Your information. A clear purpose.

Information we collect

Inquiry and onboarding forms collect the fields you supply: name, business name, email, service area, services, website/profile link, selected plan and add-ons, project goal, message, reply consent and submission time. Onboarding may include public business phone/hours, domain and viewable asset links, approved business claims and optional project-capacity information.

Client documents include order details, prices, scope, approvals, the exact accepted document text/version, document hash, signer-provided name and business role, designated email, separate consent choices, signature time, cancellation/handoff requests and change orders. Limited signature audit information includes browser/user-agent text and a hash of a network address when available. Private signing links use random access tokens; the database retains token hashes, not the raw tokens. Necessary browser session storage retains the invitation key for that browser tab so a client can return from secure checkout without putting it in the Stripe return URL.

When configured, Stripe receives payment details on hosted checkout. This website stores payment references, expected amount/currency, mode, processor status and selected transaction/subscription identifiers needed to reconcile the signed order. It does not collect or store full card numbers or security codes. Do not submit passwords, API keys, SSNs, tax-ID numbers, bank/card details, sensitive customer records or regulated data in project forms.

Why we use it

We use information to respond, assess fit, prepare and perform accepted work, retain client records, verify payment, provide support, process cancellation/handoff, secure the service, resolve disputes and meet applicable obligations. An inquiry, signature or setup payment does not by itself start a monthly subscription. Recurring plans require the disclosed consent and activation steps. Reply consent is not a newsletter, bulk-marketing or automated-text subscription.

Sharing and service providers

Authorized operators can access relevant records. Hosting/database and authentication providers, including the Sites platform, OpenAI and Cloudflare, process information needed to operate the service. Stripe processes payment information when connected under its own privacy notice. We may disclose limited information to advisers, a lawful authority, or a successor handling the business where lawful and necessary. We do not sell inquiry information or distribute it to unrelated contractors. No public client endorsement, logo or portfolio permission is implied by a request or purchase.

Cookies, logs and account access

We have not added advertising, behavioral tracking or third-party analytics scripts to this version. Hosting, authentication and Stripe may use operational cookies and technical logs described in their own notices. Owner records are protected by platform sign-in plus server-side owner checks. A client invitation is a private bearer link: anyone who obtains it and has any required platform access may view the specific document. It does not independently verify signer identity. Do not forward it; ask us to revoke or reissue it if needed. Links normally expire after 30 days. No security measure guarantees protection against every incident.

Client operations

For accepted client work, authorized operators also keep client and project details, approval evidence, invoices, payment references, work requests, time entries, notes and operating costs in the private CRM. Records may be archived while preserving their history. Manual CRM payment entries are bookkeeping records; they are not proof that a Stripe charge was made or verified. Separately, Stripe API-verified charges, subscription invoices and completed refunds are linked to the accepted order and mirrored into the CRM. Sandbox records are marked as tests and excluded from normal business totals. Billing records may need to be kept after a project ends.

Retention and deletion

Our operating policy is to review unconverted inquiries after 90 days and remove those no longer needed, unless continuing communication or a legal/security reason supports retention. This is a manual review, not automatic deletion. Active project information is retained while needed to deliver the work. Signed agreements, consent, invoices and material approval/dispute records are generally retained for seven years after the relationship ends under our business-record policy. Unneeded operational copies are generally removed within 90 days after handoff, subject to backup cycles and legal/security holds. Access-link expiration does not erase the retained agreement or payment record.

Your choices and requests

Email hansaninvestmentsllc@gmail.com to request access, correction, deletion, a record copy or a new signing link, or to ask about paper signatures. We may verify authority before releasing information. Applicable law, data type, the request and necessary retention determine what we can fulfill. We explain a refusal or retention need rather than promise universal deletion. Contacting us does not require a public review or phone call.

Client website customer data

This notice covers our agency administration. Each client is responsible for an accurate notice for its website and customer practices. When we handle data for a client, we follow documented service instructions; appropriate data-processing terms and security requirements are identified for that scope. The basic service is not intended for children or regulated/sensitive-data collection. Different agencies and clients may fall under different privacy-law requirements.

Demonstrations and updates

Prospect concepts are independent demonstrations, not client endorsements or official contractor websites. Their demonstration forms do not save or transmit contractor inquiries. Material changes to this notice will be dated here; a webpage update does not retroactively change a signed agreement or authorize new charges.