Privacy Policy

Information you submit

Match the Work may collect information you voluntarily submit through a website preview request, client feedback or an approved-client intake, including your name, business name, contact information, website details, services, project preferences, and files you choose to upload.

How information is used

Submitted information is used to review inquiries, communicate about website projects, prepare or deliver services, maintain project records, and support the ongoing website relationship.

Form records

Website form submissions are retained in protected records outside the public web root so an inquiry is not lost if an email notification fails. Backups are kept outside the public web root under restricted access.

Project files, free Previews and feedback

Client files are retained throughout the active client relationship and for 90 days after its recorded effective end date. An issued free Preview and its associated records and files are retained until the prospect makes a decision. Silence or inactivity is not a decline. If the prospect becomes a client, the client policy applies. If the prospect explicitly declines, the associated records and files are retained for 120 days after the recorded decline date.

These periods identify eligibility for owner-reviewed deletion. Automatic deletion is disabled; deletion is not promised exactly on day 90 or 120. Missing or uncertain status or dates mean preserve the records and flag them for review. No fixed deletion deadline is assigned to a request that never reached an issued Preview. Active-client assets, shared assets and Match the Work’s own logo are protected. Agreements, financial records and review consent or verification evidence are handled separately.

JPG, PNG and WEBP uploads, plus reviewed static SVG logos in the private client intake, are checked and stored under randomized names outside the public web root. Form contents and uploads are never included in analytics or emailed as attachments. Shared links are references, not automatically fetched content. Supplied image permission is required when files or links are provided.

Client feedback starts unverified and private. Publication requires a genuine client relationship checked through a known contact, separate publication permission, and the same moderation standards for positive and critical feedback. Email and project evidence are never public. Original feedback and consent or verification evidence are preserved while a review is published. A checked withdrawal removes public display; it does not trigger automatic deletion of the evidence. Contact us for a correction, withdrawal or deletion request.

Restricted encrypted off-host backup copies have a separate 30-day rotation. Removing a live record does not immediately remove backup copies. Backup restoration preserves recorded status and dates; uncertain restored records remain held for review.

Sensitive information

Do not submit passwords, payment card numbers, tax identification numbers, or other sensitive credentials through public forms or client intake. Account access should be handled through invitations, delegated access, or another secure method.

Service providers

Hosting, email delivery, analytics, and other service providers may process limited information when those services are enabled and only as needed to operate the website or provide the service. Square is used for client payment processing and may receive information directly from a client when an invoice is paid. Match the Work does not collect or store payment-card numbers through this website.

First-party website analytics

Match the Work uses random first-party visitor and session IDs to understand traffic sources, pages visited, clicks, engagement, device categories, browser language and timezone, confirmed preview requests, and received client feedback. Feedback receipt is not a sales conversion. Brian is the only dashboard user. Analytics does not record form contents, comments, image filenames or uploads, passwords, precise location, raw IP addresses, advertising IDs, session replay, or keystrokes.

Detailed analytics is retained for up to 1,095 days; daily aggregate totals may be retained longer. Visitor cookies expire after one year and session cookies after 30 minutes of inactivity. Global Privacy Control, Do Not Track, and browser opt-out preferences suppress collection. Analytics cookies are Secure, HttpOnly, and SameSite Lax. Your hosting provider may separately process access logs for website operation and security.

Contact us with privacy questions or a deletion request. Anonymous records require the associated first-party ID to locate; we do not attempt to identify visitors from device characteristics.

Contact

Questions about privacy can be sent to contact@matchthework.com.