Privacy Policy
Plain language: what we collect, why, who helps us process it, and how to reach us about your data.
Effective [Effective date]
Who we are
Keep It Together Media (“KIT”, “we”, “us”) is a small creative systems studio operated by [Company legal name]. This policy covers this website, the KIT Client Portal at /app, and the emails we send.
Questions or requests about your data: cg@keepittogethermedia.com, or by post at [Business mailing address].
What we collect
When you contact us. The contact form asks for your name, email, and optionally your phone number, type of business, the tools you use, what you're looking for, timeline, budget and a message. Along with it we record where you came from: campaign tags in the link (UTM parameters), the referring page, and the page you landed on. We also note how long the form took to fill in, to filter out spam bots.
When you use the KIT Client Portal. Your account email and password (stored hashed by our authentication provider, never readable by us), one-time sign-in codes, and what you and your team put in the portal: requests, comments, approvals, brand files, website edits, and team invitations.
Email. Messages you send us and, if your portal includes an inbox for your domain, the mail delivered to those addresses so you can read and answer it in the portal.
Payments. If you pay us or buy from a client storefront, payment is handled by Stripe. Card details go straight to Stripe; we see the name, email, amount and status.
Technical data. Our host keeps standard request logs (IP address, browser, pages requested). If product analytics is enabled we record pages viewed and a few product events (for example “form submitted”) without cookies or a persistent identifier.
Business contact research. We sometimes reach out to businesses we think we could help. For that we use business contact details that are publicly available, such as a company website or business listing. Every outreach email includes a way to opt out.
How we use it
- To answer your enquiry, scope work and send proposals.
- To run the client portal: sign you in, deliver work, and notify you about requests and approvals.
- To bill for our services and process storefront payments.
- To understand which pages and offers are useful, in aggregate, so we can improve the site.
- To keep the service secure and prevent spam and abuse.
- To meet legal, tax and accounting obligations.
Who processes it
We don't sell your personal information or share it for advertising. We use these service providers to run the business, and they process data only to provide their service to us:
| Provider | What for | Data involved |
|---|---|---|
| Supabase | Database, authentication and file storage for the site, client portal and operator tools | Contact-form submissions, portal accounts, requests, files, mail stored in the portal |
| Vercel | Website and application hosting | Request logs (IP address, browser, pages requested) |
| Resend | Sending and receiving transactional email (sign-in codes, notifications, portal inbox) | Email addresses, message contents |
| OpenAI | AI features such as the brand assistant, transcription and drafting tools | Text or audio you submit to those features |
| Anthropic | AI-assisted drafting in our internal sales and operations tools | Business contact details and text we submit to those tools |
| Stripe | Payment processing for invoices, retainers and client storefronts | Name, email, billing details; card data goes directly to Stripe, never to us |
| PostHog | Privacy-friendly product analytics (only when enabled; cookieless, no cross-site tracking) | Pages viewed and product events, without a persistent identifier |
These providers may store data in the United States. When an AI feature is used, we send only the text or audio needed for that feature. We may also disclose information if the law requires it, or as part of a sale or reorganisation of the business.
Data we handle for clients
Some data in the portal belongs to our clients' own customers, such as mail sent to a client's domain or orders placed in a client's storefront. We handle that data on our client's behalf and according to their instructions. If you're one of their customers, contact the business you dealt with first; we'll help them respond.
How long we keep it
- Enquiries that don't become projects: up to [24 months], then deleted.
- Client portal data: for as long as you're a client, then [90 days] so you can export it, then deleted.
- Hosting and email-delivery logs: about [30 days], per our providers' settings.
- Invoices and payment records: as long as tax and accounting law requires.
Security
Data is encrypted in transit, portal data is separated per client workspace, and access to the operator tools is restricted to KIT. No system is perfectly secure; if we learn of a breach affecting your data we'll tell you without undue delay.
Your choices and rights
You can ask us to show you, correct, export or delete the personal information we hold about you, and you can opt out of any marketing email using its unsubscribe link. Depending on where you live (for example California, the EU or the UK) you may have further rights under local law, including the right to complain to your data protection authority.
Email cg@keepittogethermedia.com and we'll respond within 30 days. We may need to confirm it's really you before acting on a request.
Children
Our services are for businesses and aren't directed to children under 13. We don't knowingly collect their personal information.
Changes to this policy
If we make material changes we'll update the date above and, for portal clients, let you know by email or in the portal. See also our Terms of Service.