Privacy Policy

Backbone ("we", "us") builds the marketing site you're reading. This policy explains what we collect, how we use it, and the choices you have.

What we collect

1. Information you give us

• Playbook signup (retired October 2026). First name + email. Stored in Resend as an Audience contact, and in our database (hosted by Supabase) with your signup source and email preferences, to deliver the requested PDF and schedule the follow-up emails.
• Walkthrough booking. When online booking is enabled, our scheduling provider HighLevel (LeadConnector) collects what you enter to book a call (name, email, company, website, and what you want to improve) and sends your confirmation. Handled under HighLevel's privacy policy. If you book by email or phone instead, we keep that message.
• Pre-call intake. If you complete our pre-call intake form, your answers are stored in our database (hosted by Supabase) and linked to your contact record.
• Contact email. If you email us at adam@backbonestudio.co, we keep the message in Gmail.

2. Information collected automatically

• Plausible Analytics — cookieless, anonymous page views and event counts. Loaded for every visitor.
• Microsoft Clarity, Meta Pixel, and LinkedIn Insight Tag — only loaded after you choose "Accept" on the consent banner. These set cookies for behavioural analytics and ad attribution.
• Sentry — captures unhandled JavaScript errors and a small slice of performance traces. Configured to mask all text and block all media in session replays.

How we use it

• Deliver the Playbook and walkthrough-related communication you requested.
• Improve the site (which pages load slowly, where the form fails).
• Reach you about your walkthrough or a project you've started.

We do not sell or share your data with brokers. We do not run profile-based advertising.

Your choices

• Consent. Decline non-essential trackers via the banner at the bottom of the page. Plausible (cookieless) keeps running so we can measure basic traffic.
• Email unsubscribe. Every Playbook email contains a one-click unsubscribe link.
• Data deletion. Email adam@backbonestudio.co and we'll remove your contact record from Resend and from our database within 7 business days.

Subprocessors

• Vercel (hosting + Edge Functions; privacy-friendly Web Analytics and Speed Insights)
• Resend (transactional email + Audience)
• Supabase (database for email sign-ups, email scheduling and intake answers; US region)
• Upstash (rate-limiting metadata, no PII)
• Cloudflare Turnstile (bot defense)
• Plausible Analytics
• Microsoft Clarity, Meta, LinkedIn — consent-gated only
• Sentry

Security

Transport is HTTPS-only with HSTS preload. Form submissions are server-validated and rate-limited. Secrets live in Vercel environment variables and are never exposed to the browser bundle.

Changes

We'll post material changes here and bump the effective date. If you have a live build contract with us, we'll also notify you directly.