On this page 15 sections

Draft. This page still needs final drafting and attorney review, and it may change before launch. We won't take payment until the final version is live. Questions: support@fornaxopsuites.com.

Fornax OpSuites Privacy Policy

Last Updated: September 2026

1. Introduction

Fornax (“we,” “us,” “our,” or “Company”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

A. Information You Provide Directly

Registration & Website Build Information:

  • Business name, owner name, contact email, phone number
  • Business address, service areas, hours of operation
  • Services you offer and descriptions
  • Logo, photos, testimonials, customer reviews
  • Pricing information, guarantees, special offers
  • Google Business ID, social media handles (optional)

Payment Information:

  • Name, billing address, card number (processed securely by Stripe)
  • We do NOT store full credit card numbers; Stripe handles that

Support Communications:

  • Emails, support tickets, chat messages you send us
  • Feedback, complaints, or suggestions about our service

Onboarding & Calls:

  • If we hold an onboarding or monthly check-in call with you, we may record it (with your consent)
  • Call recordings are kept confidential and used only for quality assurance

B. Information Collected Automatically

Server & Hosting Data:

  • IP address of visitors to your site
  • Browser type and version
  • Pages visited, time spent, navigation patterns
  • Device type (mobile, desktop, tablet)
  • Geographic location (city/country level)
  • HTTP referrer (where visitors came from)

Analytics:

  • Google Analytics data (if you enable it on your site)
  • Traffic trends, bounce rates, conversion metrics
  • Search keywords that led visitors to your site

Technical Logs:

  • Server error logs
  • SSL/certificate information
  • Backup and restore logs
  • Site uptime and performance data

3. How We Use Your Information

To Provide Services:

  • Build and maintain your website
  • Process payments and billing
  • Provide customer support
  • Send service updates and maintenance notifications

To Improve Our Service:

  • Analyze usage patterns to improve our platform
  • Test new features and optimizations
  • Troubleshoot technical issues
  • Measure service quality and uptime

To Communicate With You:

  • Domain renewal reminders (if we registered your domain)
  • Billing invoices and receipts
  • Support responses to your questions
  • Platform updates and new features

For Legal & Compliance:

  • Comply with legal obligations
  • Enforce our Terms of Service
  • Protect against fraud or abuse
  • Respond to law enforcement requests

We Do NOT:

  • Sell your data to third parties
  • Use your data for marketing purposes without consent
  • Share your content with other customers
  • Rent your email list or customer data

4. Data Retention

Your Website Content:

  • Retained as long as your subscription is active
  • After you cancel, retained 90 days and then deleted
  • Backups are kept for 30 days
  • Prospect (unconverted lead) records are deleted or anonymized after 12 months
  • Data under a legal hold is kept until the hold ends

Server Logs & Analytics:

  • Server logs retained for 90 days, then deleted
  • Google Analytics data retained per your Google Analytics settings
  • Site visitor IP addresses NOT stored long-term

Support & Communication Records:

  • Kept for 2 years for dispute resolution
  • Deleted after 2 years unless required by law

Payment Information:

  • Stripe retains payment information per their privacy policy
  • We do not retain full credit card numbers

5. Data Security

How We Protect Your Data:

Encryption:

  • All site traffic uses HTTPS (SSL certificate)
  • Data in transit is encrypted with TLS 1.2 or higher
  • Sensitive credentials (for example CRM connection tokens) are encrypted with AES-256; our infrastructure providers also encrypt stored data at rest

Access Control:

  • Fornax staff access is restricted to authorized personnel only
  • We use role-based access control (engineers, support, admins have different permissions)
  • All access is logged for audit trails

Backups:

  • Daily automated backups of your site
  • Backups are stored on separate secure servers

Infrastructure:

  • Hosted on Cloudflare (sites, DNS, CDN), Supabase (database and authentication) and our backend cloud provider; these providers hold their own security certifications, which are not certifications of Fornax
  • Cloudflare provides DDoS protection and a web application firewall

However:

  • No security measure is 100% guaranteed
  • We cannot guarantee absolute protection against all attacks
  • You are responsible for keeping your credentials secure

6. Third-Party Data Sharing

We Share Data With:

Service Providers:

  • Cloudflare (hosting, DNS, CDN, storage): your site content and visitor data
  • Supabase (database and authentication): account and lead data
  • SendGrid (email): notices and lead alerts
  • Stripe (payments): billing information only
  • Google Analytics: visitor analytics (if you enable it)

Legal Compliance:

  • Law enforcement (if required by valid legal process)
  • Courts (if required by lawsuit or subpoena)
  • Government agencies (if required by law)

Business Transfer:

  • If Fornax is acquired or merges, your data may be transferred to the new owner
  • You will be notified if this occurs

Your Control:

  • You can disable Google Analytics on your site anytime
  • You can request deletion of your data (see section 8)
  • You can export your site data anytime

7. Your Data Rights (GDPR & CCPA)

If You Are In Europe (GDPR):

  • Right to access: request a copy of your personal data
  • Right to correct: request corrections to inaccurate data
  • Right to delete: request deletion (“right to be forgotten”)
  • Right to restrict processing: limit how we use your data
  • Right to data portability: receive your data in a portable format
  • Right to object: object to processing for marketing purposes
  • Right to withdraw consent: withdraw consent anytime (with notice)

If You Are In California (CCPA):

  • Right to know: request what personal information we collect
  • Right to delete: request deletion of personal information
  • Right to opt-out: opt out of “sale” of personal information (we don’t sell it)
  • Right to non-discrimination: we don’t discriminate for exercising these rights
  • Right to correct: request correction of inaccurate data

To Exercise These Rights:

8. Cookies & Tracking

Cookies We Use:

  • Session cookies: keep you logged in during support sessions
  • Preference cookies: remember your settings
  • Analytics cookies: track site performance (Google Analytics)

Cookies We Don’t Use:

  • No tracking pixels or cross-site tracking
  • No third-party ad networks
  • No behavioral targeting cookies

How to Disable:

  • Most browsers allow you to disable cookies in settings
  • Disabling cookies may break some site features
  • Do-Not-Track (DNT) browser signals are respected

9. Children’s Privacy

Fornax is not intended for children under 13. We do not knowingly collect information from children under 13. If we learn a child under 13 has provided information, we will delete it immediately.

If you are a parent/guardian and believe your child provided information, email: support@fornaxopsuites.com

10. International Data Transfers

Your data may be transferred to, stored in, and processed in countries other than your country of residence. By using Fornax, you consent to the transfer of your data to the United States and other countries where our service providers operate.

11. Your Visitors’ Privacy

Your Site’s Visitors:

  • Your website visitors’ data (name, email, phone from contact forms) is your data, not ours
  • You are responsible for complying with privacy laws regarding visitor data
  • We provide secure form hosting; you manage the data
  • Contact form submissions go to your email (and optionally to you via SMS)

Your Responsibility:

  • Disclose to visitors how you collect and use their data
  • Obtain consent for data processing (especially in EU)
  • Comply with privacy laws (GDPR, CCPA, etc.)
  • We are not responsible for your privacy practices

12. Data Breach Notification

If A Breach Occurs:

  • We will notify you within 48 hours of discovery
  • Notification will include: what data was affected, when it was discovered, what we’re doing to fix it
  • We will comply with legal notification requirements
  • We will provide guidance on steps you should take

Your Role:

  • You should notify your own customers if their data (from your site) was compromised
  • You are responsible for notifying authorities as required by law

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on fornaxopsuites.com with an updated “Last Updated” date. Material changes will be communicated via email 30 days in advance.

Your continued use of Fornax after changes means you accept the updated policy.

14. California Privacy Rights

California Consumer Privacy Act (CCPA):

  • We do not sell personal information
  • We do not use personal information for automated decision-making in a way that produces legal/similarly significant effects
  • We do not use personal information for profiling

California Online Privacy Protection Act (COPPA):

  • We are not subject to COPPA (Fornax is not directed at children)

15. Contact Us

Privacy Questions:

Data Subject Requests (GDPR/CCPA):

Mailing Address:

  • Fornax
  • [Your Address if you add it]

Last Updated: September 2026

By using Fornax, you agree to this Privacy Policy.