Legal
Privacy Policy
Last Updated: July 13, 2026 · Effective: April 8, 2026
We keep this simple: we collect only what we need to run your project, we don't sell your data, and we use Stripe and Supabase to handle the sensitive parts so we never touch your card details directly.
1. Overview
Balanced Designs LLC ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding that data.
By using our website (balanced-designs.com or app.balanced-designs.com) or our services, you agree to the practices described in this policy.
2. What We Collect
2.1 Information You Provide
- ›Name and email address (when you submit a contact form or create an account)
- ›Company name and website URL (when you sign up for a project)
- ›Phone number (if provided via contact form or during onboarding)
- ›Payment information, handled entirely by Stripe; we never store card numbers
- ›Communications you send us (emails, messages, revision feedback)
- ›Scheduling details (name, email, and meeting preferences) when you book a call through our self-hosted scheduling system (cal.balanced-designs.com)
- ›Social media account credentials (OAuth tokens) if you subscribe to our social content automation service, stored encrypted and never shared
2.2 Information Collected Automatically
- ›IP address and browser/device type (via Vercel and standard web logs)
- ›Pages visited and time on site (via Vercel Analytics)
- ›Referral source (how you arrived at our site)
- ›Performance data (via Vercel Speed Insights, anonymized)
- ›Google Analytics 4: page views, session duration, traffic sources, and demographic data (via cookies _ga, _ga_*; 2-year expiry)
- ›Meta Pixel: conversion events including page views, form submissions, and checkout initiations (via cookie _fbp; 3-month expiry). The Pixel loads by default; you can opt out via the 'Essential Only' choice in our cookie banner
- ›PostHog product analytics: page views, interaction events, and session replays used to improve the site experience. Session replays mask all keystrokes and form inputs. PostHog loads only after you consent via our cookie banner (identifiers stored in ph_* cookies and localStorage; up to 1-year expiry)
- ›Error and diagnostic data (via Sentry, includes browser info, error stack traces, and performance metrics)
- ›Referral tracking codes stored in your browser's localStorage (persistent until cleared)
2.3 Information From Third Parties
- ›Stripe may share transaction confirmation data (customer ID, payment status) with us via webhooks
- ›We collect publicly available business information (company names, website URLs, phone numbers, and email addresses) from public directories and government registries, where permitted by the source's published terms, for business-to-business (B2B) sales outreach purposes
3. How We Use Your Information
- ›To deliver our services, website design, managed hosting, social content automation, and AI chatbot services
- ›To process payments through Stripe
- ›To communicate project updates, revision feedback, and delivery notifications
- ›To respond to contact form inquiries
- ›To improve our website performance and user experience (via analytics and error monitoring)
- ›To send B2B commercial communications to publicly available business email addresses (with opt-out mechanism)
- ›To measure advertising effectiveness and optimize marketing campaigns (via Meta Pixel and Google Analytics)
- ›To comply with legal obligations
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide services. Specifically:
Account and project data is retained for the duration of your engagement and up to 2 years after project completion, in case of warranty or dispute.
Payment records are retained as required by law (typically 7 years for tax purposes).
B2B outreach data (publicly sourced business contact information) is retained for up to 2 years from last contact, then anonymized, with one exception: if you opt out of our emails, we keep your email address on a suppression list indefinitely, because that record is what ensures we never contact you again.
Chatbot conversation logs (visitor session data) are retained for up to 1 year, then deleted.
Social media OAuth tokens are retained only while your social content automation subscription is active and are deleted within 30 days of cancellation.
You may request deletion of your account and associated data at any time by emailing contact@balanced-designs.com. Deletion may be limited where we are required to retain records by law.
7. AI Chatbot & Receptionist Data
Some of our clients use an AI-powered chatbot widget on their websites (powered by Google Gemini) or an AI receptionist that answers their phone calls. When you interact with a chatbot on a client site:
We collect your IP address and browser user-agent to manage session limits and prevent abuse.
Conversation content (your messages and AI responses) is logged to improve response quality and monitor usage.
No personally identifiable information is required to use the chatbot. We do not use chatbot data for marketing purposes.
When you call a business that uses an AI receptionist we operate: your call may be answered by an automated assistant, and the call audio may be recorded and transcribed so the business can follow up with you. The assistant identifies itself as automated, and where recording disclosure is required by law, discloses that the call may be recorded. Call audio and transcripts are processed by our voice AI provider (Vapi) and shared with the business you called; that business is the controller of your inquiry.
Chatbot conversation and call data is retained for up to 1 year, then permanently deleted.
8. Analytics on Client Websites
Websites we build and host for our clients may include PostHog analytics that we operate on the client's behalf. When you visit a client website:
We collect page views, referral sources, and interaction events (such as form submissions and calls initiated from the site) so we can report visitor and lead metrics to that business.
Analytics data is segmented per client website. We do not combine visitor data across different client websites, and we do not use it for advertising.
If you submit a contact or booking form on a client website, the information you provide goes to that business. That business is the controller of your inquiry; contact them directly with questions about how they handle it.
9. B2B Outreach Communications
We send business-to-business (B2B) commercial emails to publicly available business email addresses. These communications:
Are sent only to business email addresses obtained from public sources (business directories, government registries, company websites).
Include our physical mailing address and a clear unsubscribe mechanism in every email, as required by the CAN-SPAM Act.
Are limited in volume and frequency, with automated follow-ups ceasing after a defined period.
If you receive an email from us and wish to opt out, click the "Unsubscribe" link in any email. Opt-out requests are honored immediately and permanently, your email address will be flagged so you never receive further communications from us.
You may also email contact@balanced-designs.com to request removal.
10. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
Access: Request a copy of the personal data we hold about you.
Correction: Request corrections to inaccurate or incomplete data.
Deletion: Request that we delete your account and personal data.
Portability: Request your data in a machine-readable format.
Objection: Object to certain processing of your data.
Opt-Out of Targeted Advertising: Our website uses the Meta Pixel for advertising measurement, which some state privacy laws treat as "sharing" personal information. You can opt out at any time by choosing "Essential Only" in our cookie banner. Balanced Designs LLC does not currently meet the revenue or data-volume thresholds that make the California Consumer Privacy Act and similar state privacy laws applicable to us; we honor the requests above voluntarily for all users regardless of location.
To exercise any of these rights, email contact@balanced-designs.com. We will respond within 30 days.
11. Security
We take reasonable measures to protect your information, including:
Encrypted connections (HTTPS/TLS) on all websites and APIs.
Secure authentication via Supabase with row-level security policies.
Access controls limiting who can view your project data.
Encrypted storage of third-party API tokens (social media OAuth credentials).
Payment data handled exclusively by PCI-DSS compliant Stripe, we never store card numbers.
However, no internet transmission is completely secure. We cannot guarantee the absolute security of your data.
12. Children's Privacy
Our own websites and services are not directed to individuals under 18 years of age, and we do not knowingly collect personal information from children through them. If you believe a child has provided us with personal data, contact us and we will delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last Updated" date at the top reflects the most recent revision. We will notify active clients of material changes via email. Continued use of our services after an update constitutes acceptance.
Questions or Requests
To exercise your data rights or ask about this policy:
Balanced Designs LLC
Email: contact@balanced-designs.com