Effective June 6, 2026

Inertia Privacy Policy

Inertia Studio LLChello@byinertia.com

Overview

Inertia Studio LLC ("Inertia", "we", "us") operates byinertia.com, including the client portal at byinertia.com/dashboard. This Privacy Policy explains what personal information we collect from visitors and clients, why we collect it, how we use it, how long we retain it, and what rights you have over it. The short version: we collect as little as possible, we don't sell it, and we don't do anything with it that you wouldn't expect.

Information We Collect

We collect information in three ways. First, information you give us directly: if you fill out the contact form, we receive your name, email address, and message content. If you create a client portal account, you sign in via Google OAuth. We receive your email address from Google and store it alongside any display name or company name you set in your portal settings. We do not receive or store your Google password. Second, project and billing data: your portal stores the projects, invoices, files, and messages associated with your engagement. Invoice payments are processed through Whop, which passes us confirmation and your email. We never receive or store your card details. Third, technical data: our hosting logs IP addresses, browser type, and request metadata for a rolling 30-day window, used exclusively for security monitoring and debugging. We also receive anonymised, aggregated page-view data. No individual user is identifiable from this.

How We Use Your Information

Contact form submissions are used only to respond to your message. We do not add you to any mailing list unless you explicitly ask. Your portal account is used to give you access to your project status, phase notes, invoices, shared files, and the direct message thread with your project team. Nothing stored in the portal is used for advertising, profiling, or shared with any third party. Billing data is used to process payment, issue receipts, and provide post-purchase support. Server log data is used for security and debugging only. Aggregated analytics help us understand which pages are most useful so we can improve the site.

Sharing & Disclosure

We do not sell, rent, or share your personal information with any third party for their own purposes. Google receives your sign-in request when you authenticate via Google OAuth, as governed by Google's own privacy policy. Whop receives payment information when you pay an invoice through the portal. Outside of those two processors, your data stays with us. We may share information with legal authorities if required by law, or if necessary to protect the rights, safety, or property of Inertia or others.

Cookies & Tracking

We use a small number of browser storage entries. One stores your theme preference (light or dark mode) along with a timestamp so the site remembers your choice between visits. When you sign in to the client portal, Supabase sets a session cookie to keep you authenticated. This cookie contains a session token, not your password or payment details. We use PostHog to collect anonymised page-view analytics and to record anonymised session replays. These help us understand how visitors navigate the site so we can improve it. All form inputs and text fields are masked in session recordings; we never capture passwords, payment details, or personal data entered into forms. PostHog analytics data is routed through our own domain and stored on PostHog's US servers. We do not use advertising cookies, cross-site tracking cookies, or browser fingerprinting. You can clear cookies at any time in your browser settings. Doing so will sign you out of the portal and reset your theme preference.

Data Retention

We keep your data only for as long as we need it. Contact form messages are kept for the duration of the active conversation plus 12 months, then deleted. Portal account data (your profile, projects, invoices, files, and messages) is retained for as long as your account is active, plus 12 months after closure to handle any follow-up queries. Invoice and billing records are retained for 7 years to satisfy tax and accounting requirements. Server logs are purged automatically after 30 days. If you want your contact or portal data deleted sooner, email us and we will action it within 7 days.

Security

Authentication for the client portal is handled via Google OAuth and Supabase, both of which use industry-standard token-based session management. We do not store passwords. Your portal data is stored in a Supabase database with row-level security policies, meaning your records are only accessible to your account and to Inertia admins. Client credentials shared during a project (store access, API keys, admin logins) are stored only for the duration they are needed and revoked on handover. That said, no system is perfectly secure, and we cannot guarantee that data transmitted over the internet will never be intercepted. If you have concerns about your account or data, contact us immediately.

Your Rights

You have the right to request a copy of the personal information we hold about you, to ask us to correct anything inaccurate, and to request deletion of your data where there is no legal obligation for us to retain it. You can update your display name directly in the portal under Settings. To request full data export or deletion, email hello@byinertia.com with the subject line "Privacy Request". We will respond within 14 days. If you are based in the EU or UK, you also have the right to lodge a complaint with your local data protection authority. We would always rather hear from you first.

Children's Privacy

Our services are intended for businesses and adults. We do not knowingly collect personal information from anyone under the age of 16. If you believe we have inadvertently received data from a child, contact us and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time as our services evolve or regulations change. When we do, the updated version will appear here with a new effective date. If a change is material, we will do our best to flag it clearly. Continued use of our site or services after a new effective date constitutes acceptance of the updated policy. The current version is effective June 6, 2026.