Minimal intake. No hidden product analytics.

This draft describes the intended pilot marketing-site practices. The legal operator is Fevezo LLC d/b/a TermTie. The notice is not effective until the site, providers, destinations, retention schedule, contact routes, and final copy are verified and approved for publication.

Information collected

The pilot form requests a name, work email, organization, optional website, role, operating range, a short description of the workflow, a preferred first data route, consent, and anti-abuse verification. Do not submit confidential documents or sensitive personal information.

Purpose

Information is intended only to evaluate eligibility, administer a pilot request, prevent abuse, preserve consent, and send approved transactional status messages after activation.

Operating principles

• Collect only information needed to evaluate and administer a pilot request.
• Do not place personal, customer, document, or source values in analytics events.
• Do not sell personal information or use pilot material to train shared models by default.
• Provide documented access, correction, deletion, and export routes before production activation.

Analytics

Analytics are disabled by default. The included adapter permits only a small event allowlist and rejects free text, query-bearing URLs, email, organization names, document identifiers, source URLs, contract terms, or customer content.

Anti-abuse processing

The contact form integrates Cloudflare Turnstile. When the contact page and challenge are used, the browser communicates with Cloudflare and the form handler may send the requesting IP address to Cloudflare for challenge verification. If optional rate limiting is activated, the IP address is converted to a keyed, short-lived pseudonymous identifier before a request count is stored for approximately 12 minutes. The raw IP is not used as the storage key.

Providers and transfers

Cloudflare is the planned hosting and anti-abuse provider; production delivery remains disabled in this package. Before activation, the notice must identify the verified hosting, form-delivery, email, analytics, payment, model, and storage subprocessors and their applicable transfer terms.

Retention

Pilot intake that does not convert is proposed for deletion within 90 days. Anti-abuse request counters expire after approximately 12 minutes when enabled. Final periods depend on counsel, provider configuration, source licenses, contracts, and applicable law.

Choices

A production notice must include verified privacy and deletion contact routes and any applicable jurisdictional rights. Marketing consent must remain separate from product or transactional messages.