Policy · Data minimization

Collect what is needed to scope the room, then expire it.

The intended production service stores protected submissions in Cloudflare D1 and private uploads in R2, subject to activation configuration and final legal review.

Submitted details

Name, email, phone, brief, offer, quantity, configuration, consent, and limited references are used to assess and respond to the request.

Retention intent

Private reference uploads are scheduled to expire after 30 days. Inactive lead and order-intent records are scheduled to expire after 12 months.

Protection boundary

Turnstile verification, rate limiting, server validation, safe-file checks, private storage, and opaque IDs reduce abuse; final identity and privacy notices remain activation requirements.