Privacy Policy

This Privacy Policy explains what information clinchvalleydigital.com ("the Site," "we," "us") collects when you visit, and what we do with it. Clinch Valley Digital is the trade name of GFM Acquisitions LLC, operated by Kevin Bonilla, based in Tazewell, Tennessee.

What we collect

The Site does not use advertising or tracking cookies or pixels. Secure, essential cookies keep the private admin signed in, keep clients signed in to the Client Hub, and let a verified website customer open their own post-purchase onboarding. The onboarding cookie expires after 30 days and is not used for advertising. We do count a few steps visitors take, such as opening a page, finishing the AI audit quiz, using the missed-call calculator or tapping our demo number, as daily totals per page. Those counts use no cookies and nothing that identifies you or your device, and if your browser sends a Do Not Track or Global Privacy Control signal, nothing is counted. The Site also keeps two small notes in your own browser’s storage (not cookies, and never sent to us): when you last saw our free mockup offer, so it doesn’t keep popping up, and that you’ve already sent us a request; and while you use the chat, the conversation is kept in that browser tab until you close it.

• Contact form. If you submit the contact form, we collect your name, business name (optional), email address, a mobile phone number (optional), what you're interested in, a promo code if you enter one, and the message you write. If you check the text-messaging consent box, we also record that consent and when you gave it. We also record which version of this policy and the Terms you agreed to, and when.
• Website chat. If you use the help chat on the Site, what you type is sent to Google’s Gemini AI so it can write the replies. We don’t keep the conversation unless you give your contact details in it so Kevin can follow up; then we save your details and the conversation, the same way as a contact-form message, and Kevin gets a notification. Please don’t type passwords, payment details or other sensitive information into the chat.
• Website brief questionnaire. After your website order is confirmed, our onboarding questionnaire uses your saved package and buyer details, and collects your business and contact details, goals, design preferences, content links, requested features, and approval notes. Draft answers stay in this browser tab until sent, cleared, or the tab is closed. Submitted briefs are stored with contact-form messages and follow the same access, retention, and deletion practices. Kevin uses them to discuss and prepare your project. Completing onboarding does not change your existing purchase or sign you up for texts. Private order links expire after 30 days; contact Kevin for a fresh link. Please do not provide passwords, keys, card details, or private customer records.
• Direct contact. If you email or text us directly, we receive whatever you send through that channel.
• Calls and texts to our business number. If you call our business number (including the number on our demo page) and we don't answer, we receive your phone number and the time of the call, any voicemail you leave, and the text messages you exchange with us, along with whether each text was delivered. See "Text messages" below.
• Basic technical information. Like nearly every website, our hosting provider (Vercel) automatically records basic request information such as your IP address, browser type and the pages requested, to deliver the Site and keep it secure. To prevent spam on the contact form and admin login, we also keep a scrambled (salted and hashed) version of your IP address, which can't be turned back into the address and is deleted within a day.
• Payments. We never see or store your full card number. When you pay by card, Stripe collects and processes the payment under its own privacy policy, and we receive the payment record (your name, email, billing address if collected, and the amount).
• Orders. When you order on our Pricing page, we save what you entered (your name, business, email, phone if given, website and project notes), the service and price you chose, the order agreement you signed (its exact text, version, the name you typed and when you signed), and the Stripe reference for any payment. We use this to deliver the service, keep a record of what was agreed, and handle billing. Order records are kept as long as needed for the project, billing and taxes.

We do not collect precise location or health information, and we do not knowingly collect information from anyone under 13. This Site is not directed at children.

How we use it

We use contact-form information to reply to you and, if you become a client, to provide, support and bill for the services you ask for. We do not sell or rent your information, we do not share it with anyone for their own marketing, and we do not use it to build advertising profiles.

Where it's stored

Contact-form submissions, and records of calls and texts to our business number, are stored in our own database (Neon/Postgres), connected to the Site through Vercel. When a form comes in or a call is missed, a short notification is sent to Kevin by email and text so he can reply quickly. A private nightly backup of the database is kept so it can be restored if something goes wrong.

Text messages (SMS)

GFM Acquisitions LLC, doing business as Clinch Valley Digital, texts only people who opt in: by checking the SMS consent box on our contact form, or by texting our business number first. Calling our business number doesn't sign you up for texts. Message and data rates may apply.

• Reply STOP to any of our texts to opt out. We'll confirm, and we won't text that number again unless you reply START.
• Reply HELP for help, or email kevin@clinchvalleydigital.com.
• If you leave a voicemail, the recording is emailed to Kevin and then deleted from our phone provider.

Your number is used only to reply to you, and is handled only by the service providers listed below that deliver our calls, texts and email.

Texts you ask for. If you submit the contact form, give us your mobile number, and check the SMS consent box, you agree to receive text messages from GFM Acquisitions LLC, doing business as Clinch Valley Digital, about your inquiry — lead follow-ups, project updates and appointment reminders. Message frequency varies. Message and data rates may apply. Reply STOP to opt out or HELP for help. Consent is not a condition of buying anything, and we record your consent and when you gave it.

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent will not be shared with any third parties. Message frequency varies. Message and data rates may apply. Reply STOP to opt out, HELP for help.

Client Hub (for clients)

Clients can sign in to the Client Hub at clinchvalleydigital.com/portal with Google or with a one-time link we email them. For each person with access, we keep their name and email address, a list of their signed-in devices (the browser and device type, such as “Chrome on Windows,” and when it was last used, so they can sign it out), the requests, replies and files they send, and a log of account activity such as sign-ins, quote approvals and changes. If you choose Google, Google tells us only your name and verified email address. A secure, essential cookie keeps you signed in for up to 30 days and is never used for advertising. Files are stored in our database and shown only to people on your account and to Kevin.

If you use our AI Front Desk, the Hub shows summaries of calls to your line: the caller’s name and what they needed as the AI noted it, the outcome, the call length and only the last four digits of their number. Billing pages are shown by Stripe; the Hub never sees card details. When you ask Jenna, the Hub’s help assistant, a question, your question and a short summary of your account (business name, plans, open requests and website status, never emails, phone numbers or payment details) are sent to Google Gemini to write the answer. The account owner can download the account’s data or ask for it to be deleted from the Account tab.

Email you send to our support address, or as a reply to a Client Hub update, is received through Resend and stored with your account. An AI (Google Gemini) reads it to sort it: matching it to your account, opening or updating a request, and drafting a reply that Kevin reviews before it is sent. The only email sent automatically is a confirmation with your request number. Email from people who aren’t clients is kept so Kevin can answer it, and spam is deleted within days.

Services that handle information for us

• Vercel: hosting and infrastructure, including basic request logs.
• Neon: database storage for contact-form submissions, portfolio content and the Client Hub.
• Resend: delivers email notifications of new contact-form submissions and missed calls to Kevin, including voicemail recordings, sends Client Hub emails, and receives email sent to our support address.
• Twilio: provides our business phone number: it receives calls and texts, sends our text messages, records voicemails (deleted from Twilio once emailed to Kevin) and delivers text notifications to Kevin.
• Stripe: processes card payments for invoices and monthly plans.
• Google (sign-in): lets clients sign in to the Client Hub with their Google account; Google shares only their name and verified email address with us.
• Google (Gemini): the AI that writes the replies in the website chat and answers calls to our business number when Kevin can’t pick up. What you type in the chat, and what you say on those calls, is sent to Google to produce the replies. We use Google’s free service tier, under which Google may use this content to improve its products, so please don’t share sensitive information in these conversations.
• GitHub: stores the private nightly backup of our database, and hosts the Jenna Lite download. Jenna Lite runs on your own computer and sends nothing to Clinch Valley Digital.

Each of these services handles information under its own terms and privacy policy. The fonts on this Site are hosted on our own domain, so no font request goes to Google Fonts or any other font service. We do not use Google Analytics, Meta/Facebook Pixel, or any other advertising or analytics service.

Who this policy covers

This policy covers GFM Acquisitions LLC, doing business as Clinch Valley Digital: this Site, our contact form, and calls and texts to our own business number. Work we do for a client under a written service agreement is covered by that agreement.

Your rights

Regardless of where you live, you can ask us at any time to:

• Tell you what information we have about you
• Correct inaccurate information
• Delete your information

To do any of this, email kevin@clinchvalleydigital.com. We'll respond within a reasonable time.

If you are a California resident, the CCPA/CPRA gives you the rights above by law. We do not "sell" or "share" personal information as those terms are defined under CPRA: we don't use ad-tracking pixels, and contact-form data is never provided to third parties for advertising. If you are in the EU/UK, the GDPR similarly gives you rights to access, correct and delete your data, and to know the legal basis for processing it (here, your consent when you submit the form, and our need to respond to your request).

Data retention

We keep contact-form messages, and records of calls and texts to our business number, for up to 24 months after your last contact with us, or until you ask us to delete them sooner. If you opt out of texts, we keep a record of that opt-out for as long as we use the number, so we never text you again by mistake. Client Hub requests, messages and files are kept while you are a client and for up to 24 months after, unless you ask us to delete them sooner; AI Front Desk call summaries are kept for 12 months. Client records needed for billing and taxes are kept as long as the law requires. Our nightly backups keep copies for up to about 12 months before they rotate out. Copies of notification emails and texts may remain with Resend and Twilio for the time their own policies allow, and voicemail emails stay in Kevin's mailbox until he deletes them.

Security

The Site is served over HTTPS. Contact-form data and call and text records are stored in a database that is not publicly accessible and can only be viewed by the business owner through a password-protected admin panel. Requests from our phone provider are checked for its signature before anything is stored or sent.

Changes to this policy

If this policy changes in a way that affects how we handle information we've already collected, we'll update the version and date at the top of this page.

Contact

Questions about this policy: kevin@clinchvalleydigital.com or (865) 427-3890 (call, or text).