Privacy

• Your name and email address, and a profile photo if you add one. We use them to sign you in and to show who wrote what.
• Messages you send in project chat. If you delete a message within 5 minutes, its text and attachment are erased, not just hidden.
• Files you upload, and your approvals and comments on our work.
• Invoices and payments. Invoices are created and paid through Stripe. We keep the invoice details (amounts, dates, status). Card and bank details go straight to Stripe; we never see or store them.
• Google sign-in. If you sign in with Google, we receive only your email address and name from Google. We don't get your password or access to your Google account, email or files.
• Sign-in security. If you add a passkey or turn on two-step verification, we store what is needed to check them (never your fingerprint or face, which stay on your device). For each signed-in device we keep the browser type, IP address and last active time, so you can review and sign out devices under Sign-in & security.
• Notification settings, including the browser push subscription if you turn on notifications.

We use only the cookies the portal needs to work. There are no advertising or tracking cookies.

• Sign-in cookies keep you signed in, so the installed app doesn't ask you to sign in each visit. They last up to 90 days and renew while you use the portal. Signing out removes them.
• A passkey reminder cookie remembers that we already offered to add a passkey on that device, for up to a year.
• Bot protection. The sign-in page uses Cloudflare Turnstile to check that a real person is signing in.

These providers process information only to run the portal for us:

• Supabase: database, sign-in and file storage.
• Vercel: hosting.
• Stripe: invoices and payments.
• Resend: sign-in links and notification emails.
• Google: sign-in, if you choose it.
• Cloudflare: bot protection on sign-in.

Vantage Strategy can see everything in the portal. Other people at your company who are portal members can see your name, photo and your company's projects, messages and files. People at other companies can't see any of it.

We keep your information while you work with us. If you ask us to delete your account, we will, except for records we have to keep, such as invoices for tax and accounting.

You can update your name and photo, remove passkeys, turn two-step verification on or off, and sign out other devices at any time. To see, correct or delete your information, or for any privacy question, email VantageStrategy@vantage-strategy-co.com.

If we change this notice, we'll update the date at the top and tell you in the portal.