Legal
Privacy Policy
Last updated: August 30, 2026
Plain-English summary. We collect what you hand us — your name, how to reach you, your business, and whatever you tell us about the job. We use it to answer you and do the work. We don't sell it, we don't rent it, and we don't hand it to advertisers. Card numbers never touch our systems; Stripe handles those. Ask us to delete your information and we will. The details are below.
1Who we are
Attic Domain is a web design and marketing-automation studio, a d/b/a of Jeremy Chavez LLC, registered in Colorado. We build websites, AI quote tools and lead automations for service businesses.
This policy covers atticdomain.com and the way we handle information when you contact us, request a teardown, or hire us for a build. It does not cover the websites we build for our clients — those are the client's own sites, and section 8 explains how that works.
Questions, requests, or complaints: hello@atticdomain.com or (720) 467-6439.
2What we collect
Information you give us
- Contact details — your name, email address, phone number, business name and website URL, submitted through our forms or given to us on a call.
- Project information — what you need, your budget range, timelines, the CRM you run, and anything else you tell us while we scope the work.
- Materials you send us — logos, photos, copy, reviews, existing site files, and account access you choose to grant us so we can do the build.
- Correspondence — emails, texts and messages between us, kept so we have a record of what was agreed.
Information collected automatically
- Server and network logs. Our site runs on Cloudflare. Their edge network records IP address, approximate location, browser and device type, the pages requested and the time of the request, for security, abuse prevention and performance.
- Basic traffic measurement. We look at aggregate numbers — how many people visited, which pages, where they came from. We do not build advertising profiles, and we do not run third-party ad or social-media tracking pixels on this site.
Payment information
Payments are processed by Stripe. Your card number, CVC and expiry go directly to Stripe and are never transmitted to or stored on our systems. What we receive back is the amount, the date, the last four digits, and whether it succeeded. Stripe's own privacy policy governs what they do with it.
Terms acceptance
When you tick the box accepting our Terms & Conditions before paying, we record the moment you accepted and which package it applied to, and attach it to your payment record. That exists to protect both of us: it is the proof of what you agreed to and when.
3Why we collect it
| What for | What we use |
|---|---|
| Replying to you | Contact details, project information |
| Producing your free teardown | Your website URL, business name |
| Doing the work | Everything you send us for the build |
| Taking payment | Name, email, payment status from Stripe |
| Keeping records | Correspondence, agreements, terms acceptance |
| Security & abuse prevention | Server logs, IP address |
| Meeting tax and legal obligations | Invoices and payment records |
We do not use your information to train AI models, and we do not feed your business's private material into public AI tools.
4Calls, texts and email
If you give us your phone number, you are agreeing that we may call or text you about your enquiry and your project. That is it — we do not run marketing text blasts, and we do not sell or share your number with anyone who does.
- Reply STOP to any text and we stop texting. Reply HELP for help.
- Message and data rates from your carrier may apply.
- Unsubscribe from any email by replying and asking, or using the unsubscribe link where one is present.
We will still contact you about an active project after you opt out of marketing — you can't opt out of us answering you about work in progress, but you can end the project under the Terms.
5Cookies and similar technology
This site is deliberately light. We do not set advertising cookies, and we do not run cross-site tracking.
- Cloudflare may set a security cookie to distinguish real visitors from bots and to keep the site available.
- Google Fonts are loaded from Google's servers to render our typefaces, which means your IP address and browser are visible to Google when the fonts load.
- Stripe sets its own cookies on its checkout pages, which are hosted by Stripe, not by us.
You can block or delete cookies in your browser settings. The site will still work.
6Who we share it with
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share it only with the services we need to run the business, and only as much as each one needs:
| Who | What they get and why |
|---|---|
| Stripe | Payment processing. Name, email, payment details you enter with them. |
| Cloudflare | Hosting, DNS, security. Server-log data. |
| Email provider | Our inbox. Whatever is in our correspondence with you. |
| Form / lead tooling | Delivering your enquiry to us. Your form submission. |
| Domain registrar | Registering a domain in your name, when you ask us to. Registrant details you provide. |
We may also disclose information where the law requires it, where we need to establish or defend a legal claim, or where it is necessary to protect someone's safety. If the business is ever sold or merged, client records may transfer with it — you'd be told before that changed anything about how your information is handled.
7How long we keep it
- Enquiries that go nowhere — we keep them for up to 24 months in case you come back, then delete them.
- Project files and correspondence — kept for the life of the project and for 3 years after it ends, so we can answer questions and defend a claim if one ever comes.
- Payment and tax records — kept as long as tax law requires, currently at least 7 years.
- Server logs — kept on Cloudflare's own retention schedule, typically days to a few weeks.
Ask us to delete you sooner and we will, except for records we are legally required to keep.
8The websites we build for clients
That form belongs to the business whose site you are on — the roofer, the contractor, the shop. They decide what happens to your information; we built the pipe. Your submission goes to their CRM or inbox. Their privacy policy governs it, not ours. If you want your information removed, contact them directly. We will help them action it if they ask us to.
When we operate a client's site under a care plan, we handle their visitors' data only on their instructions and only to keep the site running. We do not use one client's leads for anything else, ever, and we do not pool data between clients.
The AI quote engine
The quote tools we build run on the answers a visitor types in — job type, size, urgency, contact details. Those answers are passed to the business's CRM along with the estimate, so they can follow up with a real number. Estimates are estimates, not offers, and the tool says so on the page.
9Your choices and your rights
Whoever you are and wherever you live, you can ask us to:
- Tell you what we hold about you, and give you a copy.
- Correct anything that's wrong.
- Delete it, unless we're legally required to keep it.
- Stop contacting you, by any channel or all of them.
- Opt out of any sale or targeted advertising — there is nothing to opt out of, because we don't do either, but the right stands.
Email hello@atticdomain.com and say what you want. We answer within 45 days, usually far sooner, and we will not charge you or treat you differently for asking. We may need to confirm you are who you say you are before we hand over or delete anything.
Colorado residents have these rights under the Colorado Privacy Act, and residents of California, Virginia, Connecticut, Utah and other states with comparable laws have similar ones. We honor these requests regardless of whether a business our size is technically covered — it is simply how we want to operate. If we ever turn you down, we'll tell you why, and you may appeal by replying to that response; Colorado residents may also contact the Colorado Attorney General.
10Security
Our site is served over HTTPS. Payments run through Stripe, which is PCI-compliant. Access to client accounts and files is limited to the people doing the work, and access is released when a project ends or a care plan is cancelled.
No system is perfectly secure, and anyone who tells you otherwise is selling something. If a breach ever affected your information, we would notify you and the relevant authorities as the law requires.
11Children
This site is for businesses. It is not directed at children, and we do not knowingly collect information from anyone under 16. If you believe a child has given us information, email us and we'll delete it.
12Where your information lives
We operate from Colorado, in the United States, and our providers process data in the United States. If you contact us from outside the US, your information will be transferred here and handled under US law.
13Changes to this policy
We may update this policy as the business changes. The "last updated" date at the top tells you when we last did. If a change materially affects how we handle information we already hold about you, we'll tell you directly rather than quietly editing the page.
14Contact us
Attic Domain — a d/b/a of Jeremy Chavez LLC
Colorado, United States
hello@atticdomain.com
(720) 467-6439
See also our Terms & Conditions.