Balanced Designs logo

Legal

Privacy Policy

Last Updated: July 13, 2026  ·  Effective: April 8, 2026

We keep this simple: we collect only what we need to run your project, we don't sell your data, and we use Stripe and Supabase to handle the sensitive parts so we never touch your card details directly.

1. Overview

Balanced Designs LLC ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding that data.

By using our website (balanced-designs.com or app.balanced-designs.com) or our services, you agree to the practices described in this policy.

2. What We Collect

2.1 Information You Provide

  • Name and email address (when you submit a contact form or create an account)
  • Company name and website URL (when you sign up for a project)
  • Phone number (if provided via contact form or during onboarding)
  • Payment information, handled entirely by Stripe; we never store card numbers
  • Communications you send us (emails, messages, revision feedback)
  • Scheduling details (name, email, and meeting preferences) when you book a call through our self-hosted scheduling system (cal.balanced-designs.com)
  • Social media account credentials (OAuth tokens) if you subscribe to our social content automation service, stored encrypted and never shared

2.2 Information Collected Automatically

  • IP address and browser/device type (via Vercel and standard web logs)
  • Pages visited and time on site (via Vercel Analytics)
  • Referral source (how you arrived at our site)
  • Performance data (via Vercel Speed Insights, anonymized)
  • Google Analytics 4: page views, session duration, traffic sources, and demographic data (via cookies _ga, _ga_*; 2-year expiry)
  • Meta Pixel: conversion events including page views, form submissions, and checkout initiations (via cookie _fbp; 3-month expiry). The Pixel loads by default; you can opt out via the 'Essential Only' choice in our cookie banner
  • PostHog product analytics: page views, interaction events, and session replays used to improve the site experience. Session replays mask all keystrokes and form inputs. PostHog loads only after you consent via our cookie banner (identifiers stored in ph_* cookies and localStorage; up to 1-year expiry)
  • Error and diagnostic data (via Sentry, includes browser info, error stack traces, and performance metrics)
  • Referral tracking codes stored in your browser's localStorage (persistent until cleared)

2.3 Information From Third Parties

  • Stripe may share transaction confirmation data (customer ID, payment status) with us via webhooks
  • We collect publicly available business information (company names, website URLs, phone numbers, and email addresses) from public directories and government registries, where permitted by the source's published terms, for business-to-business (B2B) sales outreach purposes

3. How We Use Your Information

  • To deliver our services, website design, managed hosting, social content automation, and AI chatbot services
  • To process payments through Stripe
  • To communicate project updates, revision feedback, and delivery notifications
  • To respond to contact form inquiries
  • To improve our website performance and user experience (via analytics and error monitoring)
  • To send B2B commercial communications to publicly available business email addresses (with opt-out mechanism)
  • To measure advertising effectiveness and optimize marketing campaigns (via Meta Pixel and Google Analytics)
  • To comply with legal obligations

4. Who We Share Your Data With

We do not sell, rent, or trade your personal information. We share data only with the service providers necessary to operate our business:

Service Providers

ProviderPurposePrivacy Policy
StripePayment processing and subscription billingView →
SupabaseAuthentication, database, and file storageView →
VercelWebsite hosting and web analyticsView →
ResendTransactional email delivery (receipts, notifications)View →
SentryError monitoring and performance diagnosticsView →
GoogleWebsite analytics (Google Analytics 4)View →
PostHogConsent-gated product analytics and session replay on our website; visitor analytics on client websites we build and hostView →
MetaConversion tracking (Meta Pixel)View →
Google GeminiAI-powered chatbot responses for client websitesView →
VapiAI voice receptionist call handling and transcription for clients subscribed to our AI receptionist serviceView →
Meta Graph APISocial media posting automation (Instagram, Facebook) for subscribed clientsView →
LinkedInSocial media posting automation for subscribed clientsView →

We never use client data, or the customer data our clients collect through services we provide, to build Meta Custom Audiences, Lookalike Audiences, or any other advertising segment, and we never display identifiable client or client-customer data in advertising creative without prior written consent. Our use of Meta is limited to (a) conversion tracking on our own website via the Meta Pixel and (b) publishing social media content on behalf of clients who subscribe to our social content automation service. We may also disclose your information if required by law, court order, or to protect the rights and safety of Balanced Designs LLC or others.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Specifically:

Account and project data is retained for the duration of your engagement and up to 2 years after project completion, in case of warranty or dispute.

Payment records are retained as required by law (typically 7 years for tax purposes).

B2B outreach data (publicly sourced business contact information) is retained for up to 2 years from last contact, then anonymized, with one exception: if you opt out of our emails, we keep your email address on a suppression list indefinitely, because that record is what ensures we never contact you again.

Chatbot conversation logs (visitor session data) are retained for up to 1 year, then deleted.

Social media OAuth tokens are retained only while your social content automation subscription is active and are deleted within 30 days of cancellation.

You may request deletion of your account and associated data at any time by emailing contact@balanced-designs.com. Deletion may be limited where we are required to retain records by law.

6. Cookies & Tracking Technologies

Our website uses cookies and similar technologies. You can manage your preferences via our cookie consent banner. Here is what we use:

Essential Cookies (always active): Supabase authentication cookies, allow you to stay logged in across our agency site and client portal (app.balanced-designs.com). Session-scoped and necessary for the service to function.

Analytics Cookies (optional, requires consent): Google Analytics 4 cookies (_ga, _ga_*), measure page views, session duration, and traffic sources. Expiry: up to 2 years.

PostHog cookies and localStorage keys (ph_*), power product analytics and session replay (with all keystrokes and form inputs masked). Expiry: up to 1 year.

Marketing Cookies (on by default, opt-out available): Meta Pixel cookie (_fbp), tracks conversion events including page views, form submissions, and checkout initiations. Expiry: 3 months. The Meta Pixel loads by default when you visit our site. If you choose "Essential Only" in our cookie banner, we signal Meta to stop tracking for the current visit and the Pixel will not load on future visits.

Local Storage: We use browser localStorage to store your referral tracking code (bd_referral_code) and cookie consent preference (bd_cookie_consent). These persist until you clear your browser data.

You may disable non-essential cookies via our consent banner or your browser settings. Disabling essential cookies will prevent you from logging into the client portal. For more details, see our Cookie Policy.

7. AI Chatbot & Receptionist Data

Some of our clients use an AI-powered chatbot widget on their websites (powered by Google Gemini) or an AI receptionist that answers their phone calls. When you interact with a chatbot on a client site:

We collect your IP address and browser user-agent to manage session limits and prevent abuse.

Conversation content (your messages and AI responses) is logged to improve response quality and monitor usage.

No personally identifiable information is required to use the chatbot. We do not use chatbot data for marketing purposes.

When you call a business that uses an AI receptionist we operate: your call may be answered by an automated assistant, and the call audio may be recorded and transcribed so the business can follow up with you. The assistant identifies itself as automated, and where recording disclosure is required by law, discloses that the call may be recorded. Call audio and transcripts are processed by our voice AI provider (Vapi) and shared with the business you called; that business is the controller of your inquiry.

Chatbot conversation and call data is retained for up to 1 year, then permanently deleted.

8. Analytics on Client Websites

Websites we build and host for our clients may include PostHog analytics that we operate on the client's behalf. When you visit a client website:

We collect page views, referral sources, and interaction events (such as form submissions and calls initiated from the site) so we can report visitor and lead metrics to that business.

Analytics data is segmented per client website. We do not combine visitor data across different client websites, and we do not use it for advertising.

If you submit a contact or booking form on a client website, the information you provide goes to that business. That business is the controller of your inquiry; contact them directly with questions about how they handle it.

9. B2B Outreach Communications

We send business-to-business (B2B) commercial emails to publicly available business email addresses. These communications:

Are sent only to business email addresses obtained from public sources (business directories, government registries, company websites).

Include our physical mailing address and a clear unsubscribe mechanism in every email, as required by the CAN-SPAM Act.

Are limited in volume and frequency, with automated follow-ups ceasing after a defined period.

If you receive an email from us and wish to opt out, click the "Unsubscribe" link in any email. Opt-out requests are honored immediately and permanently, your email address will be flagged so you never receive further communications from us.

You may also email contact@balanced-designs.com to request removal.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you.

Correction: Request corrections to inaccurate or incomplete data.

Deletion: Request that we delete your account and personal data.

Portability: Request your data in a machine-readable format.

Objection: Object to certain processing of your data.

Opt-Out of Targeted Advertising: Our website uses the Meta Pixel for advertising measurement, which some state privacy laws treat as "sharing" personal information. You can opt out at any time by choosing "Essential Only" in our cookie banner. Balanced Designs LLC does not currently meet the revenue or data-volume thresholds that make the California Consumer Privacy Act and similar state privacy laws applicable to us; we honor the requests above voluntarily for all users regardless of location.

To exercise any of these rights, email contact@balanced-designs.com. We will respond within 30 days.

11. Security

We take reasonable measures to protect your information, including:

Encrypted connections (HTTPS/TLS) on all websites and APIs.

Secure authentication via Supabase with row-level security policies.

Access controls limiting who can view your project data.

Encrypted storage of third-party API tokens (social media OAuth credentials).

Payment data handled exclusively by PCI-DSS compliant Stripe, we never store card numbers.

However, no internet transmission is completely secure. We cannot guarantee the absolute security of your data.

12. Children's Privacy

Our own websites and services are not directed to individuals under 18 years of age, and we do not knowingly collect personal information from children through them. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top reflects the most recent revision. We will notify active clients of material changes via email. Continued use of our services after an update constitutes acceptance.

Questions or Requests

To exercise your data rights or ask about this policy:

Balanced Designs LLC
Email: contact@balanced-designs.com