Draft — pending counsel review
Privacy notice
Version 2. Effective September 24, 2026 (Central Time).
Draft pending review by counsel.
What we collect
The details you give us when you ask for an estimate, open an account or work with us: your name, business, email, phone, what you want built, the files you upload, the documents you sign and the invoices you pay. We also keep the security records every sign-in and signature needs: time, IP address and browser.
What we use it for
Only to scope, price, build, deliver and support your project, to bill you, and to keep the service secure. We do not sell personal data, and we do not share it for advertising.
No trackers
The site and portal set only the cookies needed to keep you signed in and to protect sessions. There are no third-party trackers, analytics or advertising scripts, so there is no cookie banner. If that ever changes, we will update this notice first.
Who processes it for us
- Supabase: database, sign-in and file storage.
- Vercel: hosting of the website and portal.
- Resend: sending email.
- Stripe: card and ACH payments.
- Upstash: rate limiting.
- Google: Gemini, to draft progress updates from commit metadata; and a read of calendar busy times (not event details) to offer meeting slots.
- GitHub: commit metadata from your project's repository, to report progress.
How long we keep it
| Data | Kept for |
|---|---|
| Signed documents, signature events, e-sign consents, certificates | 7 years after completion or contract end, whichever is later |
| Invoices, payments, payment event ledger | 7 years |
| Audit log | 7 years |
| Terms acceptances | Life of the account plus 7 years |
| Project files, screenshots, posts | Project close plus 2 years; we email you 30 days before, with an export |
| Declined or withdrawn requests and their files | 1 year |
| Prospect accounts with no engagement | 1 year of inactivity |
| Email bodies we sent | 90 days |
| Security events | 13 months |
| License activations and events | Life of the license plus 1 year |
| Data export files | 7 days |
An account under a legal hold is kept until the hold ends.
Your rights
From Account, then Privacy, in the client portal you can:
- download an export of your account's data;
- ask us to erase your personal data;
- ask us to correct it;
- ask for a paper copy of anything you signed electronically;
- withdraw your consent to electronic records.
When we erase your profile, we remove your sign-in and scrub your name, email and phone from your profile at once. Records we must keep by law (signed documents, the signature evidence on them, invoices and payments) keep your name and email exactly as they appear on the signed or billed record, for the periods above. You can also write to support@drivia.consulting. We answer within 30 days.
Security
Each client account's data is isolated from every other account's at the database level. Staff access requires two-factor sign-in and is logged.
Children
The service is for businesses and adults. We do not knowingly collect data from children.
Changes
We version this notice and ask you to accept a material change the next time you sign in.
Version history
- Version 2Effective September 24, 2026 (Central Time) · Draft — pending counsel review · current version
- Version 1Effective September 24, 2026 (Central Time) · Draft — pending counsel review