A CLEAR START / PRIVACY
Project intake privacy notice
Notice version 2026-10-29.2 · Local draft notice 2026-11-04.1 · 2026-10-29.2:r90
This is the current notice and configured retention period. Submission and AI availability are controlled separately.
Your submitted structured brief and contact details are stored pending email confirmation. Project review is gated until you explicitly confirm access to the contact email. Your email address and a one-use confirmation link are sent through the configured transactional email provider (currently implemented: Resend). Fractuition routinely uses AI to analyze projects and/or help build solutions. New submissions require permission to send the structured brief to OpenAI for a private project assessment. AI conversation is optional and requires separate consent. The app saves your conversation and draft in this browser so you can resume; raw chat is not stored in its database. Provider retention policies apply separately. New submissions under this version become inaccessible through the app 90 days after receipt; physical deletion occurs when a later cleanup runs. Verification email is sent on submission or explicit resend. Consultation follow-up happens only if approved; nothing is booked automatically.
Who reviews your information?
Trevor Arnold at Fractuition Technologies reviews project enquiries. This notice covers the project-intake and owner-review features on this Site. Contact fractuitiontechnologies@gmail.com with privacy questions or deletion requests.
Information we process
You choose the goals, workflow, tools, deliverables, budget, timing, name, company, contact details (including an optional phone number), language, notes and consent preferences to provide. You can review and edit them before submitting.
The account identifier and email supplied by Sites sign-in are used to check access. The app stores a hash of the account identifier for session binding, hashed session/CSRF tokens, rate-limit counters and AI cost-reservation metadata. Email verification also stores a request-and-email-bound token hash and expiration, send and confirmation timestamps. Historical records are not automatically marked verified. Never enter your password or an OpenAI API key.
Drafts, chat and submissions are different
Unsent entries, contact fields, conversation and composer text are saved in localStorage in this browser profile, not cookies or a cloud backup. Drafts can resume for 30 days after the last edit. Expired copies are not opened or overwritten; use Start over or clear browser site data to delete them. Storage may be blocked, full or cleared by your browser, so check the save status. This storage is not encrypted. Anyone with access to this browser profile may inspect it; avoid shared devices and sensitive records. Signed-in drafts are scoped to a verified account; signed-out drafts are shared within this browser and only move into an account when you choose. Consent choices and credentials are never saved as draft data. Start over requires confirmation and does not delete server submissions or reset AI limits. The app does not intentionally persist raw chat to D1 or application logs.
When you confirm submission, the structured brief, contact details, consent version and consent choices are stored in Cloudflare D1. A receipt is shown only after storage is confirmed. A pending-verification receipt does not mean that review has begun or that an email reached the inbox.
AI-assisted service and consent scope
When you explicitly press Send beside the AI processing notice, your current message, bounded recent conversation or structured interview facts and the previous question, and structured brief are sent to OpenAI to produce follow-up questions and an editable draft. The interviewer is AI, not a person, and may make mistakes. Review and correct the draft before confirming submission; it never submits itself. The interview targets about 10 minutes and wraps by 15 minutes of active interaction, excluding idle or away time. You can finish, skip or use the form at any time.
Fractuition routinely uses AI to analyze projects and/or help build solutions. For a new submission, you must explicitly allow the owner to send your structured brief to OpenAI for a private assessment of fit, risks, open questions and indicative effort. This required checkbox starts unchecked; checking it does not start an AI call. Consent to chat alone is not consent to private AI review.
This permission covers assessment of your submitted brief only. It is not blanket permission for future sensitive or confidential implementation data. Project-specific data and tool permissions will be agreed before delivery. Historical records without AI consent are not upgraded.
Structured name, email, phone and company fields are excluded from model input. Personal information typed into free-text fields or chat may still be included. Do not provide secrets, sensitive personal information, client records or credentials.
Requests use store:false, but that is not a promise of zero provider retention. OpenAI’s abuse-monitoring, caching and other applicable data policies, and Sites/Cloudflare operational processing, apply separately.
Human decisions and follow-up
AI output may be wrong and is decision support only. Internal assessments, notes and cost/price calculations are owner-only; they are not automatically disclosed to clients or treated as a quote or approval.
A request is not an appointment. You will receive an email with next steps only if a consultation is approved. The app sends only routine verification messages on submission or explicit resend. Provider acceptance is not guaranteed inbox delivery, and send failures are not reported as success. Opening a confirmation link yourself while signed in with the submitting account confirms your email. If the browser cannot establish a user-opened navigation, a confirmation button is required. Automated previews and link prefetches do not confirm it. Mailbox access is not proof of identity or project legitimacy. The app does not automatically send consultation follow-up or book a calendar appointment.
Retention and deletion
New briefs submitted under this notice version, their consent records and linked internal reviews expire for application access 90 days after receipt. Expired records cannot be retrieved through the app.
Physical deletion of expired records happens during a later cleanup triggered by session creation or owner-list access. This implementation has no scheduled purge that guarantees deletion at an exact time. Backups and provider-side operational records may follow separate policies.
The essential session cookie and session last six hours. Expired session and request-limit records are deleted during a later cleanup. AI cost-reservation metadata uses an approximately 70-day cleanup threshold and contains no raw conversation.
Cookies, access and contact
On an initial homepage request, a country code supplied by the hosting edge may default South Korean visitors to Korean when no language choice is saved. This app does not request location permission, use an external IP lookup, or store an IP address or country code for this default. Your manual English/Korean choice is kept in a functional cookie for one year and can be changed anytime.
The app uses an essential HttpOnly, Secure, SameSite=Strict session cookie. Its code does not add advertising trackers. Browser-local draft storage is described above. Hosting and sign-in providers have their own policies.
The website and privacy notice are public. Project submission and AI-assisted intake require sign-in. Submission records and owner review tools are restricted by server-checked authorization; signing in alone does not grant owner privileges.
To ask for correction, deletion or information about processing, email fractuitiontechnologies@gmail.com. We may need to verify that the request concerns your record. Do not email secrets.
Changes
Changes to external-processing consent scope or the configured server retention period change the effective consent version. The browser-only draft disclosure was updated on 2026-11-04; it does not restore consent or change the private assessment scope. New submissions require current consent. Explicit assessment permission recorded under 2026-10-28.1 or 2026-10-29.1 remains valid only for its original submitted-brief assessment scope when retention matches; this does not grant permission to records without AI consent. This notice describes the implementation; it does not certify compliance with a particular law or replace rights that may apply to your situation.