Reports

How I look after your data

I'm one person, so I can tell you exactly where your information goes.

When you order a report

  • Card payments are handled by Stripe. I never see or store card numbers.
  • Your answers are saved with your order on Vercel, the company that hosts this site, over an encrypted (HTTPS) connection.
  • I use AI to help draft your report. I read and fix every report myself before it goes to you. Those services may process data outside Canada, for example in the United States.
  • Your form and report are kept so I can answer questions about your order. They are not deleted on a schedule yet. You can ask for a copy, or for them to be deleted, any time.
  • Please don't put customer names, health details, or passwords in the form. I don't need them to help you.

When I build your website or tool

  • Your domain, hosting, and accounts are in your name. You stay the owner.
  • I ask for the least access I need, through invites to your accounts rather than your password.
  • I use two-step sign-in on every account I use for your work.
  • When the work ends, or if you stop a care plan, I hand everything over and remove my access.

When I look after your site

On a monthly care plan, I handle the site for you, but it doesn't run on my own computers. It runs on proper hosting.

  • Its own space. Each site gets its own project on my paid Vercel account, or on Cloudflare for simpler sites, and its own code repository on GitHub. Your site isn't mixed in with anyone else's.
  • Your domain and email stay in your name. Always. I'm added to help, not to own them.
  • Nothing changes without a check. Every change is reviewed before it goes live, with a preview link you can look at first.
  • Two-step sign-in is on for every account I use to run your site.
  • Want to own the hosting too? You can open your own hosting account and invite me. I work in it until we hand it over.
  • If you leave, you get the site, the code repository, and everything we set up, and I remove my access.

The privacy law I follow

I aim to follow Canada's privacy law for businesses (PIPEDA): collect only what's needed, use it only for the reason you gave it, and let you see or delete it.

The same rules are on the privacy page.

Questions? Email kyle@krby.ca.