Privacy, plainly.

Sumvant (“Sumvant,” “we,” “us”) operates sumvant.com (the “Site”). This policy explains what information the Site collects, how we use it, and the choices you have. It applies to the Site only. Work we do for clients is governed by the written services agreement, and where health information is involved, a Business Associate Agreement, signed with each client; those agreements control over this policy for that work.

The short version

• The Site runs no analytics scripts and no social media pixels. The one measurement it does is described under Advertising and measurement: which advertisement, if any, brought a visitor who then wrote to us.
• We collect information only when you give it to us: the discovery form, the booking calendar, or an email.
• We use it to answer you and to prepare for a conversation about your workflow. We do not sell it or share it for marketing.
• You can ask us to show you, correct, or delete what we hold about you at any time by emailing [email protected].

Information we collect

Information you give us. When you complete the discovery form, you may provide your name, business name, role, email address, phone number, and your answers about the work you want handled. When you book a call, Google Calendar collects your name, email address, and any notes you add. When you email us, we receive what you send.

Information collected automatically. Our hosting provider, Cloudflare, processes standard server logs to deliver the Site and defend it against abuse: IP address, browser type, the pages requested, and timestamps. We do not add analytics or fingerprinting on top of this. The Site sets no cookies of its own; the campaign fields described under Advertising and measurement are kept in your browser’s local storage, not in a cookie.

The discovery workbook on the discovery page saves your answers in your own browser’s local storage as you type, so you do not lose them. Nothing leaves your device until you choose to send it.

What not to send. The Site is not designed to receive protected health information or other sensitive personal data. Please do not include records about the people you serve, account credentials, or payment card numbers in the form or in email. If you do, we will delete them.

How we use information

We use the information you provide to respond to your inquiry, schedule and prepare for calls, assess whether your workflow is a fit, and, if we go on to work together, set up the engagement. We use server logs to keep the Site running and secure. We do not build profiles from your information, and the only advertising use is the conversion measurement described under Advertising and measurement.

We send email only in reply to you or in the course of an engagement. We do not add you to a marketing list without asking.

How information is shared

We share information only with the providers that make the Site and our email work, under their own privacy commitments, and only as needed to do what you asked:

• Cloudflare hosts the Site and stores discovery form submissions.
• Resend delivers the notification email that tells us a form was submitted.
• Google Workspace provides our email and the appointment calendar. When you use the booking widget, Google processes your booking under the Google Privacy Policy.
• Google Ads receives a conversion event through Cloudflare Zaraz when a form is submitted or a demo is booked, as described under Advertising and measurement.

We do not sell personal information, and we do not share it with third parties for their own marketing. We may disclose information if required by law or to protect the rights, property, or safety of Sumvant, our clients, or others.

Retention

Discovery form submissions and booking details are kept for as long as the inquiry is open and for up to 24 months afterward, so we can pick the conversation back up, unless you ask us to delete them sooner. Email is retained in the ordinary course of business. Server logs are kept by Cloudflare for a short, rolling period. If an inquiry becomes a client engagement, the records that belong to that engagement are kept under the services agreement.

Security

The Site is served only over HTTPS. Form submissions are stored in storage with controlled access, and only people who need them to respond to you can read them. Our accounts use two factor authentication. No method of transmission or storage is perfectly secure; if we learn of a breach that affects your information, we will tell you.

Your choices and rights

You can ask us at any time to tell you what information we hold about you, correct it, or delete it. Email [email protected] and we will respond within 30 days. Deleting your information may mean we cannot continue a conversation you started. Where your state’s law gives you additional rights, you have them, and we will honor them without discrimination.

Advertising and measurement

We may advertise Sumvant on Google Ads. To learn which advertisement brought a visitor who then wrote to us, the Site keeps, with each inquiry you submit, the campaign fields in the address you arrived on (the utm parameters) and Google’s click identifier (gclid and its equivalents). Until you submit a form, these fields live only in your browser’s local storage, for 90 days at most. Once submitted, they stay with the inquiry for the same period as the inquiry itself and are used for nothing else.

Conversion measurement runs through Cloudflare Zaraz, which runs on our own domain and sends Google Ads one conversion event when a form is submitted or a demo is booked. Google receives the click identifier, the time and the page; it does not receive your name, your email address or your answers. Zaraz loads no third party script into your browser, and we do not use remarketing audiences. If that changes, this policy will say so first and a privacy choices link will be added to the Site.

To opt out, you can open the Site without the campaign fields in the address, which stores nothing; adjust the advertising settings of your Google account and of your browser; or email [email protected] and we will remove the campaign fields from your inquiry.

Children

The Site is intended for businesses and is not directed to anyone under 18. We do not knowingly collect information from children. If you believe a child has provided information to us, email us and we will delete it.

Visitors outside the United States

The Site is hosted in, and operated from, the United States. By using it, you understand that your information will be processed in the United States, where privacy laws may differ from those where you live.

Changes to this policy

When we change this policy, we will post the new version here and update the effective date above. Material changes will be flagged on this page for 30 days.

Contact

Sumvant · Moorestown, New Jersey · [email protected]