Privacy Policy

eCommerce Friendly, LLC (“we”, “us”) operates ecommercefriendly.com (the “Site”). This policy describes exactly what the Site collects, why, who else processes it, and how to ask us to delete it. It describes the Site as it actually works — nothing is listed here that the Site does not do.

The Site is an inquiry and project-discovery site for custom software development work. It sells nothing online, has no visitor accounts, and takes no payments.

1. What you give us

Contact form. Your name, email address, company (optional) and message.

AI discovery chat. Everything you type into the discovery conversation — project descriptions, requirements, timelines, technical details, and anything else you choose to share — along with any files you attach (for example screenshots, mockups or documents). We also store the conversation’s state: the stage it reached, the details extracted from it, when it started, and when you last used it.

Follow-up details. If a conversation turns into an inquiry, we store the contact details you provide with it (name, email, phone if you give one, company) together with the message and the context of the conversation, so we can reply and prepare a proposal.

Please do not put credentials, secrets, health records, payment card data or other regulated personal data into the chat or an attachment. The Site is not designed to receive them.

2. What the Site collects automatically

Server logs. Ordinary web-server records: the pages requested, timestamps, your IP address, browser user-agent, and a per-request correlation id. The IP address is also what we use to rate-limit abusive traffic.

Aggregate analytics. We use Plausible Analytics, a privacy-focused, cookie-free analytics service, to count page views and referrers in aggregate. It does not set cookies, does not follow you across other websites, and does not build a profile of you.

What it measures is limited to: the page address you viewed, the referring site or campaign, an approximate country derived from your IP address, and a coarse device / browser / operating-system category. It does not receive your name, your email address, anything you type into the contact form or the discovery chat, any file you upload, or your IP address itself — Plausible discards the IP after deriving the country, and no identifier for you is stored on your device or on our servers. Pages that are specific to one person — a proposal link sent to you — are excluded from analytics entirely, so a private link is never reported to a third party.

Because this measurement sets no cookie and stores nothing that can identify you, it does not rely on consent, and the Site therefore shows no cookie-consent banner. There is nothing to consent to.

Error reports. When the Site hits an error, technical details of the failing request may be sent to our error-monitoring provider so we can fix it. Request parameters and headers are filtered before they are sent, so credentials, tokens and similar sensitive values are removed.

3. Cookies

The Site sets only what it needs to function:

• A session cookie. Signed, used to keep your browser’s session, an opaque visitor identifier for your discovery conversation, and the security token that protects forms.
• Two preference cookies — ecf_theme and ecf_theme_mode — which remember the visual theme and light/dark mode you selected.

That is the complete list. Analytics sets no cookie of any kind, so it adds nothing here. None of these are advertising or cross-site tracking cookies. We do not run ad networks, retargeting pixels or third-party trackers on the Site, and we do not fingerprint your device.

4. How we use it

We use what we collect to:

• reply to your inquiry and continue the conversation you started;
• run the AI discovery conversation and keep it going across visits;
• prepare and share a proposal for the work you described;
• keep the Site working, secure and reasonably fast (logs, rate limiting, error monitoring); and
• understand, in aggregate, which pages people find useful.

We do not sell your personal information, and we do not share it for advertising.

5. Service providers who process your data

Running the Site means a small number of providers process data on our behalf:

• Anthropic (Claude API) — the discovery chat is powered by Anthropic’s Claude models. The content of your conversation, including project details you type, is sent to Anthropic’s API to generate replies. Anthropic processes it under its own terms and privacy commitments.
• Email delivery — we use a transactional email provider to send inquiry notifications to ourselves and confirmation emails to you.
• Hosting and storage — the application, its database and any files you upload are hosted with our infrastructure provider; uploads may be stored in object storage.
• Analytics — Plausible Analytics, as described above: aggregate page counts only, no cookies, no personal data, no cross-site tracking.
• Error monitoring — filtered technical error reports, as described above.

We may also disclose information where the law requires it, or to establish or defend legal claims.

6. Automated processing and AI output

The discovery chat and the proposals it produces are generated by a large language model. Its output can be wrong, incomplete or out of date, and it is reviewed by a human before it becomes anything binding. No decision with a legal or similarly significant effect on you is made automatically by the Site.

7. How long we keep it

Conversations, inquiries, uploaded files and proposals are kept while we are talking, and afterwards for as long as we need them to answer questions about the work, meet record-keeping obligations, or defend a claim. Server logs and error reports are kept for a short operational period. When data is no longer needed for any of these, we delete it.

You can ask us to delete your conversation, your uploads and your inquiry at any time — see the contact details below.

8. Your choices

Whatever your location, you can ask us to:

• tell you what we hold about you;
• correct it if it is wrong;
• send you a copy of what you submitted; or
• delete it.

Email privacy@ecommercefriendly.com and we will act on the request. Depending on where you live, local law may give you additional rights, and you may have the right to complain to your data-protection authority; tell us what you need and we will respond.

You can also simply not use the discovery chat — the contact form asks for far less, and browsing the Site requires nothing at all.

9. Security

Traffic to the Site is encrypted in transit. Access to the inquiry and conversation data is limited to the operator of this Site. No system is perfectly secure, and we do not claim otherwise; if a breach affects your data and the law requires us to tell you, we will.

10. Children

The Site is aimed at businesses and is not directed at children. We do not knowingly collect personal information from anyone under 18.

11. Links to other sites

The Site links to other websites, including products we have built. Those sites have their own privacy policies, and this one does not cover them.

12. Changes to this policy

We may update this policy. When we do, the “last updated” date at the top of this page changes, and the updated version applies from the date shown.

13. Contact

Questions about this policy, or a request about your data, go to privacy@ecommercefriendly.com. You can also reach us through the contact page.