Policy

Privacy

The short version: we collect the minimum needed to run your audit and deliver paid work, we never sell it, and you can have it deleted by sending one email. Last updated July 10, 2026.

What we collect, and when

Free audit: your store URL, your first name, and your email address — that's the entire form. The audit itself reads only public endpoints of the store you point us at.

Purchases: your name and email through Stripe Checkout. Card details go directly to Stripe and never touch our servers.

Onboarding (paying clients): your store URL, brand-voice notes, policies, and a Shopify collaborator code submitted through the onboarding form. Collaborator codes are encrypted at rest.

Site analytics: anonymous usage events (pages viewed, audit started/completed) via PostHog, keyed to a random browser ID — stitched to your email only after you submit it in a form. Private audit-report link tokens are stripped from analytics before anything is sent.

What we use it for

Delivering what you asked for: running your audit, emailing your report and its permanent private link, delivering purchased configuration work, and sending the email sequences you joined (every email has one-click unsubscribe).

Operating the business: payment processing (Stripe), transactional + marketing email (Resend), error monitoring (Sentry), hosting (Vercel), database (Supabase), scheduling (Cal.com when you book a call), and internal operational alerts.

We do not sell your data, share it with advertisers, or use it to train AI models.

Audit reports and permanent links

Your audit report is stored so your emailed link keeps working. The link is an unguessable private URL: anyone you forward it to can view that report (and nothing else — it exposes no email address or account). Email hello@amberfront.com to have a link rotated or revoked, or the report deleted.

Cookies and local storage

No advertising cookies. We set a random analytics ID in your browser's local storage, and Cloudflare Turnstile (our bot check) and Stripe set what they need to function. The Cal.com booking widget sets its own cookies inside its frame.

Retention and deletion

Leads and audit reports are kept until you ask us to delete them. Client records are kept for the duration of the engagement plus what tax and accounting rules require. Email hello@amberfront.com from the relevant address and we'll delete your data and confirm — usually within a few business days.

Contact

Amberfront · hello@amberfront.com. Questions, deletion requests, and complaints all go to the same inbox — a human (Cameron) reads it.