Privacy Policy

Backbone Studio LLC ("Backbone", "we", "us") builds the marketing site you're reading. This policy explains what we collect, how we use it, and the choices you have.

What we collect

1. Information you give us

• Playbook signup. First name + email. Stored in Resend as an Audience contact and used to deliver the requested PDF and occasional updates.
• Audit booking. Whatever Cal.com collects to schedule a meeting (name, email, optional notes). Handled by Cal.com under their privacy policy.
• Contact email. If you email us at hello@backbonestudio.co, we keep the message in Gmail.

2. Information collected automatically

• Plausible Analytics — cookieless, anonymous page views and event counts. Loaded for every visitor.
• Microsoft Clarity, Meta Pixel, and LinkedIn Insight Tag — only loaded after you choose "Accept" on the consent banner. These set cookies for behavioural analytics and ad attribution.
• Sentry — captures unhandled JavaScript errors and a small slice of performance traces. Configured to mask all text and block all media in session replays.

How we use it

• Deliver the Playbook and audit-related communication you requested.
• Improve the site (which pages load slowly, where the form fails).
• Reach you about your audit or a build you've started.

We do not sell or share your data with brokers. We do not run profile-based advertising.

Your choices

• Consent. Decline non-essential trackers via the banner at the bottom of the page. Plausible (cookieless) keeps running so we can measure basic traffic.
• Email unsubscribe. Every Playbook email contains a one-click unsubscribe link.
• Data deletion. Email hello@backbonestudio.co and we'll remove your Audience contact within 7 business days.

Subprocessors

• Vercel (hosting + Edge Functions)
• Resend (transactional email + Audience)
• Upstash (rate-limiting metadata, no PII)
• Cloudflare Turnstile (bot defense)
• Plausible Analytics
• Microsoft Clarity, Meta, LinkedIn — consent-gated only
• Sentry

Security

Transport is HTTPS-only with HSTS preload. Form submissions are server-validated and rate-limited. Secrets live in Vercel environment variables and are never exposed to the browser bundle. See our security page for the full posture.

Changes

We'll post material changes here and bump the effective date. If you have a live build contract with us, we'll also notify you directly.