Privacy notice
What we collect when you ask about a project, save a design or work with us in the client portal, why we collect it, and the choices you have.
Who we are
Cornerstone is a digital presence and product studio. We build websites, local search foundations and small software products for local businesses. This notice covers this website, the project form, Prototype Studio and the private client portal.
The business responsible for your information is [Legal entity name and form, to be confirmed], [Registered business address, to be confirmed]. Questions about this notice go to [Privacy and legal contact email, to be confirmed]. Until that address is confirmed, ask your Cornerstone contact.
What we collect
We collect only what a project needs.
- When you ask about a project (the project form): your name, email, phone number if you give one, how you prefer to be contacted, your business name, website, city and main service, and anything you write to us.
- When you save a design in Prototype Studio: your name, email, phone number if you give one, your business name, trade and city, and the design you made. Reactions left on a shared preview are stored with it.
- In the client portal: the name, email and role of each person your business invites; your intake answers; the files you upload; review feedback; change decisions; and each approval you give (the typed name and the time). We keep an activity record of these actions so everyone can see what was agreed.
- Technical information: the cookies that keep you signed in (see Cookies below), and your network address, which we use for a short time to stop abuse such as repeated form submissions. Counts of how often a shared preview was opened are kept without naming the viewer.
Please never put passwords or other credentials in the intake, a file or a message. We will ask you to share access through a password manager or another secure method.
How we use it
- To reply to your request and follow up personally, by the channel you chose.
- To recommend a package, write your scope, and deliver, review, launch and hand off the project.
- To keep a reliable record of what was agreed: the accepted scope, the approved build plan, change decisions and launch approval.
- To send the sign-in links you ask for. The portal sends no other email; your Cornerstone contact shares invite links and updates with you directly.
- To protect the site and the portal from abuse.
- To improve how we work, using our own project notes.
AI-assisted documents
We turn intake answers into project documents (for example a project brief or a product plan). When the team chooses to, the text of a document and the intake answers behind it may be sent to an AI model provider to tighten the wording. The AI never adds business facts, and every document is reviewed by a person before you see it. Your files are not sent.
Where it is kept and for how long
Information is stored with our hosting and database providers. [Storage region, to be confirmed]
- Project inquiries: [retention period, to be confirmed].
- Saved designs that never became a project stop being shown after 120 days without a view. [deletion period, to be confirmed]
- Project records, including approvals and payment records, are kept for the life of the engagement and afterwards as the record of what was agreed. [retention period, to be confirmed]
- Abuse-prevention counters that include a network address are cleared after about two days.
How we protect it
Client files are kept in private storage. Only the people on a project and the Cornerstone team can open them, and every download goes through an access check and a link that expires within a minute. Sign-in uses one-time email links instead of passwords. No method is perfect; if we learn of a problem that affects your information, we will tell you.
Your choices
You can ask for a copy of the information we hold about you, ask us to correct it, or ask us to delete it. Write to [Privacy and legal contact email, to be confirmed] or tell your Cornerstone contact. We may need to keep some records, such as an accepted scope, approvals and payment records, where the law or an open engagement requires it.
[Rights specific to your state or country, and response times, to be confirmed by counsel]
Children
Our services are for businesses. We do not knowingly collect information from children.
Changes to this notice
When this notice changes, we update the version and date at the top. This version is: Privacy Notice draft 2026-10-08. The terms that govern a project are in the Service Terms.