Privacy Policy

Root & Render ("we," "us," or "our") operates rootandrender.dev (the "Site"), including the Work Intake form and the Free Website Health Check tool (together, the "Services"). This policy explains what information we collect, how we use it, and the choices you have.

This is a general-purpose policy template and has not been reviewed by an attorney. Review it with legal counsel before publishing, especially if you expect visitors from the EU/UK (GDPR) or California (CCPA), or if you begin storing more data than described here.

1. Information We Collect

a) Information you provide directly

When you submit the Work Intake form, we collect:

• Name
• Email address
• Phone number
• Company name
• Company website
• Requested services and any message/project details you provide

This information is stored in Payload CMS, our content management system, which we use to review and respond to inquiries. We use this information solely to respond to your inquiry, evaluate project fit, and communicate with you about potential work.

b) Information submitted to the Website Health Check tool

When you use the Free Website Health Check tool, we collect the URL you submit. That URL is sent to Google's PageSpeed Insights API to generate a performance report, which is displayed back to you. We do not store submitted URLs or generated reports on our own servers — each report is generated on-demand and not retained after your session ends.

Because the URL is processed by Google's infrastructure, Google's own privacy policy governs their handling of that request: https://policies.google.com/privacy

c) Information collected automatically

Like most websites, our hosting provider (Vercel) may automatically log standard technical information for security and performance purposes, which can include:

• IP address
• Browser type and device information
• Pages visited and referring URLs
• Timestamps of requests

We do not currently use analytics tools, advertising cookies, or third-party ad-tracking scripts on this Site. If that changes in the future, this policy will be updated to describe what's added and how it's used.

2. How We Use Information

We use the information described above to:

• Respond to project inquiries submitted via the Intake form
• Operate and improve the Website Health Check tool
• Maintain the security and performance of the Site
• Comply with legal obligations, where applicable

We do not sell personal information, and we do not share Intake form submissions with third parties except as described below.

3. Third-Party Services

We rely on the following third parties to operate the Site:

ServicePurposeData involved

Payload CMS

Stores and manages Work Intake form submissions

• Name
• Email
• Phone
• Company info
• Message

Stores and manages Contact form submissions

• Name
• Email
• Phone
• Message

Supabase

Database hosting for Payload CMS

• Same Intake form data
• Stored in the database

Google PageSpeed Insights API

Generates website performance reports

• The URL submitted to the Health Check tool

Vercel

Hosts the Site and Services

• Standard request logs (IP, browser, timestamps)

We do not currently use analytics tools or send automated emails from the Site. If either is added in the future, this policy will be updated accordingly.

4. Data Retention

• Intake form submissions are retained for as long as reasonably necessary to evaluate and respond to your inquiry, or as required for our business records. [ADJUST if you keep these indefinitely in a CRM, or delete after a set period.]
• Contact form submissions are retained for as long as reasonably necessary to evaluate and respond to your inquiry, or as required for our business records. [ADJUST if you keep these indefinitely in a CRM, or delete after a set period.]
• Website Health Check submissions are not stored — each report is generated and returned in real time and is not saved to a database.
• Server/hosting logs are retained according to our hosting provider's default retention period.

5. Your Rights

Depending on where you live, you may have rights to:

• Request access to personal information we hold about you
• Request correction or deletion of that information
• Object to or restrict certain processing
• (California residents) Request disclosure of categories of data collected and opt out of "sale" or "sharing" of personal information — note that we do not sell personal information
• (EU/UK residents) Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at contact@rootandrender.dev.

6. Children's Privacy

This Site is intended for business audiences and is not directed at children under 16. We do not knowingly collect personal information from children.

7. Security

We take reasonable measures to protect information submitted through the Site, including relying on providers with industry-standard security practices (e.g., HTTPS encryption in transit). No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date.

9. Contact

Questions about this policy or your data can be sent to:

Root & Render - contact@rootandrender.dev