Privacy Policy

This Policy applies to information processed through our public website, authenticated client portal, booking and payment flows, email and messaging integrations, and related business operations.

It does not apply to third-party websites, app stores, or services you access through links or integrations outside our control. Those providers have their own policies.

You may choose not to provide certain information, but some features (such as account creation, deposits, or file sharing) will not function without it.

• Account & identity: name, email address, authentication identifiers from email/password or linked providers (Google, Apple), and profile settings you choose to save.
• Project & booking data: project names, descriptions, consultation dates and times, voice or text briefs, uploaded files, messages, invoices, and payment status.
• Payment data: transaction amounts, receipt metadata, and tokens handled by our payment processor (Square). We do not store full card numbers on our servers.
• Communications: emails, portal messages, support requests, and email-reply content integrated into the portal thread.
• Technical data: IP address, browser type, device information, pages viewed, and analytics events collected through standard web technologies.
• Cookies & local storage: session preferences and authentication state necessary to operate the portal.

• Provide, operate, and secure the website and client portal.
• Process consultation deposits, invoices, and project records.
• Communicate about bookings, projects, deliverables, and account matters.
• Authenticate users and prevent fraud, abuse, and unauthorized access.
• Improve our services, troubleshoot issues, and analyze aggregate usage.
• Comply with law, enforce our Terms, and protect our rights and users.
• Send service-related notices. We do not sell your personal information.

We share information with trusted processors who assist our operations, under contractual obligations to protect data and use it only for our instructions. Categories include hosting, authentication, database, storage, payment processing, email delivery, and analytics providers (including Firebase/Google Cloud and Square).

We may disclose information if required by law, subpoena, or legal process; to protect safety and rights; in connection with a merger, acquisition, or asset sale; or with your direction or consent.

We do not share personal information with third parties for their independent marketing purposes.

• Firebase / Google Cloud (authentication, database, storage, cloud functions, analytics).
• Square (payment processing).
• Email delivery and inbound parsing providers used for portal notifications and replies.
• Hosting, CDN, and infrastructure vendors supporting the website and portal.

We retain information for as long as your account is active, as needed to provide Services, resolve disputes, enforce agreements, and meet legal obligations.

Project files, messages, and billing records may be retained for business, tax, and legal purposes after project completion. You may request deletion subject to exceptions described below.

We use reasonable administrative, technical, and organizational measures designed to protect information, including access controls, encrypted transport (HTTPS), and authenticated access to client records.

No method of transmission or storage is completely secure. You are responsible for safeguarding your credentials and notifying us of suspected unauthorized access.

Depending on your location, you may have additional rights to access, correct, delete, or restrict processing of personal information. Submit requests to Stephen@BottaServices.com. We may verify identity before responding.

• Update profile information and notification preferences in portal Settings where available.
• Link or unlink Google or Apple sign-in methods from your account settings.
• Request account deletion through portal Settings, which triggers export and deletion processes subject to legal retention requirements.
• Opt out of non-essential analytics where browser or device settings allow.

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to know categories of personal information collected, request deletion or correction, and not receive discriminatory treatment for exercising privacy rights.

We do not sell or share personal information for cross-context behavioral advertising as defined under California law. Categories collected generally include identifiers, commercial information, internet activity, and professional/project-related information as described above.

Our services are directed to businesses and adults. We do not knowingly collect personal information from children under 13. If you believe a child provided information, contact us and we will take appropriate steps to delete it.

We operate in the United States. If you access our services from outside the U.S., you understand that information may be processed in the U.S. and other countries where our providers operate, which may have different data protection laws than your jurisdiction.

We may update this Privacy Policy from time to time. The effective date at the top will change when we do. Continued use after updates constitutes acceptance. Material changes may be communicated through the portal or email where appropriate.

Privacy questions or requests: Stephen@BottaServices.com. Botta Services LLC, Atlanta, Georgia.