Privacy Policy — Cornerstone Web Development

This Privacy Policy explains what information Cornerstone Web Development, LLC ("Cornerstone Web Development," "we," "us," or "our") collects, how we use it, and who we share it with. We've written this to be direct and specific rather than vague.

This policy covers two contexts: (1) visitors to the public website at cornerstoneweb.dev, and (2) subscribers who use the Cornerstone Web Development platform.

1. Public Website (cornerstoneweb.dev)

What we collect when you visit

Cloudflare (hosting and analytics)

cornerstoneweb.dev is hosted on Cloudflare. When you visit, Cloudflare's edge servers receive your IP address and standard browser request data (browser type, page requested, referrer) as part of normal HTTP traffic. We use Cloudflare Web Analytics, which is cookieless and privacy-first — it collects only aggregated page view counts and does not track individual visitors or store personal data.

Cloudflare's privacy policy: cloudflare.com/privacypolicy

Google Fonts

This site loads fonts from Google Fonts (fonts.googleapis.com). When the page loads, your browser makes a request directly to Google's servers, which means Google receives your IP address. We don't control this data. If you'd prefer to avoid it, you can use a browser extension that blocks Google Fonts requests.

Google's privacy policy: policies.google.com/privacy

Contact form

If you submit the contact form, we collect your name, email address, phone number, organization name, and message. This data is transmitted through our own Cloudflare Worker and delivered to our inbox. We use it only to respond to your inquiry. We don't add contact form submissions to a mailing list, sell them, or share them with third parties for marketing purposes.

This site does not set any cookies.

2. Platform (Cornerstone Web Development CMS)

This section applies to subscribers and their authorized users who access the CMS platform.

Account data

When we provision your account, we collect your name and email address. This information is stored in our database and managed through Auth0 (our authentication provider). Auth0 stores your credentials on our behalf.

Auth0's privacy policy: auth0.com/privacy

Billing data

Subscription payments are processed by Stripe. When you check out, your payment information is submitted directly to Stripe — we never see or store your raw card number. Our database stores your Stripe customer ID and subscription status. Stripe retains billing records per their own data retention policy.

Stripe's privacy policy: stripe.com/privacy

Content you publish

Everything you create or upload through the CMS — articles, images, media, configuration — is stored in a GitHub repository owned by the Cornerstone Web Development organization on your behalf, and served via Cloudflare Pages. We don't use your content for any purpose other than providing the Service.

Platform usage data

Our database stores:

Session tokens (used to keep you logged in; cleared on logout or expiration)
Your role and site assignment
Records of when content was last edited (timestamps only, no content)

GitHub access tokens

The platform uses a GitHub App to access your site's repository. The installation access token is encrypted at rest in our database using AES-256 encryption.

Third-party services used by the platform

Service	Purpose	Privacy Policy
Auth0	User authentication	auth0.com/privacy
Stripe	Subscription billing	stripe.com/privacy
GitHub	Repository hosting for site content	docs.github.com/…/privacy-policies
Cloudflare Pages	Hosting subscriber websites	cloudflare.com/privacypolicy
Neon	PostgreSQL database hosting	neon.tech/privacy-policy

3. How We Use Your Information

We use the information we collect only to:

Provide and maintain the Service
Respond to inquiries submitted through the contact form
Process subscription payments and communicate billing status (via Stripe)
Authenticate users and maintain session security

We do not sell your personal information. We do not use it for advertising.

4. Who We Share Your Information With

We share your information only with the third-party services listed above, and only to the extent necessary to operate the platform. We don't sell data to data brokers or share it with advertisers.

If we're required by law to disclose information (e.g., in response to a valid subpoena or court order), we'll comply with that legal obligation.

5. Data Retention

Contact form submissions: Retained in our inbox indefinitely unless you request deletion.
Subscriber accounts: Retained while your account is active. Upon termination or cancellation, your account data is retained for fourteen (14) days during the content export window, after which it may be permanently deleted.
Billing records: Retained by Stripe per their policies. Our database retains your subscription status and Stripe customer ID.
Session tokens: Cleared on logout or upon expiration.

6. Your Rights

You can request access to, correction of, or deletion of your personal information by contacting us at privacy@cornerstoneweb.dev. We'll respond within a reasonable time.

If you're a subscriber, you can also export your content within fourteen (14) days of account termination by contacting legal@cornerstoneweb.dev.

7. Children's Privacy

This Service is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has submitted information through this site, contact us at privacy@cornerstoneweb.dev and we will delete it.

8. Security

We use reasonable technical measures to protect the information we store — including AES-256 encryption for GitHub tokens and HTTPS for all data in transit. No system is perfectly secure, and we can't guarantee absolute security.

9. Changes to This Policy

We may update this policy by posting a revised version at cornerstoneweb.dev/privacy and updating the "Last Updated" date. Continued use of the site or platform after changes are posted means you accept the revised policy.

10. Contact

Privacy questions or requests: privacy@cornerstoneweb.dev

11. Governing Law

This Privacy Policy is governed by the laws of the State of Oklahoma.