ATHANOR SOLUTIONS

Privacy Policy

1. Who we are and what this covers

This Privacy Policy explains how Athanor Solutions LLC ("Athanor," "we," "us"), a Virginia limited liability company located in Check, Virginia, collects and uses personal information. It covers two properties:

• Our website at athanorsolutions.com (including the booking page) — the public marketing site anyone can visit.
• Our client portal at app.athanorsolutions.net, also available as the "Athanor Client Portal" app on Google Play — the private, login-only area where our clients track their projects.

This policy concerns personal information of website visitors and portal users. Separately, how we handle a paying client's own business data while delivering services (their CRM records, contacts, invoices, and the like) is described in our Data-Handling Notice, provided to each client and incorporated into their Services Agreement.

2. Information we collect

On the website

• Contact form. When you submit our contact form, we collect your name, business name (optional), email address, and the message you write. This is processed by Netlify Forms.
• Booking. Our booking page embeds Calendly. When you schedule a call, you provide your name, email, and any details Calendly requests; that information is collected and processed by Calendly under its own privacy policy.
• Usage and analytics. We use Google Analytics 4 to understand how visitors use the site (pages viewed, approximate location, device and browser type, referring links, and time on page). This relies on cookies and similar technologies. IP addresses are handled by Google and may be shortened/anonymized as configured.
• Server and delivery data. Our host (Netlify) and network provider (Cloudflare) automatically log standard technical information such as IP address, request time, and user agent to serve and secure the site.
• Fonts. The site loads web fonts from Google Fonts, which involves your browser requesting files from Google and thereby sharing your IP address with Google.

In the client portal

• Account data. Your client ID, business name, contact name, email address, an optional username, and a password — stored only as a salted cryptographic hash (PBKDF2), which we cannot read.
• Project data. The project information we maintain for you: status, deliverables, updates, invoices, and messages you send us through the portal.
• Files you upload. Documents, images, PDFs, or short videos you share as references or inspiration for your project.
• Electronic signature records. When you sign a document in the portal, we record your typed name, the date and time, and the IP address from which you signed, as the legal record of that signature.
• Session data. A login cookie so you stay signed in, a time-limited sign-in link when you request one, and short-lived security logs (including IP address) used to block repeated failed login attempts.

3. How we use this information

• To respond to your inquiries and schedule and hold calls.
• To provide the client portal, authenticate your login, and deliver and track your project.
• To send you service-related and account communications (for example, project updates, a sign-in link, or a notice that we replied to a request).
• To maintain the legal record of documents you sign.
• To operate, secure, and improve our website and portal, and to prevent abuse.
• To comply with our legal and tax obligations.

We do not use your information for automated decisions that produce legal or similarly significant effects about you, and we do not sell personal information or process it for targeted advertising.

4. Cookies and similar technologies

• Essential portal cookie — keeps you logged in to the portal. The portal cannot function without it.
• Analytics cookies (website only) — set by Google Analytics 4 to measure site usage. You can decline these through your browser settings or browser-level controls, and doing so does not affect your ability to use the site.
• Calendly may set its own cookies on the booking page when the scheduling widget loads.

5. Service providers we share information with

We share personal information only with the service providers that help us operate, and only as needed for them to perform their function. We do not sell it. Our main providers:

Each provider handles data under its own terms and privacy policy. We may also disclose information if required by law, to enforce our agreements, or to protect the rights, safety, and property of Athanor, our clients, or others.

6. Payments

Invoices are processed by Stripe. Card details are entered on Stripe's secure checkout and never reach or pass through our servers.

7. How long we keep information

• Contact and booking inquiries — kept while we evaluate and follow up, and for a reasonable period afterward as a business record.
• Portal account and project data — kept for as long as you are a client and for a reasonable period afterward for our records and legal obligations.
• Signature records — retained as long as the related agreement may be relevant, as a record of what was signed.
• Analytics and technical logs — retained on a rolling short-term basis by us and our providers.

To have your portal account and associated data deleted, email us and we will remove it within 30 days, except information we must keep to meet a legal, tax, or record-keeping obligation.

8. Your rights and choices

Depending on where you live, you may have rights over your personal information. Virginia residents, under the Virginia Consumer Data Protection Act, may request to access, correct, or delete the personal information we hold about them, request a copy of it, and opt out of any sale or targeted advertising (we do neither), and of profiling in furtherance of decisions that produce legal or similarly significant effects (as described in Section 3, we do not use website or portal information for that kind of automated decision-making). You may also unsubscribe from non-essential emails at any time.

To exercise any of these, email contact@athanorsolutions.com. We will verify your request against the information we hold and respond within the timeframe the law requires. If we decline a request, you may appeal by replying to our response.

9. Security

All traffic to our website and portal is encrypted in transit with HTTPS. Portal passwords are hashed with PBKDF2 and are never stored or transmitted in readable form. Client accounts are isolated, so a login can only ever see its own project data. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect the information we hold.

10. Children

Our website and portal are intended for businesses and adults. They are not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact us and we will delete it.

11. Where information is processed

Athanor is based in the United States and our services are operated in the United States. If you access them from outside the U.S., your information will be processed in the U.S., where data-protection laws may differ from those in your location.

12. Changes to this policy

We may update this policy as our practices or the law change. We will post the revised version here with an updated date. Material changes affecting portal users may also be communicated by email or in the portal.

13. Contact us

Questions about this policy or your information:
Athanor Solutions LLC — Check, Virginia, USA
contact@athanorsolutions.com