Privacy Policy

This Privacy Policy applies only to the GregDavisTech business portal available on business.gregdavistech.com. It covers the client workspace, project messaging, file uploads, approvals, billing, and DocuSign agreement workflows used for business projects. It is separate from the privacy policy that applies to the public gregdavistech.com website.

We may collect information you provide directly in the business portal or business contact form, including your name, email address, mobile phone number, company name, project title, project description, service selections, budget range, messages, uploaded files, change requests, invoice information, and security settings.

If you choose SMS updates, we also record the consent status, consent timestamp, IP address, user agent, applicable terms version, opt-out state, inbound and outbound message history, and delivery status needed to operate and document the customer-care program.

We use this information to create and manage your workspace, respond to website-service inquiries, coordinate scheduled consultations, route customer replies, review files and requests, deliver services, send invoices, maintain account security, keep internal records, and comply with legal or contractual obligations.

We may also use project and account data to troubleshoot portal issues, prevent abuse, and document project history so your build, approvals, and billing remain coordinated in one place.

When your project uses DocuSign for agreements or addenda, we may share the information necessary to prepare, send, view, sign, countersign, and track those documents. That can include your name, email address, project or company details, agreement content, signature routing information, timestamps, envelope status, and document metadata returned by DocuSign.

DocuSign may also capture information related to the signing event, such as completion timestamps and certificate-of-completion data associated with the envelope. We use that information only to administer the project agreement and keep an accurate business record of the transaction.

We use third-party services to operate the business website and portal and deliver related services. Depending on the feature, that may include Twilio for customer-care text-message delivery, Supabase for database and file storage, Stripe for invoices and payments, SendGrid for security emails, Google or GitHub for admin sign-in, and DocuSign for agreements and addenda.

Those providers only receive the information needed for their role in the service flow. Payment data is processed by Stripe, and e-signature workflow data is processed by DocuSign, under their own terms and privacy practices.

We keep project records, agreements, invoices, uploaded files, and related audit history for as long as they are reasonably needed to deliver services, support the business relationship, meet accounting or legal requirements, or protect against disputes.

We use reasonable administrative and technical safeguards to protect portal data, but no online service can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and MFA codes.

You may decline text-message consent and still submit the business contact form or create a portal account. If you opted in, you may revoke consent at any time by replying STOP. Reply HELP for assistance. If you want to update account information, request access changes, ask about retention, or raise a privacy question, contact GregDavisTech through the website or the contact information provided in your project relationship. Requests may be limited where information must be retained for contractual, security, accounting, or legal reasons.