Privacy

Who we are

Borderless Designs is a web design business in Vancouver, Washington. Contact: hello@borderlessdesigns.com.

What we collect

• A scan you run. The address you enter and the results are shown to you and then discarded. We don't keep them unless you ask for a preview. Your IP address is used for a few minutes to limit how many scans one visitor can start, and is not stored. To tell people from bots, the scan page uses Cloudflare Turnstile. Cloudflare receives your IP address and browser signals for that check.
• A preview request or a message. Your website, email address and anything optional you add (name, trade, message, the score you saw). We keep it to build your preview, reply, and follow up about it. For a preview request we email that address twice at most: once to say we got it, and once with the private link when the preview is ready.
• A free download from a link we sent. Your email address, which download you asked for, and the keyword you commented to get the link, if you did. We keep it to record who asked for the file and to answer if you write back. It is not added to a mailing list. Your IP address is used for a few minutes to limit how many times one visitor can ask, and is not stored.
• A logo you upload for cleanup. The image (re-saved without its metadata, such as camera or location details), the vector trace we make from it, and whether you bought the files. It is private: only you, through the page you uploaded it on, and we can see it. Everything is deleted 30 days after upload (or 30 days after purchase). The page remembers your upload in this browser tab only, so a reload can show it again; nothing else.
• A purchase. Payments are handled by Stripe, which receives your card details directly; we see your name, email, billing address and what you bought, never the full card number.
• The client portal. If you are a client, your sign-in email, the posts you approve or send back (with your note), and the photos and videos you send us, kept in private storage that only you and we can open.

No analytics or advertising trackers run on this site. The only cookies we set are sign-in cookies for the client portal and the Hub. They hold a signed account id so you stay signed in, are sent only to this site, and are removed when you sign out. Our host (Vercel) keeps standard server logs for security.

The Hub

The Hub is where brands we work with run their pages: shops, courses, communities, live sessions, bookings and email lists. Each brand decides what it offers and is responsible for its own customers and list; we run the system for them and handle what you give it on their behalf.

• Your Hub account. Your email address, used to send you a one-time sign-in link. Whatever you do on a brand's page is tied to it: courses you join and your progress, community posts, live sessions you sign up for, bookings, and reviews you write (shown only after the brand approves them).
• A brand's email list. You join only by confirming from the email we send you. Every email has a one-tap way to stop. When you stop, we keep a record that you did so you are not emailed again. If you mark an email as spam, a one-way code made from your address goes on a shared do-not-email list that every list on the Hub checks; the address itself is not on that list.
• A free download by email. Your address and which download you asked for. Asking also adds you to that brand's list, which the form says before you send it.
• A paid item. You pay the brand directly through its own payment link (Stripe, Square or PayPal). We never see your payment details. If the brand unlocks a download for you, we keep the email address it entered so you can sign in and get it.
• Quizzes. Your answers are counted without your name, email or IP address.
• Quotes a business logs. A business on the Hub can note a quote it sent you (your name, one way to reach you and what it was for) so it remembers to follow up. Only that business sees it, and the Hub never contacts you about it.
• Instagram keyword replies. If a brand connects its Instagram account and you comment one of its keywords, Instagram sends the brand's one private reply to you. We keep only the comment's ID and whether the reply went out, so you never get it twice, not your comment or your username. A brand can disconnect at any time, which deletes its stored Instagram sign-in. To ask us to delete anything else, use the contact page.

Brands see counts (page visits, list size, emails delivered) and, for their own courses, live sessions and bookings, the name and email of who signed up. Email list addresses are not shown to brands in the Hub. No brand sees another brand's people.

Who handles it for us

• Supabase (database and private file storage, United States)
• Vercel (hosting)
• Resend (sends sign-in links and Hub emails)
• Stripe (purchases on this site)
• Meta (Instagram, for brands that connect it for keyword replies)
• Anthropic (writes draft wording for previews and the Hub idea board from a business's own public website and product details; we don't send it your personal information)

What we don't do

• We don't sell or rent your information, or share it for anyone else's marketing.
• We don't add you to a mailing list of our own. Follow-up is about the preview or question you sent, and stops when you say so. On the Hub you join a brand's list only by confirming it yourself.

Where it is kept, and for how long

Requests are stored in our database (Supabase, United States). We keep a request while we are talking about a project, and delete it within 12 months of the last contact if nothing came of it. Customer records are kept as long as tax law requires. Hub accounts and list memberships are kept while they are in use; ask us and we delete them, keeping only the do-not-email record if you unsubscribed.

Previews of your business

We sometimes build a design concept for a business that hasn't asked for one, to show what we'd do. Previews sit at a private link, are marked as an unsolicited concept, are never indexed, and expire after 30 days. Every preview has a delete link, and we delete one on any request. See the terms.

Your choices

Ask us to show, correct or delete what we hold about you by emailing hello@borderlessdesigns.com. We answer within 30 days. Residents of states with their own privacy laws (such as California or Washington) have these rights too, and we honor them the same way.

Children

This site is for businesses and is not directed to children under 13.

Changes

If this policy changes, the date at the top changes with it.