Last updated: October 11, 2026
This notice describes the public demo-request form as it operates today. It is plain-language operational information, not legal advice, and it remains subject to legal review.
We collect your first and last name, work email, firm name, primary market, and your consent to follow up. If present, we also record the page source, standard UTM campaign fields, and only the referrer's origin and path; query parameters and fragments are discarded. For abuse prevention, the service converts the request's IP address into a salted one-way hash; it does not store the raw IP address.
We use the contact details only to respond to and follow up about your demo request. Campaign and minimized referrer fields help us understand how requests reached the site. Inside the intake service, raw IP addresses and request times are held only in process memory for rate limiting and are not written to its storage. Separately, the web server keeps standard access logs that include IP addresses; they rotate daily and are deleted after about 14 days. Cleanup rotates fairly through at most 64 buckets per request, removes expired 60-second windows, and caps the cache at 4,096 IP buckets; new IPs are denied while that cap remains full. The separately stored salted IP hash supports abuse investigation. Do not submit confidential, privileged, sensitive, or client information through this form.
The form requires affirmative consent before submission. Submitting it does not authorize unrelated marketing or automated external actions. The intake service does not send email to you or expose a public read endpoint. After your request is stored, it sends one internal notification containing your request to our own team inbox so we can respond; that notification passes through our email delivery provider (Resend) and our mailbox provider (Google). It does not sell demo-request data. Any future CRM synchronization requires separate operator approval and is not active by default.
Requests are kept in a private file outside the public website, with operating-system access restricted to the service account and authorized operators. The form sends data only to the same website origin and loads no advertising pixel or third-party form script. We use practical safeguards, but no internet transmission or storage system is risk-free; we cannot guarantee absolute security.
A daily cleanup removes local intake records once they are older than 90 days. The notification copy in our team inbox is not removed by that cleanup; we delete it on request together with the stored record. To request access, correction, or earlier deletion, submit the demo form with valid contact details and reply to the follow-up message with your privacy request. We may need enough information to locate and verify the record.
For privacy questions, use the demo request form and identify the request as a privacy matter when we follow up. Existing clients may contact their assigned service professional.