Privacy Policy

B3 Digital, which also operates as B3 Software, builds websites, software, and internal tools for small businesses. This policy covers b3.digital: the public pages, our contact forms, the software store and documentation, and the signed-in client portal.

Most of what we hold is information you sent us on purpose.

• Contact and project inquiries: your name, email address, phone number, company, and a description of the project or the problem. Some forms also ask for your website, your preferred way to be contacted, your timeline, and your budget range.
• Client portal accounts: your name, email address, phone number, your profile picture if your sign-in provider supplies one, your role, and the company you belong to.
• Service requests: the details of what you are asking for, when you need it, and any files you attach.
• Feedback: when you send feedback from the portal, we receive your message together with a screenshot of the page you were on, which captures what is on your screen at that moment.
• Support email: the message, the address it came from, and any attachments.
• Access information: clients share access to the systems we build and maintain for them. We hold it only while we support that system, we keep it encrypted, and we limit it to the people who need it to do the work.
• Payment and billing information, described below.

• Campaign and referral information about how you found us, which is attached to your inquiry when you submit a form.
• Your IP address. We use it transiently to protect against abuse, and we do not store it with your inquiry.
• Standard server logs kept by our host.
• Limited technical signals used to detect suspicious sign-ins.

You can sign in to the client portal with your Google account. When you do, we receive your name, your email address, and your profile picture from Google through our sign-in provider.

We use that information only to create your account, to recognize you when you sign in, and to contact you about your work with us. We do not sell it, we do not share it with advertisers, and we do not use it for advertising of any kind.

You can disconnect B3 from your Google account at any time in your Google account settings, and you can ask us to delete the account entirely using the address at the bottom of this page.

On our public pages we use Microsoft Clarity, which records how visitors move through a page and builds heatmaps from it, and Vercel analytics, which measures page views and page speed. Neither runs inside the client portal.

We use Sentry for error monitoring, which may include limited session replay with sensitive fields masked, so that we can diagnose problems.

Our pages load fonts from Google, which means Google sees your IP address when a page loads.

We do not use advertising pixels, we do not run advertising on this site, and we do not sell personal information.

Card payments are processed by Stripe on pages that Stripe hosts. We do not receive or store your card number. We keep the record of the transaction: what was purchased, the amount, and whether it was paid.

For project invoicing we use QuickBooks Online, so that clients can see their invoices and payments in the portal.

• To answer your inquiry and prepare a proposal.
• To do the work you hired us for, and to support it afterwards.
• To run client portal accounts and to control who can see what.
• To send transactional email: notifications, reports, invitations, and support replies.
• To bill you and to keep accurate financial records.
• To keep the site working and to prevent abuse.
• To understand, in the aggregate, which pages are useful.
• To meet our legal, tax, and accounting obligations.

We do not sell personal information, we do not use it for advertising, and we do not add people to a marketing list because they filled in a contact form.

We rely on established vendors rather than running everything ourselves. Each one receives only what it needs to do its part.

• Convex: database and file storage.
• Vercel: hosting, and the analytics described above.
• WorkOS: sign-in, including Google sign-in, and organization membership.
• Resend: transactional and support email.
• Stripe: card payments and subscriptions.
• Intuit QuickBooks Online: invoicing and accounting.
• Monday.com: project and request tracking, which receives your request details along with your name and email address.
• Microsoft: Clarity analytics on the public pages.
• Sentry: error monitoring.
• Google: sign-in through WorkOS, and web fonts.
• An object storage provider, for software downloads.
• A malware scanning provider, for email attachments.

We do not sell personal information and we do not trade it. We share it only in these situations:

• With the vendors listed above, so they can provide their part of the service.
• With people at your own company who have portal access to your account.
• When you ask us to, for example when we send a report to a recipient you named.
• When the law requires it, or where it is needed to protect our rights, our clients, or someone.
• If the business is ever sold or merged, in which case the buyer is bound by this policy unless it tells you otherwise first.

Reports can be shared by link with people you choose. Treat a share link as something anyone holding it can open.

We use cookies to sign you in, to keep you signed in, and to remember which sign-in method you used last. None of them are advertising cookies.

Your browser also stores some preferences locally so the site behaves the way you left it. You can clear all of this in your browser settings.

Microsoft Clarity sets its own cookies on the public pages. Blocking third-party cookies, or using a tracker blocker, stops it.

In general terms:

• Contact inquiries: while we are in conversation and for a reasonable period afterwards.
• Client portal accounts and project records: for the life of the engagement and for a period after it ends.
• Billing and invoice records: for as long as tax and accounting rules require.
• Feedback: until the issue is resolved and long enough afterwards to confirm the fix held.
• Access information: while we support the system it belongs to.
• Analytics and error data: the retention periods set by the providers named above.

If you want your information removed sooner, ask, and we will do it unless we are legally required to keep it.

We take reasonable measures to protect the information we hold, including encryption and limiting access to the people who need it for their work.

No system is perfectly secure, and we are not going to pretend otherwise. If we have a breach that affects you, we will tell you.

You can ask us to show you what we hold about you, correct it, export it, or delete it. Email the address below and say what you want. We will not charge you for it and we will not make it difficult.

Depending on where you live, you may have formal rights under laws such as the California Consumer Privacy Act or the General Data Protection Regulation, including the right to know what is held, the right to have it corrected or deleted, the right to a copy, and the right not to be treated worse for asking. We handle those requests the same way for everyone, wherever you live.

You can opt out of the analytics described above by using a tracker blocker or by blocking third-party cookies in your browser. It does not affect your ability to use the site or the portal.

Our services are for businesses. This site is not directed at children, and we do not knowingly collect personal information from anyone under 13. If you believe a child has sent us information, tell us and we will delete it.

We are based in the United States, and our vendors are mostly United States companies, so your information is generally stored and processed in the United States. Some of those vendors operate globally and may process data in other countries. If you are writing to us from outside the United States, your information will be handled here, where privacy law may differ from the law where you live.

We will update this page as our services change, and the date at the top tells you when it last changed. If a change materially affects an active client, we will tell that client directly rather than relying on this page alone.

Questions, corrections, and requests to see or delete your information all go to the same place, and a person reads it.