Privacy Policy

The only place this site asks for personal information is the contact form. When you submit it, we receive:

• Your name.
• Your email address.
• Your business name.
• Which package you are interested in, if you select one.
• Whatever you write in the free-text field about your business and goals.

That is the entire list. There is no hidden field collecting anything else, and no step in the form that quietly enriches your record from another source.

Very little, and none of it is used to build a profile of you:

• Your IP address is checked when you submit the contact form, purely to enforce a rate limit that stops bots from flooding us. It is held in memory for about a minute and then discarded. It is never written to our records and never leaves our server.
• Our hosting provider keeps standard server logs — the kind every web server produces — which may include IP addresses and browser user-agent strings, for security and reliability.

This list matters as much as the one above, so we want to be specific:

• We set no cookies. There is no cookie banner on this site because there is nothing to consent to.
• We run no analytics — no Google Analytics, no page-view tracking, no heatmaps, no session recording.
• We use no advertising pixels, no retargeting, and no third-party trackers of any kind.
• We do not store anything in your browser — no local storage, no session storage, no fingerprinting.
• Our fonts are served from our own servers rather than loaded from Google, so simply visiting this site does not tell a font provider you were here.
• We never sell, rent, or trade your personal information. There is no circumstance in which we would.

We use the information from the contact form for one purpose: so that a person at Reality Alpha can read your inquiry, reply to you, and — if it goes further — discuss and carry out work for you. We do not use it for marketing lists, newsletters, or any unrelated purpose, and we will not add you to a mailing list because you asked us a question.

We rely on two service providers, and no others touch your data:

• Attio — our customer relationship management system. Your contact form submission is stored here as a contact record and an associated note, so we can keep track of your inquiry and respond to it.
• Vercel — our hosting provider. They serve this website and generate the standard server logs described above.

Both are established providers acting on our behalf, and both are located in the United States — so if you are contacting us from elsewhere, your information will be stored there. Beyond these two, we share your information only if the law requires it, or if it is genuinely necessary to protect our rights or someone’s safety.

We use generative AI as a tool in our design work, and we disclose where on our AI transparency page. Your personal information is a different matter.

We do not use what you send us to train, fine-tune, or improve any AI model, and we do not make it available to anyone else for that purpose. We may use AI-assisted tools in the ordinary course of preparing our response to you, in the same way we might use any other software to do our work.

We keep inquiry and client information for as long as we need it for the purpose it was collected — responding to you, and managing our relationship with you if you become a client — plus any period we are required to keep records for legal, tax, or accounting reasons. We review what we hold from time to time and remove what we no longer need. If you ask us to delete your information sooner, we will.

This site is served over HTTPS and ships a strict Content Security Policy that blocks the browser from sending data to third-party destinations. The contact form is rate-limited against automated abuse, and the credentials our systems use are stored as server-side environment variables, never in our code.

No system is perfectly secure, and we will not pretend otherwise. Please do not send passwords, financial details, or sensitive personal information through the contact form.

We extend these to everyone who contacts us, wherever you live, rather than only to people covered by a particular law:

• Ask what we hold about you, and get a copy of it.
• Ask us to correct anything that is wrong or out of date.
• Ask us to delete what we hold about you.
• Ask us to stop contacting you, at any time.

Just ask through the contact form and we will take care of it. There is no charge, we will not make you justify the request, and we aim to respond within 30 days. We may need to confirm you are who you say you are before acting on a request about someone’s personal information.

This site is aimed at business owners and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has sent us information, contact us and we will delete it.

This site may link to websites we do not control. Once you follow a link, this policy no longer applies — that site has its own, and we are not responsible for it.

If we change how we handle personal information — for example, if we ever add analytics — we will update this page and change the date below before the change takes effect. The version posted here is always the one that applies.