Privacy Policy

1. What we collect

We only collect information that visitors give us, plus routine technical metadata required to keep the Site running.

Contact form submissions

When the contact form is submitted, we receive:

• First name and last name
• Company name
• Email address
• Phone number
• Message text
• Optional service-interest selections (which advisory areas you want to discuss)
• Optional audio recording (if you record a voice memo rather than typing the message)

Website-feedback submissions

The contact widget has an optional “This is website feedback” mode. In feedback mode, in addition to the fields above, we may receive optional screenshots and the URL of the page you are commenting on. Feedback submissions are stored in our own database so we can act on them; contact submissions are not.

Request metadata

For every form submission, our server briefly sees:

• The originating IP address — used only for rate-limiting abusive traffic. The rate-limit cache is in-memory and resets when the serverless function cycles (typically minutes).
• User-agent string and viewport size
• Timestamp and the page URL the form was submitted from

2. How we use it

Information collected through the Site is used to:

• Respond to your inquiry and coordinate consulting work
• Triage and fix issues reported through the website-feedback flow
• Protect the Site from abuse (rate-limiting, anti-spam)

We do not sell, rent, or trade your information. We do not share it with advertisers or data brokers. We do not use it to build profiles for marketing.

3. Third-party services

The Site relies on a small set of well-known infrastructure providers. Each handles a narrow slice of data; their own privacy policies govern what they do with it.

• Vercel— hosting and serverless functions. vercel.com/legal/privacy-policy
• Resend— transactional email delivery for contact-form submissions. resend.com/legal/privacy-policy
• Microsoft 365— the inbox that receives your contact-form email. privacy.microsoft.com
• Supabase— database storage for website-feedback submissions only (not standard contact submissions). supabase.com/privacy
• Groq— speech-to-text transcription of audio submitted through website-feedback mode only (not contact-mode audio, which is forwarded as an attachment and not transcribed). groq.com/privacy-policy
• Zoho— SMTP delivery for the website-feedback notification email. zoho.com/privacy

4. Data retention

Contact-form submissions arrive as email in the Spore Growth Partners inbox and are retained there as part of ordinary client-relationship management — on the same schedule as any other business correspondence.

Website-feedback submissions, including any uploaded screenshots or transcribed audio, are stored in our own Supabase database for as long as needed to act on the feedback and verify the fix.

Rate-limit IP records are held in-memory only and clear whenever the serverless function recycles — typically within minutes.

5. Your rights

If you are in California (CCPA / CPRA), the European Economic Area, the United Kingdom (UK GDPR), or another jurisdiction with comparable rights, you may request that we:

• Confirm what information we hold about you
• Provide a copy of that information
• Correct inaccurate information
• Delete the information, subject to legitimate-interest exceptions
• Opt out of any future use of the information for marketing

To exercise any of these rights, email alexander@sporegrowth.com. We respond within 30 days. We do not sell personal information, so a “Do Not Sell or Share” request is functionally a confirmation request.

6. Cookies and tracking

The Site does not set tracking cookies and does not run third-party advertising trackers. We do not currently use analytics that fingerprint visitors. If that changes, this policy and the “Last updated” date will change with it.

7. Children

The Site is directed at business and professional audiences and is not intended for users under 18. We do not knowingly collect personal information from children. If you believe a child has submitted information through the Site, contact us and we will delete it.

8. Security

Information submitted through the Site travels over TLS-encrypted connections. The infrastructure providers listed above operate their own security programs. No online system is perfectly secure, so we use the minimum-data-collection approach above to reduce risk by default.

9. Changes to this policy

We may update this policy as the Site or our consulting practice evolves. Material updates are reflected by changing the “Last updated” date at the top of this page.

10. Contact

Privacy questions can be sent to alexander@sporegrowth.com.