Privacy

• We keep what you type into our forms so we can answer you and make your website.
• We count visits to this site and to the sites we make without advertising trackers and without storing anyone's address.
• The one cookie we set is the one that keeps you signed in to your account.
• Card payments go through Stripe. We never see or keep your full card number.
• We do not sell what we collect, and we do not use it for advertising.

Franklin Jule Design is the business behind this site. The legal name and home state of the company are not settled yet: [OPEN DECISION: legal entity name and state of formation]. Until they are, “we” on this page means Franklin Jule Design.

Start a project

The project form asks about your business and your site: the business name, address, phone, hours, services and prices, links to your social pages, the look you picked, the package and care plan, and your own name, email, and phone. Everything you send is saved in our database and emailed to us. The form also opens your account: it saves your name, email, and phone as the account, and your business name, package, and chosen look as your site. We then email you a welcome with a way to sign in.

If you choose photos on the form, only their file names are sent. We ask for the photos themselves by email.

If you tell us which of our clients sent you, we save what you typed (their email or their referral code) so they get the credit. When your deposit is paid, that client's Billing page shows your business name as someone they sent, and Stripe applies their credit. Every account has its own referral code, shown on its Billing page.

Contact

The contact form sends your name, business name, email, phone, and message. It is saved in our database and emailed to us. It does not open an account.

What else comes with a form

To stop spam, each form also saves a scrambled code made from your internet connection's address (a one-way code mixed with a secret, so the address itself is not stored) and the short description your browser gives of itself, such as “Safari on iPhone.” We use them to limit how many forms one connection can send in an hour.

How long we keep them

Form submissions are kept as our record of who asked us for what. There is no set time after which they are deleted yet. [OPEN DECISION: how long to keep project and contact form submissions, for the attorney review]. To have yours deleted, write to us (see the end of this page).

Saved in your own browser while you type

The project and contact forms keep your unsent answers in your browser's own storage, so a reload does not lose them. That copy stays on your device and is cleared when the form is sent. The Studio also remembers, in your browser, which of its control groups you left open.

Our public pages carry a small visitor counter that we run ourselves. It does not use cookies, and it does not send anything to an advertising or analytics company. The pages inside your account do not carry it.

For each page opened it records the page, the site you came from, any campaign tag on the link (for example, a link we posted on social media), how many seconds the page was on screen, and taps on a phone number, a text-message link, an email address, directions, a file, or a link to another site (a site can also count other taps it names itself). From the connection it keeps the country, state, and city, a map point rounded to about a kilometer (not your street), and the kind of device, browser, and operating system. It does not store your internet address or your browser's full description.

So a person who comes back is counted once rather than as a stranger each day, the counter keeps one random code of 16 letters and numbers in your browser's storage. It holds nothing else and is sent only to our counter. A private window, or clearing your browser's site data, removes it. If your browser will not keep the code, the counter makes one for that day instead by scrambling the date with your internet address and browser description; the scrambled result is kept, the address and description are not.

These counts are kept with no end date for now. [OPEN DECISION: how long to keep visit records].

Our website check visits the address you type in, once, and reads that one page. To make sure the address is a public website, we first look the name up through Cloudflare's and Google's public address directories, which see the name of the site being checked. We do not keep the page. We keep a note that a check ran, the name of the site checked (for example, example.com), and a scrambled code made from your connection, so we can limit how many checks one connection runs in an hour. We do not keep your internet address itself.

If you also give us your email address, the findings come to us as a message, the same as the Contact form, and are kept the same way.

Signing in

There are no passwords. You enter your email and we send a link and a 6-digit code. Each works once, for 20 minutes, and we store only a scrambled copy of each.

Signing in sets one cookie, which holds a random code and nothing else. It keeps you signed in on that device for 30 days. With it we save the description your browser gives of itself, so the Account page can show where you are signed in (“Safari on iPhone, since September 12”). Signing out deletes that record, and “Sign out everywhere else” deletes the others. A sign-in you never sign out of stops working after 30 days, but its record is not yet cleared out automatically. [OPEN DECISION: clearing expired sign-in records].

What the account holds

Your name, email, and phone; whether you want the weekly visitor email; each of your sites with its package, look, status, web address, hosting, and care plan; where your site's form messages should go and the shop's phone number; your update requests and our replies; your invoices and payments; and a log of account activity (sign-ins, payments, requests, and changes we or you made). We also keep private notes on each client for our own use; they are never shown on your pages or in an email. The account stays while you are a client. What happens to it after you leave is not settled: [OPEN DECISION: how long a former client's account is kept].

The Visitors page map

The map on your Visitors page loads its map pieces from OpenStreetMap and its map code from cdnjs, a public code library, so those services see that your browser asked for them.

Card payments, including monthly care, run through Stripe. When you pay, we give Stripe your email, name, and phone so the payment is under your name. You type your card on Stripe's own page; we never see or keep the full number. When a payment goes through, we copy onto our own record the card brand, its last four digits, and links to Stripe's receipt and invoice, so your Billing page can show them. Stripe's own privacy policy covers what Stripe keeps.

Payments made another way, such as a check, are recorded by hand as paid.

“Get a preview link” saves the design you are looking at, including any business name, text, logo, and photos you added, as its own small website at a long, random address. Anyone who has the address can open it, so share it only with people you mean to. It is hidden from search engines. We keep a count of how often it is opened and a scrambled code from your connection (as with the forms) to limit how many links one connection can make.

A preview link and everything in it is deleted after 90 days, unless we attach it to your site once you become a client.

• Cloudflare hosts this site, our database, and the websites we make, and sends our emails (the sign-in email, the welcome, form messages to a shop, and the weekly visitor email). Like any host, it handles your internet address to deliver pages and to block attacks.
• Stripe takes card payments, as above.
• Google Fonts supplies the typefaces on this site, so Google sees your internet address and browser when a page loads them.
• OpenStreetMap and cdnjs supply the map on your Visitors page, as above.
• Google answers the address lookups for the website check, and, when a shop connects its Google reviews, supplies them through its Places service.
• Photon, Komoot's place search, suggests cities as you type in the City box on the Start a project form, from OpenStreetMap data (© OpenStreetMap contributors). The lookup goes from our server, so the service sees the letters you typed, not your internet address.
• Google Sheets, Zapier, Make, n8n, Slack, Discord, Google Chat, and Twilio receive a client site's form messages only if that shop connects them on its Integrations page: a copy of each message as a row in the shop's own sheet, a copy sent to the shop's own automation or chat channel, or a text alert to the shop's phone. For the text alert we keep the shop's phone number and a scrambled copy of the code that confirmed it.

We do not sell what we collect, trade it, or use it to show you advertising.

Two things on a client's website send information to us, and we keep it for that client.

The visitor counter

The same counter as on this site, described above: no cookies, no internet addresses stored, one random code in the visitor's browser. The shop sees the counts on the Visitors page of its account. A tap on the shop's phone number, a request for directions, and a sent contact form each count as an action.

The contact form

On sites that have a form, what a customer sends (their name, a phone or email, a street address if they ask for a pickup, the message, and the page they sent it from) goes to our server. We save it and email it to the shop. While the site is still being made, messages come to us instead. With it we save the scrambled connection code and browser description, as with our own forms, and the address of the site it came from, to stop spam. Messages are deleted from our database after 90 days. The copy in the shop's email is the shop's, and so is any copy the shop chose to send on to its own sheet, automation, or phone (see "Who else handles it").

Client sites also load their typefaces from Google Fonts, and most show a Google map of the shop.

Each client site will have its own privacy page saying this. Those pages are not written yet, and how the responsibility is split between the shop and us is for the attorney review: [OPEN DECISION: client-site privacy page wording, and who is responsible for what].

• A sign-in link or code: works once, for 20 minutes.
• Staying signed in: 30 days, or until you sign out.
• Contact form messages on client sites: 90 days.
• Preview links: 90 days, unless attached to a client’s site.
• Project and contact form submissions: no end date yet. [OPEN DECISION]
• Visit counts: no end date yet. [OPEN DECISION]
• Website checks (the site name and the scrambled code): no end date yet. [OPEN DECISION]
• Your account, invoices, and activity log: while you are a client; after that, [OPEN DECISION].

Write to us and we will tell you what we have about you, correct it, or delete it. Some things, such as records of payments, we may need to keep; the attorney review will settle which. Your name and phone you can change yourself on your account's Account page; to change the email you sign in with, send us a note from the current address.

Whether any state privacy law gives you further rights, given that we work with businesses in Texas, Illinois, and Florida rather than with consumers, is a question for the attorney review: [OPEN DECISION].

This site is for business owners and is not meant for children. We do not knowingly collect anything from anyone under 18.

When this page changes, the date at the top changes with it.

Write to [email protected], or use the contact page. Mailing address: [OPEN DECISION: business mailing address].

This page is a draft pending review by an attorney. Until that review is done, nothing here is a final legal statement. The terms of use are a draft too.