Privacy Policy

Who this covers

This policy applies to Joe Lissy, doing business as chalkthis. (“chalkthis.”, “we”, “us”), and to chalkthis.io and the messages we send from it. We are a one-person business based in Sound Beach, New York 11789. Questions go to a real person: joe@chalkthis.ai.

What we collect

Three things, and nothing else.

• What you type into the form. Your name and email, and optionally your phone number, business name, which services you're interested in, and whatever you write in the message box.
• A little technical context. Your browser's user-agent string, and a one-way hash of your IP address. The hash exists to catch form spam. We cannot reverse it back into your IP address, and we do not use it to track you across the web.
• Nothing passively. No advertising pixels, no third-party analytics profiles, no session recording, no cookies set by us for tracking.

How we use it

• To reply to you about the thing you contacted us about.
• To send you a document you asked for, such as a review audit.
• To send service messages about work we are actually doing for you.
• To keep records of consent and of work performed.

We do not sell your information. We do not rent it, trade it, or hand it to a data broker. We do not run advertising off it.

Text messages and your mobile number

This section is the important one, so it gets its own heading and no hedging.

No mobile information will be sold or shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

• You opt in on purpose. The SMS checkbox on our form is unchecked by default, is never required, and is never bundled into another agreement. The exact wording you agree to is: “I agree to receive text messages from chalkthis. about my inquiry. Message frequency varies. Message and data rates may apply. Reply STOP to opt out or HELP for help. Consent is not a condition of purchase.”
• Consent is not a condition of anything. You can hire us, get a quote, or get an audit without ever giving us a phone number.
• You can leave instantly. Reply STOP to any message and the messages end. Reply HELP and you get our contact details back.
• Your number is not a product. It is used to message you, and for nothing else.

Full program details — message frequency, rates, and carrier terms — are in our Terms & Conditions.

Who else touches your data

We run on a small set of vendors, and they process data only to deliver a service to us. None of them receive your information for their own marketing, and none of them receive SMS consent data.

• Supabase — the database where form submissions are stored.
• Vercel — hosts this website and serves the pages.
• Resend — delivers the email notification of your submission, and email we send you.
• Twilio — delivers text messages, where you have opted in.
• Google — our calendar booking page, if you choose to book a call.

We will also disclose information if the law actually requires it, such as a valid subpoena. If our business is ever sold or transferred, the same commitments in this policy travel with the data, and SMS consent is not treated as a transferable asset — a new owner would have to earn your opt-in again.

How long we keep it

• Enquiries that go nowhere: deleted within 24 months of your last contact with us.
• Client records: kept for the life of the engagement and for 7 years afterward, because tax and contract records have to exist.
• Consent records: kept as long as we might need to prove you agreed, and for 4 years after you opt out. This one protects you as much as us.
• Spam-prevention hashes: deleted within 12 months.

How it is protected

Everything travels over HTTPS. The database enforces row-level security, so the key embedded in this website can only add a new enquiry — it cannot read anything back. Access to the stored data requires a separate credential that lives only with the owner of this business. No system is perfectly secure, and anyone who tells you otherwise is selling something, but we keep the attack surface deliberately small.

What you can ask us to do

Email joe@chalkthis.ai and we will:

• Tell you exactly what we hold about you.
• Correct anything that is wrong.
• Delete it, unless we are legally required to keep a record.
• Stop messaging you on any channel, immediately.

We answer within 30 days, usually within one business day. We do not charge for this and we will not make you jump through a retention offer to do it.

Work we do for our clients

When we build a system for a business, that business owns its own customer data and is the party responsible for it — we act on their instructions. If you received a message from a business we work with and want your information removed, ask that business directly, or tell us and we will route it to them.

Children

This is a business-to-business service. It is not directed at anyone under 18, and we do not knowingly collect information from minors. If you believe a child has submitted information to us, email us and we will delete it.

Changes

If this policy changes, the date at the top changes with it. If a change materially affects how we handle information we already hold about you, we will tell the people affected directly rather than quietly editing the page.

Contact

Joe Lissy, doing business as chalkthis.
Sound Beach, New York 11789
joe@chalkthis.ai