Privacy Policy

1. Information We Collect

When you interact with Panoromiq, we may collect the following types of information:

• Contact Information: Name, email address, phone number, and business name provided through our contact form or booking system.
• Business Information: Industry, business type, and service interests you share with us.
• Usage Data: Pages visited, time spent on site, browser type, device information, and referring URLs collected via Vercel Analytics.
• Payment Information: Billing details processed securely through Stripe. We never store credit card numbers on our servers.
• Communication Data: Messages, support tickets, and campaign approval feedback within the client portal.

2. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and schedule strategy calls
• Provide and manage digital marketing services you've subscribed to
• Process payments and maintain billing records
• Send transactional emails (confirmations, invoices, reports)
• Improve our website experience through analytics
• Ensure the security and integrity of our platform

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Third-Party Services

We use the following trusted third-party services to operate our platform:

• Stripe — Payment processing (PCI DSS compliant)
• Supabase — Database and authentication (encrypted at rest and in transit)
• Vercel — Website hosting and analytics
• Resend — Transactional email delivery
• OpenAI — AI-powered support chatbot (no personal data is stored by OpenAI)
• Cloudflare Turnstile — Bot protection on forms

4. Data Security

We implement industry-standard security measures to protect your data:

• All data transmitted over HTTPS (TLS 1.3)
• Encrypted database connections (Supabase with RLS policies)
• API keys stored in server-side environment variables, never exposed to the browser
• JWT-based authentication with automatic token rotation
• Rate limiting and bot protection on all public endpoints

5. Cookies

We use minimal, essential cookies for authentication and session management. We do not use advertising or tracking cookies. Our analytics are privacy-first (Vercel Analytics does not use cookies).

6. Your Rights

You have the right to:

• Access, update, or delete your personal information
• Request a copy of the data we hold about you
• Opt out of non-essential communications
• Request account deletion (client portal data will be permanently removed)

For GDPR/CCPA requests, please contact us at the email below. We will respond within 30 days.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Contact form submissions and booking requests are retained for 2 years. You may request deletion at any time.

8. Changes to This Policy

We may update this privacy policy from time to time. When we do, we'll update the "Last Updated" date at the top and notify active clients via email for material changes.