Your Website People
The details, in plain language

Privacy policy

How we handle inquiries, previews, client accounts, and billing information.

Updated October 13, 2026

Who this policy covers

This policy covers the Your Website People marketing website, inquiries and email conversations, private website previews, and our client account service at app.yourwebsitepeople.com.

Legal operator
Authentic Creatives LLC, doing business as Your Website People
Business address
18 Shipyard Dr, 2A, Hingham, MA 02043

It does not automatically cover the websites we build for customers or their visitors. Those websites need their own privacy information and any project-specific data arrangements.

The information we handle

  • Inquiries and conversations: your business name, name and email address where provided, optional website address, messages, and attachments you choose to send.
  • Website previews and feedback: your business and website details, preview links and access records, comments, reviewer name, the page and selected text or element a comment refers to, and display details that help us locate the requested change.
  • Client accounts: contact details, website and domain information, team membership and permissions, sign-in and session records, requests, messages, uploaded files, and project history.
  • Started checkout: when you enter a valid email address on a private preview’s signup page and leave the field, we save it, any name you provided, and the preview reference so you can return to the request. This can happen before you submit the form.
  • Signup and billing: your name, email, selected service, terms and recurring-payment authorization, the time of acceptance and connection address, Stripe customer and subscription references, payment-method readiness, and invoice, payment, and cancellation status.
  • Connection information: hosting and network providers process connection addresses, request URLs, and technical logs to deliver and protect the service.

Please do not put passwords, full payment-card details, or sensitive personal records in an inquiry, preview comment, or support request.

Why we use it

We use this information to respond to inquiries, prepare and review your website, carry out changes, manage account access, keep a record of approvals, provide support, and operate billing. We also use technical records to protect the service, resolve problems, and reduce duplicate requests.

Preview feedback and project conversations are available to our team and the people with access to the relevant website or preview. A shared preview link gives its holder access to that preview and its shared feedback. Only share it with people you want involved.

If you start signup and do not finish saving your payment method, we may send one reminder with a private link back to your preview. Saving your payment method, completing a complimentary signup, or asking us to turn off the preview stops a pending reminder. This does not subscribe you to a mailing list or start a paid plan. You can contact us to ask us to close an unfinished request.

An inquiry does not subscribe you to a mailing list or start a paid plan.

Payment details go to Stripe

Stripe provides the secure payment form on our checkout page and the hosted pages where you save or update a payment method and manage billing. Card details are entered directly with Stripe. We do not store full card numbers or security codes in our application.

We send Stripe your name, email, selected plan, payment authorization, and references connecting your billing to your website. Stripe sends back the billing references and status information we need to manage the service. Saving your payment method does not charge you; monthly billing starts only after launch as described in our terms of service.

Stripe also handles information for payment security and fraud prevention under its privacy policy.

How the marketing inquiry form works

The form checks availability before enabling submissions. If delivery is unavailable, it provides a direct email alternative. When live delivery is enabled, your details go to our server for validation and then through Postmark to our Fastmail inbox. Your email is the reply address; the application does not include your connection address in the notification email.

The marketing form does not save inquiry contents to a database or file. It temporarily holds connection-based submission counts, expiry markers, a random submission reference, a hash of the inquiry fields, and the delivery outcome to reduce abuse and duplicate sends. These temporary records can expire or disappear when the server restarts.

If delivery fails or cannot be confirmed, your details stay in the page so you can retry or email us. The marketing form does not put inquiry contents or submission references in browser storage. In a development preview, an on-page notice explains when submissions are validated without being emailed or saved as an inquiry.

Cookies and browser storage

Private previews, signup, and client accounts use essential cookies to keep access limited to the relevant website and to keep you signed in. These are separate from optional marketing analytics.

Preview tools can remember their position and a reviewer name in local storage, and keep an unfinished comment in session storage. The client account uses session storage to remember the selected website and return to the right page after sign-in or billing. Clearing browser data removes these saved preferences and may require you to sign in again.

On the marketing website, your analytics choice is saved in local storage for 180 days. You can change it using Cookie choices in the footer.

Optional marketing analytics

We use Google Analytics 4 on the marketing website only if you choose Allow analytics. Until then, the Google tag is not loaded and no analytics information is sent to Google. Choosing No thanks does not affect the website or inquiry form.

With permission, Google receives page visits, engagement information, broad device and browser information, approximate location, a referring website origin, and an event when an inquiry is successfully sent. We do not send inquiry contents, email addresses, business names, submission references, private preview feedback, or account details to Analytics. We strip query strings and fragments from page addresses and limit campaign source, medium, and name values to letters, numbers, underscores, and hyphens.

Analytics cookies use the ywp_ga prefix and are limited to 180 days without extending that period on each visit. If browser storage is unavailable, your choice applies to the current page only. Withdrawing permission stops further collection and removes this website’s analytics cookies; it does not delete information Google already received.

Advertising personalization, Google signals, automatic form tracking, and session recording are not enabled. Cloudflare Web Analytics is disabled. Google explains its processing in How Google uses information from sites that use its services.

Who helps us run the service

  • Ready: hosts our application, its database and stored project files, and processes server requests.
  • Cloudflare: provides DNS, HTTPS delivery, request routing, and access protection. Operational logs can include request URLs and other technical metadata.
  • Postmark: delivers inquiry notifications, account invitations, sign-in emails, and unfinished-checkout reminders.
  • Fastmail: hosts our business mailbox and personal replies.
  • Stripe: stores payment methods and provides payment processing, subscriptions, invoices, and the billing portal.
  • Google Analytics: measures marketing visits and successful inquiries only with your permission.

Our team can access the information needed to provide your service. Provider processing locations and their own recordkeeping can vary; this policy does not promise that all processing takes place in one country. Information may also need to be disclosed where required by applicable law.

Our application does not sell inquiry information, send it to advertising platforms, or automatically send form contents or preview feedback to an AI model. Any use of confidential customer material in AI-assisted project work needs a separately agreed workflow.

Stored records and security

Client accounts, preview feedback, unfinished signup details and reminder delivery records, submitted files, approvals, and billing records are stored in our application. Email conversations remain in our mailbox. Hosting logs, provider records, and any retained backups are separate records; closing a preview link or signing out does not erase them.

Retention depends on the record and the provider. Contact us to ask about a specific record or request deletion. Some billing and business records may need to be kept to meet legal obligations or resolve an outstanding issue.

We use HTTPS, access checks for private previews and accounts, expiring sign-in links, and controls on repeated requests. Stripe handles card entry through its secure embedded form or hosted pages. No internet service can promise absolute security.

Questions and your choices

To ask about information you have provided, or request access, correction, or deletion, email hello@yourwebsitepeople.com. We may need to verify the request and identify the relevant record.

Available rights and required response periods depend on where you are and which laws apply. You can choose whether to allow marketing analytics and stop sharing a preview link; contact us if a link needs to be turned off.

Changes to this policy

The date at the top shows when this policy was last updated. We will explain meaningful changes to how we handle your information.