Privacy
Updated: September 17, 2026
Campaign referrals
When you follow a recognized Instagram or X campaign link, we keep only its approved source, medium, campaign and content labels in this browser tab for up to 24 hours. A later recognized link replaces the previous labels. These labels accompany a submitted enquiry or an email draft you choose to send; they are not proof of how you discovered us. Untagged visits are not assumed to be direct visits. A shared profile link identifies the profile, not an individual post. Labels are separate from your form draft; clearing the draft does not clear them. Closing the tab normally removes them, although browser session restoration may restore them until they expire. Labels included in correspondence follow our enquiry-retention policy. We do not send form details or these campaign labels to page-view analytics.
Page-view analytics
We also use Vercel Web Analytics for aggregate page views, referrers, approximate location, and browser/device information. Our integration removes query strings and URL fragments before sending page URLs. This is separate from our enquiry counters and follows Vercel’s analytics retention practices.
Enquiries and correspondence
When you submit the consultation form, we receive your name, email, selected service, project message and optional company name. We use these details to respond, arrange consultations and follow up on your enquiry. Please do not submit passwords or confidential system details.
Browser-saved drafts
Unfinished form details and a submission identifier are saved in session storage in your browser tab so you can navigate or switch languages. The draft is cleared after a successful submission or when you choose “Clear saved request.” An undo copy remains in page memory for up to 15 seconds after clearing. Browser session restoration may restore tab data. Draft contents are not sent to our enquiry service until you submit the form.
Usage and delivery information
We count service-link clicks, form errors, accepted submissions and email delivery outcomes to understand which services interest visitors and whether enquiries arrive. These counters do not contain names, email addresses or message text. Email identifiers are hashed for duplicate-event detection. Counters and duplicate-event records expire after 90 days without an update.
Service providers and security
Vercel hosts this website, Resend sends consultation emails, and Upstash stores analytics and abuse-prevention counters. Our email provider stores received correspondence. Hosting and delivery providers may process technical information such as IP addresses and delivery logs under their own policies. The form’s abuse-prevention system stores a keyed hash of the IP address in a short-lived counter, not the raw address; its per-address window is 10 minutes.
Retention
We delete inactive enquiries and related correspondence after 12 months of inactivity. This is our enquiry-retention policy, separate from the technical expiry periods above. Correspondence that becomes part of an active client engagement is handled as part of that engagement. Provider logs and backups may follow separate retention schedules.
Contact and requests
To ask about your information, request a correction or deletion, or raise a privacy concern, email information@maintainit.tech. We may need to verify your request before acting.