Privacy policy

GrowthBridge Transformation (“GrowthBridge,” “we,” “us”) is a two-person consulting practice. This site is growthbridgetransformation.com. If you have a question about anything below, email jvfaulks@gmail.com and a real person will answer.

If you fill in the contact form

We collect what you type: your name, email address, business name, business size, your message, and how you heard about us. To help us catch spam and abuse, our servers also record the IP address and browser user-agent of the submission. We do not ask for anything we don’t need to reply to you.

If you sign in to the portal

The portal is for our team and invited collaborators. Sign-in is handled through GitHub OAuth. When you authorize it, GitHub tells us your account identifier, name, and email so we can create your session. We never see or store your GitHub password. Inside the portal we store the work you create there (clients, projects, work items, notes, and related records).

If you just browse

We don’t run advertising trackers, third-party analytics, or marketing pixels on this site. Our hosting provider keeps standard server logs (such as IP address and the page requested) for security and reliability, as essentially every web host does.

We use only essential cookies. The contact-form pages set no tracking cookies. The portal sets a session cookie after you sign in so you stay logged in as you move between pages. It’s required for the portal to work and is not used to profile you. We do not use advertising or cross-site tracking cookies.

• To reply to your enquiry and follow up about working together.
• To operate the portal and keep your session secure.
• To protect the site and our users from spam, abuse, and fraud.
• To meet our legal and tax obligations where required.

We do not sell your information, and we do not share it with advertisers. We do not use your data to train external AI models.

We run a small, deliberately boring stack. These providers process data strictly to deliver the service, under their own privacy and security commitments:

• Supabase: our database and authentication. Contact submissions and portal records are stored here.
• Resend: sends transactional email, such as the notification we get when you submit the contact form. We don’t run marketing email campaigns through it.
• GitHub: provides OAuth sign-in for portal users.
• Vercel: hosts the website and keeps the standard server logs described above.

We keep contact submissions for as long as we’re in conversation and for a reasonable period afterward in case you reach back out. Portal records are kept for as long as the account and the underlying work are active. If you want your contact details removed, ask us and we’ll delete them unless we’re legally required to keep them.

You can ask us to show you the personal information we hold about you, correct it, or delete it. Depending on where you live (for example under GDPR or similar laws) you may also have the right to object to or restrict certain processing, and to lodge a complaint with your local data-protection authority. To exercise any of these, email jvfaulks@gmail.com. We’ll respond promptly and won’t make you jump through hoops.

Data is transmitted over HTTPS and stored with our hosting and database providers, who maintain their own access controls and encryption. Access to the portal and the underlying database is limited to our team. No system is perfectly secure, but we keep the surface small and the dependencies few on purpose.

This site and the portal are intended for businesses and adults. We don’t knowingly collect information from children under 16. If you believe a child has provided us information, contact us and we’ll delete it.

If we change how we handle data, we’ll update this page and move the “last updated” date at the top. Material changes will be reflected here before they take effect.

Questions, requests, or concerns about your privacy: jvfaulks@gmail.com. You can also reach us through the contact page.