Privacy Policy

Who we are.

This website, chreia.xyz, is operated by Drew Fain, doing business as Chreia Consulting, in Garland, Texas. Questions about this policy: drew@chreia.xyz.

What we collect.

• Information you give us: when you submit the intake form, we collect your name, email, organization, role, organization type, and anything else you choose to share (such as budget range, attendance, needs, timeline, and your message).
• Technical information: we use strictly necessary technology to protect the site and prevent spam.
• We do not collect payment information, and we do not knowingly collect sensitive personal information.

How we use it.

To respond to your inquiry, send you a confirmation email, keep the site secure, and prevent spam. We do not send newsletters or marketing email, and we do not use your information for advertising.

Who processes it for us.

We use service providers only to run this site and respond to you:

• Lovable (website hosting and form database/backend)
• Lovable Cloud (database used by our host to store form submissions)
• Lovable Emails (Lovable's email delivery service), sending from notify.chreia.xyz
• Google Workspace (our email inbox, where submissions are delivered)
• Cloudflare (network security and bot protection)

These providers process data on our behalf and are not permitted to sell it.

Cookies and tracking.

We use only strictly necessary technology. We do not use advertising cookies, cross-site tracking, or social media pixels.

When you submit the intake form, we store your IP address briefly to enforce a one-minute anti-spam cooldown.

Fonts are self-hosted so no data goes to Google.

You can block or delete cookies in your browser settings; the site will still work.

How long we keep it.

Intake submissions are kept in our email and the site database until you ask us to delete them.

We do not sell or share your personal information.

We do not sell personal information, and we do not "share" it for cross-context behavioral advertising, as those terms are defined in California law.

Global Privacy Control.

We do not sell or share personal information, so a Global Privacy Control (GPC) signal requires no change to how we handle it. You can block cookies in your browser and the site still works.

Your rights.

Wherever you live, you can ask us to:

• tell you what personal information we have about you (right to know or access),
• correct it,
• delete it,
• give you a copy in a portable format,
• opt out of sale, sharing, targeted advertising, or profiling (we do none of these).

California residents have these rights under the CCPA as amended by the CPRA, including the right not to be discriminated against for exercising them. Texas residents have similar rights under the Texas Data Privacy and Security Act (TDPSA), including the right to appeal if we decline a request. To make a request or appeal, email drew@chreia.xyz with the subject "Privacy request." We will respond within 45 days. We may need to confirm your identity. You may use an authorized agent.

Children.

This site is not directed to children under 13, and we do not knowingly collect their information. If you believe a child has submitted information, contact us and we will delete it.

Security.

We use reputable providers and encrypted connections (HTTPS). No method of transmission is completely secure.

Changes.

We will post any changes here and update the effective date.

Contact.

Drew Fain, doing business as Chreia Consulting, Garland, Texas. drew@chreia.xyz