Privacy Policy

1. Who We Are

RefreshWeb ("we," "us," or "our") is a web design and maintenance service operated by Carlos Mendez. We provide ongoing website update services to small businesses through a subscription model. You can reach us at carlos@mostlyclicks.com.

2. Information We Collect

We collect information you provide directly to us, including:

• Contact information — name, email address, and business name when you fill out our Get Started form
• Account information — name and email address when you are onboarded as a client
• Website content — text, images, and files you upload when submitting update requests
• Payment information — billing is processed by Stripe; we never store your card details
• Usage data — request history and update activity within your client portal

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our web maintenance services
• Process your update requests and communicate changes to your website
• Process subscription payments and manage billing
• Respond to inquiries submitted through our contact form
• Send service-related notifications (e.g., when an update goes live)
• Improve our services based on how they are used

4. Third-Party Services

We use the following third-party services to operate RefreshWeb. Each has its own privacy policy:

• Supabase — database and file storage
• Stripe — payment processing and subscription management
• Vercel — hosting for this platform and client websites
• GitHub — version control and code deployment for client websites
• Anthropic (Claude AI) — AI-assisted code suggestions for website updates

Your website content and update requests may be processed by Anthropic's Claude AI to generate suggested code changes. This content is used solely to produce your requested website updates and is subject to Anthropic's privacy policy.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide services. If you cancel your subscription, we will retain your data for 90 days before deletion, giving you time to export anything you need. You may request earlier deletion by contacting us.

6. Data Security

We take reasonable measures to protect your information, including encrypted data storage via Supabase and secure payment processing via Stripe. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your data
• Opt out of non-essential communications

To exercise any of these rights, email us at carlos@mostlyclicks.com.

8. Cookies

We use a single session cookie to keep you logged in to the client portal. This cookie is strictly necessary for the service to function and does not track you across other websites.

9. Changes to This Policy

We may update this policy from time to time. When we do, we'll update the effective date at the top of this page. Continued use of our services after changes constitutes acceptance of the updated policy.

10. Contact

If you have any questions about this Privacy Policy, please contact us at carlos@mostlyclicks.com.