Salt & Scale (“we,” “our”) is a solo consultancy based in Houston, Texas. This policy explains what data we collect when you use saltandscale.consulting, why we collect it, who we share it with, and how to reach us with questions or requests.
What we collect and why
Contact-form submissions. When you submit the form at /contact/, we collect the fields you fill in: your name, email address, optional company, optional phone number, selected service and project type, and your free-text project description. We use this information solely to reply to you, scope possible work, and (if we proceed) deliver the engagement.
Analytics. We use Vercel Analytics to collect aggregated, privacy-friendly traffic data: page views, anonymized geographic region, device class, referrer, and Core Web Vitals. Vercel Analytics does not use cookies and does not build cross-site profiles of visitors.
Server logs. When you load a page or submit the form, the Vercel hosting platform records the request (IP address, user agent, timestamp, requested path, response code) for security and operational purposes. These logs are retained on the Vercel platform under their standard retention policy.
Cookies. The site sets one functional cookie, cfrm, on the /api/contact endpoint after a submit attempt. It contains no personal data, expires in 30 seconds, and exists only to rate-limit repeat submissions. We do not set advertising or cross-site tracking cookies.
Third parties we share data with
Resend (privacy policy). Contact-form submissions are delivered to our inbox through Resend’s email API. The contents of your submission transit Resend’s infrastructure and may be stored briefly in their logs for deliverability and abuse-prevention purposes.
Vercel (privacy policy). The site is hosted on Vercel; all requests transit Vercel’s edge network and serverless infrastructure.
The footer of each page displays a daily Bible verse. The verse is fetched server-side and cached on our infrastructure, so your browser does not make any third-party requests to source it.
How long we keep contact-form data
We retain inbound contact-form emails in our inbox for as long as the conversation is active and for a reasonable period afterward for record-keeping (typically 12–24 months). If we engage on a project, we may keep records for longer as required by our accountants or by Texas law.
How we protect it
All traffic to the site is served over HTTPS with HSTS. The contact API rejects requests over insecure channels and includes a same-origin CSRF posture, a basic honeypot for bots, and a short-lived rate-limit cookie. The Vercel platform provides DDoS mitigation and infrastructure security.
Your rights
You can ask us at any time to (a) tell you what data we hold about you, (b) correct anything that’s wrong, or (c) delete it. We will respond within a reasonable timeframe, normally inside 30 days. If you submitted the contact form and would like the resulting email and any related notes removed, just reply to that thread or email us at the address below.
Children
The site is intended for business owners and operators. We do not knowingly collect information from children under 13.
Changes to this policy
When we update this policy we revise the “Last reviewed” date at the top. For material changes (new categories of data, new third parties, new uses), we will note the change in a visible header on this page for at least 30 days.
Contact
Questions, complaints, or data requests:
gabe@saltandscale.consulting
Gabriel Rosales, Salt & Scale · Houston, TX