The short version
We collect only what you give us and the minimal technical data any website generates. We use it to respond to you and deliver services you request. We do not sell or share your personal information, we run no advertising trackers, and we set no analytics cookies. Email hello@aeternusdynamics.com at any time to see, correct, or delete what we hold.
What we collect, and where
- Engagement builder (engage.html). The information you type: company, name, email, phone, registration numbers, project details, notes, plus your typed signature and consent timestamps. It becomes your signed engagement record: a copy downloads to your own device, and a copy is transmitted to us by the email your device sends or by our form endpoint.
- Sub roster check (roster-check-request.html). The subcontractor information you paste or attach: business names, license numbers, and, if you include them, insurance carrier and policy identifiers, together with your own contact details. It is transmitted to our operator inbox to perform the check; the form endpoint stores nothing server-side. Do not include Social Security numbers or employee personal data.
- Site assistant (chat). The messages you type in the chat window. The assistant runs entirely in your browser: it matches your question against a static, published-content index and returns an answer locally. No chat message is sent to our servers, to Anthropic, or to any other AI provider, and none is stored in any log. The assistant identifies itself as automated; for anything sensitive (Social Security numbers, payroll records, or other personal data), use email instead of chat.
- Email. Anything you send to hello@aeternusdynamics.com is delivered to our mail host (Purelymail) and read by our operator. An automated triage step that runs on our own computers reads incoming mail to sort and route it and draft a suggested reply for our operator to review. It never sends a reply itself, and a qualified human reviews every draft before anything is sent.
- Hosting logs and site analytics. Our host (Vercel) records standard server logs (IP address, browser user-agent, pages requested) for security and reliability, and this site uses Vercel Web Analytics and Speed Insights, which report anonymized, aggregate page-view and performance metrics without cookies or cross-site tracking. We do not use any of this to profile you.
- Client portal. If you sign in to the client portal, your account, requests, uploads, and deliverables are stored as described in the Client Portal Privacy Notice.
What we use it for
Responding to your inquiry, preparing and performing an engagement, meeting record-retention obligations that apply to compliance work, and securing this site. That is the whole list. We do not use your information for third-party advertising, and we do not sell or "share" (as the CCPA defines sharing) personal information, and have not in the preceding 12 months.
Who processes it on our behalf
We use a small number of outside providers to run our business, each under its own privacy commitments. Vercel hosts this website, our serverless functions, and the client portal's pages, and provides the cookie-free page-view analytics described above (page, referrer, browser, and country). Supabase provides the client portal's database, authentication, and file storage; files uploaded to the portal are held there until we retrieve them and are then cleared from Supabase. Purelymail hosts our email. Resend delivers the email that this site's intake and engagement forms send. Microsoft (OneDrive) holds an encrypted copy of our records: the files are encrypted on our own computer before they leave it, and Microsoft does not hold the key. Telegram carries operational alerts, which can mention a client's name or a deadline, to the owner's own chat. Tailscale provides remote access to our systems and sees device and network metadata, not content. Porkbun is our domain registrar and DNS host. Our source code is kept in a private GitHub repository from which client data is excluded. Our site assistant (chat) runs locally in your browser and is not on this list because it sends no data to us or to any AI provider. We disclose information beyond these providers only when a service you engaged requires a filing (for example, submitting certified payroll to a public agency at your direction) or when the law compels it. We maintain a fuller internal subprocessor register (data categories, security posture, and exit plans for each provider); an active client or their security reviewer can request a copy under our engagement's confidentiality terms.
Do Not Track and other parties
Do Not Track. This site does not track you over time or across other websites, so there is no cross-site tracking for a "Do Not Track" setting to switch off. It does not change its behavior when your browser sends a Do Not Track signal: it sets no analytics or advertising cookies and builds no profile of you. Our response to Global Privacy Control signals is described under your rights below.
Other parties. No advertising network, social network, or other outside party collects personal information about your activity over time and across websites when you use this site. The site loads no third-party scripts, fonts, or images; its published security policy limits each page to our own domain (and, on the client portal, to our database provider, Supabase). The only outside services involved are the providers listed above, which operate this site and our business on our behalf.
Your rights (California and everyone else)
California residents have rights under the CCPA/CPRA to know (including receiving your data in a portable format), correct, delete, and limit the use of sensitive personal information, and to not be discriminated against for exercising those rights. Our firm may fall below the statutory thresholds at which the CCPA applies; we honor these requests regardless. Write to hello@aeternusdynamics.com and we will respond within 30 days. Because we do not sell or share personal information, there is nothing to opt out of; we also do not use or disclose sensitive personal information for purposes beyond delivering the services described here, so there is nothing further to limit. We treat Global Privacy Control signals as an opt-out preference, which in our case changes nothing because there is no sale or sharing to opt out of.
You may use an authorized agent to submit a request on your behalf. We will ask the agent for written permission you have signed authorizing them to act for you (a Probate Code power of attorney satisfies this on its own), and we may still contact you directly to verify the request. If we are unable to fully honor a request, we will explain why in our response; write back to the same address to ask us to reconsider.
Retention
Inquiry correspondence is kept as long as useful to respond to you. Signed engagement records and compliance work product are retained for the period required by the statutes governing that work (certified payroll records, for example, carry their own retention requirements), then deleted.
Children
This site is a business-to-business service and is not directed to anyone under 16. We do not knowingly collect information from minors.
Changes
If this policy changes, the effective date above changes with it, and material changes will be noted here. This page is the single authoritative copy.
Contact
Aeternus Dynamics LLC · hello@aeternusdynamics.com