Who we are
Velin.build is operated by Jay Digital (Johnathan K M Geary), a Nevada sole proprietorship (Nevada LLC formation pending). All inquiries about this policy can be sent to thejaydigital@gmail.com.
What we collect
- Account data you provide: name, email, phone, billing and service address, business name, birthday, opt-in preferences.
- Quote data: services you select, your zip code (used for cost-of-living-based pricing), and notes you add.
- Agreement consent record: IP address and user agent at the moment you confirm an engagement, plus a hash of the agreed text. This is the digital equivalent of a signature.
- Payment data: Stripe processes all card data. We store the resulting Stripe identifiers, amounts, and status. We never see or store card numbers.
- Scheduling data: appointment times, location zip, optional notes. If you connect Google Calendar (admin only) we read busy windows; we do not read event content.
- Newsletter data: when you subscribe via the form, your email is sent to Mailchimp and we keep a local copy of the subscribe status for reconciliation.
- Earn task completions: the proof URL or text you submit, and your account identifier.
- Credit ledger entries: every credit movement is logged with timestamp, surface, and a short description.
- Names: where you give them, we hold a legal name and a preferred name separately. The legal name appears on agreements and invoices; the preferred name is what the site calls you.
- Email records: for messages this site sends you, we log the recipient address, subject, which template was used, and whether it was delivered. We do not store the message body.
- Approximate location: the postal code you give is resolved to coordinates so distance and travel can be calculated. We do not track your device location.
How we use it
- To deliver services you book and to communicate about those services.
- To compute quote pricing using a U.S. Census ACS-based cost-of-living index keyed to your zip code.
- To record your consent to engagement agreements in a tamper-evident way.
- To send the newsletter when you opt in.
- To track credit balances and ledger movements.
Third parties we share with
- Supabase: hosts the database and authentication.
- Stripe: processes payments and credit purchases.
- Mailchimp: stores newsletter subscriber records.
- Google Calendar (admin scope, optional): read-only freebusy access plus event push for booked appointments. We request the minimum scope required.
- U.S. Census Bureau: ACS public data is fetched annually to refresh the cost-of-living index. Zippopotam.us (public-domain Census ZCTA data) is used to resolve city and state from your zip. No personal data is sent.
Cookies and session storage
Velin.build uses session cookies for authentication. We store quote-cart state in your browser's local storage so you can close the tab and come back. We do not run third-party analytics, advertising, or trackers.
Your rights
Email thejaydigital@gmail.com with what you want and the address on your account, and we will confirm within 45 days. You can request access, correction, or deletion of your personal data. Account deletion removes your account row and cascades to quotes, appointments, credits, and completions. Immutable agreement records remain for the legal retention period required by Stripe and applicable tax law.
Where your data is held
Records are stored in Supabase (PostgreSQL) and the site runs on Vercel, both on infrastructure located in the United States. Payment records are held by Stripe, and email delivery records by Resend. If you are outside the United States, using this site means your information is processed there.
How long we keep it
- Account and project records: while your account exists, and until you ask us to delete them.
- Anything with money attached, including invoices, payments and signed agreements: at least seven years, because tax and accounting rules require it. These survive account deletion.
- Email delivery records: two years, so a question about whether something reached you can be answered.
- Quote drafts you never submitted: removed with your account.
How it is protected
Access is restricted at the database level, so one account cannot read another's records. Traffic is encrypted in transit. Card numbers never reach this site. Payment provider keys are held encrypted. No system is perfect, and we do not claim otherwise: if a breach affects your personal data we will tell you by email without undue delay, and in any case within the time your state's law requires.
Nevada and other state rights
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. Nevada residents have a statutory right to tell a business not to sell their data (NRS 603A); you can exercise it, and confirm our position above, by emailing thejaydigital@gmail.com. If you live in a state with broader privacy rights, such as California, Colorado or Virginia, you may also request access, correction, deletion or a portable copy. We answer every such request within 45 days and will not charge you or treat you differently for making one.
Children
Velin.build is not intended for users under 13. Do not create an account if you are under 13.
Changes
We update this policy occasionally. The last-updated date at the top reflects the most recent change. Material changes will be communicated in the newsletter or via in-app banner.