Privacy Policy

Last updated: September 22, 2026

This policy explains what I collect, why, and your choices. True Web Apps is operated from Tampa Bay, Florida.

1. Data I collect

Account data: name, email, company, phone if you add one, and a password hash.
Project data: the details in a proposal or signed agreement (business name, scope, fees, signatures) and files you send for the work.
Billing data: amounts due, which payment methods I offered, and whether a payment was marked received. If you pay by card, Stripe collects the card details. I do not see or store the full card number. Zelle, Venmo, and Cash App payments are identified by the confirmation you send and by my own records. I store the handles I publish for those methods, not your bank login.
Site analytics: pages visited on truewebapps.com, roughly when a visit started and ended, and a coarse location derived from the network. This is first-party. I do not sell it and I do not use it for ads.
Cookies: a sign-in cookie so the admin and account pages stay logged in, and a cookie that remembers whether my own checkout is in test mode. The public site does not require a marketing-cookie banner for this first-party analytics.

2. How I use it

Provide the site, the agreement, and the work you hired me for.
Send billing instructions and record payment.
Send email about an agreement, a signature, or an account.
Keep the site secure and understand which pages are used.
Meet tax and other legal duties.

I do not sell your personal data.

3. Who processes it

Supabase — database, authentication, and file storage.
Vercel — hosting for this website and its server.
Cloudflare — sending and receiving email at truewebapps.com.
Stripe — card checkout, and only when I include a Stripe link in a billing email or an older subscription still charges a card.

Zelle, Venmo, and Cash App are payment networks you pay through. They are not hosts of this website.

4. Retention

I keep account and project records while the work is active and for as long as I need them for taxes, disputes, and the signed agreement. Billing records may be kept up to 7 years. You can ask me to delete account data that I am not required to keep.

5. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete personal data, or to object to some processing. Email me to use those rights. I will not discriminate against you for asking.

6. Security

The site uses HTTPS. Passwords are hashed. Database access is limited by row policies. No system is perfectly secure — email me if you think an account was exposed.

7. International transfers

I operate from the United States. Supabase, Vercel, Cloudflare, and Stripe may process data in the United States and other countries where they run.

8. Children

The Service is not directed to children under 16.

9. Changes

I may update this policy. Material changes will be announced by email at least 14 days before they take effect.

10. Contact

Privacy requests: hello@truewebapps.com.