What we can show you today.

Data we collect

Account and demo requests collect a name, email, phone, and company. The site also stores technical logs such as IP address and browser type, and, if you do not reject them, Google Analytics measurements. Message content on the platform is described in the privacy policy. This page does not add a new category.

Sub-processors in the code

• Vercel

  [[PLACEHOLDER: confirm Vercel as a sub-processor]]

• Resend

  [[PLACEHOLDER: confirm Resend as a sub-processor]]

• Cloudflare Turnstile

  [[PLACEHOLDER: confirm Cloudflare Turnstile as a sub-processor]]

• Google Analytics

  [[PLACEHOLDER: confirm Google Analytics as a sub-processor]]

• Overmountain chat

  [[PLACEHOLDER: confirm Overmountain chat as a sub-processor]]

• The scheduler (Calendly when a booking link is set)

  [[PLACEHOLDER: confirm the scheduler as a sub-processor]]

Messaging compliance

• 10DLC registration is part of the platform offer. Brand and campaign data goes to The Campaign Registry, as the privacy policy states.
• SMS from the operator console requires documented consent. The qualify form records an unticked reminder opt-in. It does not send a text.
• Commercial email from the site goes to our own inbox, with a reply address, which is the CAN-SPAM path this site implements. The scheduler sends booking mail, not this site.

Security practices in the code

• HSTS is set on responses, with includeSubDomains.
• The content security policy locks scripts, frames, and connections to the services this site loads. Frame ancestors are none.
• Calendly webhooks are HMAC-signed and rejected when the timestamp is stale.
• Every public form runs a honeypot, a three-second timing check, and Cloudflare Turnstile when the keys are set.

Uptime

[[PLACEHOLDER: uptime target and support hours]]

Certifications

[[PLACEHOLDER: do not claim SOC 2 or other certifications until confirmed]]

Accessibility

Pages are built to be used from the keyboard, with visible focus, labels tied to fields, and motion that stops when the visitor asks for less of it. We do not publish a conformance certification.

Request a DPA or security questionnaire