Privacy Policy

Information you provide through the intake form. When you submit the intake form at /intake, you may voluntarily provide your name, business name, email address, phone number, website or social media handle, a description of your business, information about your customers, tools, and processes, project goals and challenges, timeline and budget range, brand preferences, and any additional context you choose to share.

Optional file attachments. The intake form lets you attach up to five files (up to 10 MB each) such as screenshots, PDFs, logos, brand materials, slide decks, or design files. Attachments are optional. You should only upload files you are authorized to share and should avoid sending passwords, payment information, Social Security numbers, medical information, or other sensitive personal information.

Information you provide through The Busy Hour Workroom. If you are invited to the Workroom as a client, we collect your email address and password (for sign-in), any profile information you supply, project files you upload, and messages, requests, or notes you share within the Workroom.

Information you send by email. If you email us directly, we receive whatever you choose to include in that message.

Limited technical information. Our hosting provider and third-party services listed in Section 3 may automatically receive standard web information such as IP address, browser and device type, approximate location derived from IP, the pages you visit, referring website, date and time of visit, and website interactions.

We may use collected information to:

• Review and respond to inquiries submitted through the intake form or by email
• Determine whether a project may be a good fit
• Prepare recommendations, proposals, estimates, or project plans
• Deliver services and manage active client relationships through the Workroom
• Send Workroom account emails such as invitations and password resets
• Maintain business, accounting, and legal records
• Protect the website, business, clients, and users from misuse or security threats
• Comply with applicable legal obligations

We do not use your intake submissions, Workroom content, or uploaded files to train artificial intelligence models, and no automated AI processing is performed on your submissions.

We do not sell personal information. To operate the website and serve inquiries and clients, we rely on the following third-party service providers. Each acts as a processor and is subject to its own privacy and security practices.

• Lovable (United States) — hosts and serves the website and the Workroom application.
• Lovable Cloud, powered by Supabase (United States) — provides the database, authentication, and private file storage used by the Workroom and for intake form attachments.
• Formspree (United States) — receives and stores intake form submissions on our behalf and sends the resulting notification email.
• Google (United States) — Google Fonts is loaded on our pages, which means Google receives your IP address and user-agent when the site loads its fonts. We may also export or download intake submissions to Google Drive for our own recordkeeping. We do not currently use Google Analytics or any advertising or remarketing pixels; if that changes, this policy will be updated.

We may also share information when reasonably necessary to comply with a law, regulation, court order, or legal process; to enforce an agreement; to protect the rights, safety, property, or security of The Busy Hour or others; to investigate suspected fraud, misuse, or unlawful activity; or to complete a business transfer, merger, sale, or reorganization.

Intake form field responses (name, email, project details, and so on) are transmitted to and stored by Formspree, and are delivered to us by email. Access to that Formspree inbox is limited to the owner of The Busy Hour. We may also save or export a copy to Google Drive for our own records; that copy is stored in an account controlled by the owner.

Intake form attachments are uploaded to a private storage bucket in Lovable Cloud (Supabase). Access to the raw storage bucket is restricted to server-side administrative code. When you submit the form, the system generates short-lived download links (valid for approximately seven days) and includes them in the Formspree notification so we can review your files. The files themselves are not publicly accessible and are not indexed by search engines.

Workroom data (client profiles, projects, files, messages, requests, invoices) is stored in Lovable Cloud (Supabase) in the United States and is protected by row-level security. Each client can see only the projects and materials associated with their own client account. Administrative access is limited to the owner of The Busy Hour.

We use a small number of first-party browser storage items to make the site work. Optional analytics cookies are off by default and only load if you accept them through our cookie banner or the Cookie Preferences link in the footer. No advertising, remarketing, session replay, heatmap, or user-recording tools are installed.

Cookie categories. Essential — required for core website functions, security, form operation, and saved preferences (always active). Analytics — optional; if you consent, Google Analytics 4 may set cookies (for example _ga, _ga_<id>) to help us understand general website usage. IP anonymization is enabled. We do not currently use any Advertising category tools.

• busyhour_cookie_consent_v1 (local storage) — records your cookie choices so we do not ask again on every visit.
• busyhour_intake_v2 (session storage) — temporarily saves your in-progress intake form answers on your device so a page refresh does not lose them. Cleared when you submit or close the tab. File attachments are never saved here.
• sb-<project>-auth-token (local storage) — set only if you sign in to the Workroom. Holds your Workroom session so you stay signed in. Removed when you sign out.
• sidebar_state (cookie) — remembers whether the Workroom side navigation is open or collapsed. Lasts about 7 days and only appears inside the Workroom.

You can change or withdraw your consent any time using the “Cookie Preferences” link in the footer. You can also clear these items through your browser settings. Clearing the Workroom session will simply sign you out.

Information submitted through the intake form is used to review the request, respond to the person submitting it, and determine appropriate next steps. Providing the form is optional; you can also reach us by email at hello@thebusyhour.com.

Please do not submit through the form or its attachments:

• Social Security numbers or government identification numbers
• Passwords or account credentials
• Payment card details or financial account numbers
• Medical records or protected health information
• Highly confidential employee or customer information
• Any other sensitive personal information that is not necessary for the project inquiry

Uploaded materials should contain only information you are authorized to share.

Executable file types are not accepted. Accepted attachment types include common images, PDF, Word, PowerPoint, Figma or Sketch files, and .zip archives.

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, to maintain appropriate business records, resolve disputes, enforce agreements, or satisfy legal obligations.

• Intake inquiries that do not become a client relationship: generally retained for approximately 24 months in our records, unless a longer period is reasonably necessary. The provider that processes the form (Formspree) also retains submissions under its own plan-based retention policy.
• Intake form attachments in Lovable Cloud storage: retained until we no longer need them to evaluate or fulfill the inquiry, and then deleted on a periodic basis.
• Workroom client and project records: retained for the life of the client relationship, and afterward for as long as reasonably needed for contractual, accounting, tax, insurance, or legal purposes.
• Backup or exported copies (for example an export to Google Drive) are subject to our own periodic review and deletion.

We may delete or anonymize information when it is no longer reasonably needed.

We use reasonable administrative, technical, and organizational measures intended to protect personal information. These include private (non-public) storage buckets, row-level security on Workroom database tables, encrypted transport (HTTPS), and invite-only Workroom accounts (no self-service sign-up).

However, no internet transmission, electronic storage system, website, or email service can be guaranteed to be completely secure. Please use discretion when submitting information online.

The Busy Hour is operated from the United States and the service providers listed in Section 3 store information in the United States. If you access the website from outside the United States, please be aware that information you submit may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.

You may contact us to:

• Ask what personal information you have provided to the business
• Request correction of inaccurate information
• Request deletion of information, subject to legal and legitimate business retention needs
• Ask a question about how your information is handled

Requests may be sent to hello@thebusyhour.com. We may need to verify the requester's identity before completing certain requests and will respond within a reasonable timeframe.

California residents may have privacy rights under applicable California law, including the right to know, correct, or delete personal information we hold about them. We will review reasonable requests and respond as required by laws that apply to the business.

The Busy Hour does not sell personal information and does not share personal information for cross-context behavioral advertising.

Some browsers offer a "Do Not Track" (DNT) setting, and some browsers or extensions send a Global Privacy Control (GPC) signal. Because there is not a universally accepted standard for responding to these signals, and because this website does not currently run advertising trackers, we do not take a distinct action in response to DNT or GPC signals at this time. If we add tracking that would meaningfully be affected by these signals in the future, this policy will be updated.

The website and services are intended for business owners and adult users and are not directed to children under 13. The Busy Hour does not knowingly collect personal information directly from children under 13. If such information is discovered, please contact us so it can be reviewed and deleted where appropriate.

The website may contain links to third-party websites or social media platforms. We are not responsible for the privacy practices, security, or content of those services. Please review their privacy policies before providing information.

This Privacy Policy may be updated periodically to reflect changes in the website, services, technology, service providers, legal requirements, or business practices. The effective date at the top of the page will be updated whenever material changes are made.

Questions or requests concerning this Privacy Policy may be directed to:

See also our intake form for the acknowledgement you provide when submitting a project inquiry.