Privacy Policy

In effect from 25 August 2026

What HanDI collects, why it is used, which providers process it, how long it is kept, and the choices available.

The short version

HanDI collects the information needed to operate customer accounts, deliver approved work, process payments, and protect the service. We do not sell customer personal information. Optional analytics remains off unless a visitor chooses to allow it.

1. Information we collect

We collect company and contact details, authentication and security records, service requests, project files and messages, estimates and approvals, funded-time ledger entries, billing and refund records, provider references, audit events, and support communications. Square receives payment-card data directly; HanDI stores only provider identifiers and transaction evidence.

2. How we use information

We use information to authenticate users, scope and deliver work, maintain customer history, process and reconcile payments, send transactional messages, prevent abuse, support customers, meet accounting and legal obligations, and improve the service.

3. Service providers and access

Hosting, Square, Resend, optional consented analytics, and other approved infrastructure providers process limited information for their assigned purpose. Initial customer-record access is limited to Jeremy and Jordan. Quincy receives operational request notifications and may access customer records only if that role is separately approved.

4. Cookies and analytics choices

The customer portal uses secure, HTTP-only session cookies required for authentication. A local preference remembers the visitor's optional analytics choice. Google Analytics is not configured at launch and does not load. If it is configured later, it will load only after consent, with Google Signals and advertising personalization disabled.

5. Retention and deletion

We retain active account and project information while providing the service. Payment, ledger, consent, security, and audit evidence may be retained as needed for accounting, disputes, fraud prevention, and legal obligations. A deletion request removes or de-identifies information that is no longer required, but cannot erase records we must preserve or another party's rights.

6. Security and credential transfer

HanDI uses access controls, encrypted transport, protected secrets, restricted backups, and audit records. No online system is risk-free. Customers must use the designated secure transfer method for credentials and must not place passwords, private keys, or card details in ordinary request fields or email.

7. Your choices

You may update account information, decline optional analytics, revoke automatic recharge, and request access, correction, or deletion by contacting Quincy@cleverwolfdigital.com. We may need to verify the requester's identity and authority for the company.

8. Children and changes

HanDI is a business service and is not directed to children under 13. Material policy changes receive a new version and effective date.

9. Where data is held

Our systems are hosted in the United States. If you contact us from elsewhere, your information is transferred and processed there.