This page is maintained by Grayson Strategies, LLC d/b/a Graytech Studio to answer common security and privacy questions about graytech.dev. It is an operational transparency page, not a warranty, audit result, or certification.
Graytech designs its website and assessment workflow to limit unnecessary data exposure, keep privileged credentials on the server, and use established service providers for hosting, database, security, and customer relationship management. No online service can guarantee absolute security. This page explains the current safeguards and boundaries in plain language.
Hosting and service providers
- The public website is built and hosted through Lovable and Lovable Cloud.
- Application data used by the assessment is stored through Supabase.
- Assessment lead information is synchronized server-side to Graytech's customer relationship management platform, GoHighLevel/LeadConnector, for contact management and follow-up.
- Cloudflare may provide network security and performance functions.
- Service-provider infrastructure, regions, subprocessors, and retention may be governed by those providers' terms and configurations.
Being hosted through Lovable, or reviewed by Graytech inside a collaboration tool such as ChatGPT Work, does not mean the public site's customer data is stored "inside ChatGPT." ChatGPT Work is used as a build and collaboration environment. The deployed site's data flows are determined by the production services described on this page.
Assessment safeguards
- Assessment writes go through server-side functions.
- Public browser clients cannot directly read or update assessment records.
- A short-lived HMAC-signed assessment session authorizes allowed updates only to the matching assessment record.
- A valid session for one record cannot update a different record.
- Privileged database access remains server-side.
- Customer relationship management synchronization and its credentials remain server-side.
- Direct anonymous update access has been removed.
Data minimization and retention
- Raw assessment answers: generally 30 days, unless needed for active client work or requested follow-up.
- Assessment result and basic contact record: generally 12 months after the last meaningful interaction.
- General inquiries and contact-form records: generally 12 months after the last meaningful contact.
- Newsletter records: until unsubscribe or a deletion request, subject to suppression and legal needs.
- Contracts, project records, and payment or tax records: generally seven years, as described in the Privacy Policy.
- Backups: retained until overwritten through the service provider's ordinary backup cycle.
Visitor responsibilities and requests
- Please do not submit confidential, regulated, health, financial, legal-matter, or other sensitive information through general site forms or demonstrations.
- Send privacy, access, correction, or deletion requests to support@graytech.dev.
- No system can guarantee absolute security, and Graytech does not claim that it can.
Related policies
Privacy Policy · Terms of Use · Cookie Notice
Contact
Grayson Strategies, LLC, doing business as Graytech Studio
601 S. Service Road, #1510
Moore, Oklahoma 73160
Email: support@graytech.dev
Business contact: deborah.graytech@zmail.com · 405-233-4092