Spanish Fork, Utah. I build websites, booking and sales apps, and automations for small businesses. This policy explains what I collect, why, and what you can ask me to do with it. It covers:

  • snowpinecode.com, including the “start a project” questionnaire.
  • Client pages at trailhead.snowpinecode.com (private links for quotes, and later invoices and previews).
  • Lodge, my private business app where I keep client records. Only I can sign in to it.

It does not cover the sites and apps I build for clients. Each client has its own policy for its own customers.

Questions or requests: kevin@snowpinecode.com.

The short version

  • I collect what you send me and a little technical info needed to keep things safe.
  • I use it to understand your project, quote it, build it and support it.
  • I don’t sell your info or share it for ads. No ad trackers, no cookies for tracking.
  • You can ask to see, fix or delete your info any time.

What I collect

When you fill out the questionnaire

  • Your name, business name, email, phone, the best way and time to reach you.
  • Your answers about your business and what you need, your website address, timing and budget.
  • Voice notes you choose to record or upload.

When you open a quote link

  • That the link was opened, when, and how many times (so I know you got it).

When you accept a quote

  • The name you type and the signature you draw.
  • The date and time, which items you accepted or declined, and the totals.
  • Your browser’s “user agent” (a short line saying which browser and device type, like “iPhone, Safari”).
  • A scrambled version of your IP address (a one-way hash mixed with a random code that changes daily and is deleted after about 2 days). I never store your actual IP address. The hash only lets me tell whether two acceptances came from the same place on the same day, which helps prevent fraud.

When you email or text me

  • Your messages and anything you attach. Email goes through Google Workspace.

When you visit snowpinecode.com

  • I use Cloudflare Web Analytics, which counts visits without cookies and without tracking you across sites. It sees things like the page, the referring site, country, and browser type.
  • My hosting provider (Cloudflare) keeps standard security logs, which can include IP addresses, to block attacks.

When you’re a client

  • Project details, the accounts I’m a helper on, invoices and payments (amount, date, method). I don’t collect card numbers. If you pay by card, the payment company handles it under its own policy.
  • I never ask for or store your passwords.

How I use it

  • To read your request, follow up, write your quote and do the work.
  • To keep records of what was agreed and paid (contracts, invoices, taxes).
  • To support your project and let you know about anything important (like a renewal coming up).
  • To keep my sites safe and working.

AI tools

I do my work with AI tools (like Claude, by Anthropic) under my direction. I may use them to summarize your questionnaire answers, draft your quote, or build your project. Voice notes are turned into text on my own computer. I don’t put passwords, payment details or your customers’ personal info into AI tools. [VERIFY: the AI account Kevin uses is set so it does not train on his data.]

Who else touches your info

Only the companies that help me run my business, and only as needed:

  • Cloudflare (hosting, database, file storage, security, web analytics, email routing)
  • Google Workspace (email, documents and files)
  • Netlify (the current questionnaire and quote pages, until they move to Cloudflare) [REMOVE AFTER THE MOVE]
  • Anthropic (AI tools, see above)
  • 1Password (my password manager; your info only if you share an access code with me)
  • Apple and Google push services (to send notifications to my own phone; they see only short alerts)
  • Payment companies you choose to pay with (Venmo, Zelle, [CARD PROCESSOR])

I may also share info if the law requires it, to protect my rights or someone’s safety, or if the business is ever sold or merged (and I’d tell you first).

How long I keep it

  • Questionnaire answers and voice notes, if we don’t work together: deleted within [12] months.
  • Voice notes, if we do work together: deleted [90] days after the project launches. I keep the written transcript with your project notes.
  • Client records (quotes, acceptances and signatures, invoices, payments, the agreement): kept for [7] years after the work ends, for taxes and business records.
  • Analytics: Cloudflare’s own retention. It isn’t tied to your name.
  • Backups age out on their own schedule, usually within [30] days.

Your choices and rights

You can ask me to:

  • Show you the info I have about you, or send you a copy.
  • Fix anything that’s wrong.
  • Delete your info. I’ll delete what I can and tell you if I have to keep something (like a signed agreement or payment record for taxes).
  • Stop sending you anything other than messages about your project.

Email kevin@snowpinecode.com from the address I have for you, or text me. I’ll reply within [5] business days and finish within [30] days. I may ask a simple question to confirm it’s you.

The Utah Consumer Privacy Act likely doesn’t apply to a business my size, but I’ll honor these requests for anyone, anywhere. I don’t sell personal info, use it for targeted ads, or make automated decisions about you.

Security

Client pages use long, random private links. Only a scrambled version of each link is stored, so the link itself can’t be read from my database. Lodge is behind a sign-in only I can pass. Data is encrypted in transit (HTTPS). No system is perfectly safe. If something ever goes wrong that affects your info, I’ll tell you promptly and as the law requires.

Anyone who has your quote link can open it. Please don’t forward it. If you think someone else has it, tell me and I’ll turn it off and send a new one.

Children

My services are for businesses and adults. My sites aren’t meant for anyone under 18, and I don’t knowingly collect info from children under 13. If you think a child sent me info, email me and I’ll delete it.

Changes

If I change this policy, I’ll update the date at the top. If it’s a big change, I’ll tell current clients by email.

Source: docs/legal/PRIVACY-POLICY.md. Questions about these terms? Ask in the questionnaire or reply to your quote.