Privacy policy
Last updated September 26, 2026
In short: I collect only what I need to work with you, I don't sell or share it, there's no advertising or tracking, and you can see, download or delete your information. Tim Hultz ("I", "me") runs this site from Suffolk, Virginia.
What I collect
- From the Start a project form: your name, email, phone (if given), business details and what you tell me about your project.
- If you have a client account: your name, email, a scrambled (hashed) version of your password, your requests, messages, approvals and files, and your email settings.
- For security: sign-in times, the device and browser you use, and your IP address, kept in a security log.
- Invoices: handled by Stripe. I see what was paid and when, but never your full card number.
How I use it
- To reply to you, do the work you ask for, and keep you updated.
- To send emails you'd expect: sign-in codes, replies, updates and invoices. No marketing emails.
- To keep the portal secure and to investigate problems.
Who else handles it
A few trusted services run parts of the portal for me. Each one only gets what it needs, and each holds an independent SOC 2 report:
- Vercel (hosting and file storage)
- Neon (the database)
- Resend (sending email)
- Stripe (invoices and payments)
- Cal.com (booking calls, only if you use it)
I never sell your information, and I don't use advertising or tracking tools.
Cookies
The portal uses only cookies it needs to work: one that keeps you signed in, one that remembers a device you chose to trust, and two that remember your display settings (larger text and light mode). There are no tracking or advertising cookies, so there's no cookie banner.
How long I keep it
- Project inquiries that don't become projects: deleted after 1 year.
- Client accounts: kept while we work together. After a client relationship ends, messages and files are deleted after 1 year.
- Invoice and payment records: kept for 7 years for tax purposes.
- Security logs: kept for 2 years.
Your choices and rights
You can ask to see, correct, download or delete your information at any time. Signed-in clients can download their data and delete their account from the Account page. Anyone can email support@thultz.dev and I'll respond within 30 days. These rights apply to everyone, including under the Virginia Consumer Data Protection Act and similar laws in other states. You won't be treated differently for using them.
Security
See how I keep your data safe. If something ever goes wrong with your information, I'll tell you promptly.
Children
The portal is for businesses and isn't meant for anyone under 16.
Changes
If this policy changes in a way that matters, I'll email clients before it takes effect.
Contact
Tim Hultz, Suffolk, Virginia. support@thultz.dev