Privacy Policy

Effective Date: May 3, 2026

Sage Ideas LLC ("Sage Ideas," "Studio," "we," "us," or "our") operates sageideas.dev and related subdomains. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and what rights you have over it.

We've written this in plain English on purpose. If something isn't clear, email us at legal@sageideas.dev.

---

1. Who We Are

Sage Ideas LLC is a Florida limited liability company headquartered in Orlando, Florida. For purposes of applicable privacy law, Sage Ideas is the data controller of personal information collected through this website.

Contact: Sage Ideas LLC Orlando, Florida, USA legal@sageideas.dev

---

2. What Information We Collect

We collect only what we need to operate the site and respond to inquiries. Here's exactly what that is:

2.1 Contact Form Submissions

When you fill out the contact form on sageideas.dev, we collect:

• Full name
• Email address
• Company name (optional)
• Inquiry type (e.g., project inquiry, general question)
• Message content
• Submission timestamp

Why: To respond to your message and understand your needs. Transactional email (our reply and any confirmations) is delivered through Resend — see Section 5 for its role as a processor. We do not add you to any mailing list without separate consent.

2.2 Newsletter Opt-In

If you subscribe to our email newsletter, we collect:

• Email address
• Opt-in IP address (to record consent)
• Opt-in timestamp

Why: To send you studio updates, project announcements, and occasional essays. You can unsubscribe at any time via the link in any email.

2.3 Meeting and Booking Metadata (Cal.com)

If you schedule a call through our Cal.com booking link, Cal.com collects:

• Your name and email address
• Preferred meeting time and timezone
• Any notes you add to the booking

This data is collected and stored by Cal.com, Inc. under their own Privacy Policy. We receive a copy of the booking details to prepare for the meeting. We do not store calendar data in our own databases beyond email notifications.

2.4 Payment Data (Stripe)

Any payment processing on sageideas.dev is handled directly by Stripe, Inc. We do not collect, store, or process your payment card information. When you pay via Stripe, you are subject to Stripe's Privacy Policy. We may receive a transaction ID, payment status, and the last four digits of a card for record-keeping purposes.

2.5 Website Analytics (Vercel Analytics)

We use Vercel Analytics to understand how visitors use our site. Vercel Analytics is a privacy-friendly analytics tool that:

• Does not use cookies
• Does not store personally identifiable information
• Does not track users across sites
• Collects only aggregate, anonymous data such as page view counts, referring URLs, browser type, and country-level geography

No personal information is processed by our analytics setup.

2.6 Server and Infrastructure Logs (AWS CloudWatch)

Our application infrastructure runs on Amazon Web Services (AWS). AWS CloudWatch automatically logs:

• Request timestamps
• IP addresses (anonymized where possible)
• HTTP method, path, and status codes
• User agent strings

These logs are used for security monitoring, debugging, and uptime management. Logs are retained for 30 days and then automatically purged. We do not use server logs for marketing purposes.

2.7 Cookies and Local Storage

We use a minimal set of cookies strictly necessary for site function (e.g., session state, dark/light mode preference). We do not use third-party advertising or tracking cookies. For full details, see our Cookie Policy.

---

3. How We Use Your Information

| Data | Primary Use | Secondary Use | |------------------------|------------------------------------------------|----------------------------------------| | Contact form data | Reply to your inquiry | Internal notes; CRM if engaged | | Newsletter email | Send studio updates and announcements | None | | Cal.com booking data | Prepare for and conduct scheduled meetings | Follow-up correspondence | | Stripe transaction data| Record-keeping, invoicing | None | | Vercel Analytics | Site performance and content improvement | None | | AWS CloudWatch logs | Security monitoring, debugging | None |

We do not sell, rent, or trade your personal information to third parties. Ever.

---

4. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

• Contractual necessity — Processing required to respond to a service inquiry or fulfill an agreement (GDPR Art. 6(1)(b)).
• Legitimate interests — Analytics and server logging to maintain a secure, functioning website, where those interests are not overridden by your privacy rights (GDPR Art. 6(1)(f)).
• Consent — Newsletter subscription and any optional cookies, which you may withdraw at any time (GDPR Art. 6(1)(a)).
• Legal obligation — Where we must retain records to comply with US law (GDPR Art. 6(1)(c)).

---

5. Data Processors and Sub-processors

We use the following third-party services to operate our site. Each acts as a data processor under applicable law:

| Processor | Role | Data Shared | Privacy Policy | |--------------|-------------------------------|---------------------------------------|---------------------------------------------------| | Resend | Transactional email delivery | Your email address, message content | resend.com/privacy | | AWS | Cloud hosting and logging | Server logs, hosted application data | aws.amazon.com/privacy | | Vercel | Website hosting and CDN | Anonymous analytics data | vercel.com/legal/privacy-policy | | Cal.com | Meeting scheduling | Booking name, email, meeting details | cal.com/privacy | | Stripe | Payment processing | Payment transaction data | stripe.com/privacy | | Supabase | Database (if applicable) | Form submissions, user records | supabase.com/privacy |

We require all processors to maintain appropriate data security standards and use your data only for the purposes we specify.

---

6. Data Retention

We retain personal data only as long as necessary:

• Contact form submissions: 2 years from submission, or until no longer needed for business correspondence.
• Newsletter subscriber records: Until you unsubscribe, plus 30 days for processing.
• Cal.com booking records: Retained by Cal.com per their policy; we delete meeting notes within 1 year of the meeting date.
• AWS CloudWatch logs: 30 days, automatically deleted.
• Payment records: 7 years, as required by US tax law.

---

7. International Data Transfers

Sage Ideas LLC is based in the United States. If you access sageideas.dev from outside the US, your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.

For users in the EEA or UK, we rely on Standard Contractual Clauses (SCCs) or equivalent transfer mechanisms through our processors (Vercel, AWS, Resend) for any cross-border transfers.

---

8. Your Privacy Rights

Depending on where you live, you may have the following rights:

8.1 For Everyone

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate information.
• Deletion: Ask us to delete your personal data, subject to legal retention requirements.
• Opt-out: Unsubscribe from email communications at any time.

8.2 GDPR Rights (EEA / UK Residents)

In addition to the above:

• Restriction: Request that we restrict processing of your data.
• Portability: Receive your data in a machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior lawful processing.
• Lodge a complaint: File a complaint with your local supervisory authority (e.g., the ICO in the UK, or the relevant EU DPA in your country).

8.3 CCPA Rights (California Residents)

If you are a California resident under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information collected about you.
• Right to Delete: Request deletion of personal information, subject to exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: We do not sell or share personal information for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

California-specific disclosures: In the past 12 months, we have not sold personal information to any third party. We have shared contact information with service providers (Resend, Supabase) solely for operational purposes.

8.4 Exercising Your Rights

To exercise any of the above rights, email us at legal@sageideas.dev with the subject line "Privacy Request." We will respond within 30 days (or within the timeframe required by applicable law). We may need to verify your identity before fulfilling a request.

---

9. Security

We implement reasonable administrative, technical, and physical safeguards to protect your data against unauthorized access, disclosure, alteration, or destruction. These include:

• HTTPS/TLS encryption for all data in transit
• Access controls limited to authorized personnel
• Regular security reviews of third-party processors
• AWS-managed encryption at rest for server infrastructure

No system is perfectly secure. If we become aware of a data breach that affects your rights or freedoms, we will notify you and applicable regulators as required by law.

---

10. Children's Privacy

sageideas.dev is not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has submitted personal information to us, contact us at legal@sageideas.dev and we will delete it promptly.

---

11. Links to Third-Party Sites

sageideas.dev may contain links to external websites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before submitting any personal information.

---

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we'll update the "Effective Date" at the top of this page. Material changes will be communicated via a notice on our website or by email where we hold your address. Continued use of sageideas.dev after an update constitutes acceptance of the revised policy.

---

13. Contact Us

Questions, concerns, or requests? We're humans — reach out directly.

Sage Ideas LLC legal@sageideas.dev Orlando, Florida, USA sageideas.dev