BuiltByAlexandru

Privacy

Privacy Notice — BuiltByAlexandru
Last updated: 2026-09-29
Controller: Dumitru Alexandru
Contact for privacy / data requests: alexandru.dumitruxt@gmail.com
Canonical domain: https://builtbyalexandru.com

What this notice covers

This notice describes how personal data is handled when you use https://builtbyalexandru.com (and preview deployments of the same application), including the Digital Friction Audit request form and the Project Inquiry form.

What we collect

A. Data you submit on forms

  • Audit review request: identity and contact (name, workEmail, companyName), site URL, business context fields, optional free-text friction / attribution, scope acknowledgement, and optional marketing email consent.
  • Project inquiry: identity and contact, role, project need / interest type, optional budget/timing/attribution, and optional marketing email consent.

B. Technical data related to form security

  • IP address and request metadata used for abuse prevention (origin checks and rate limiting). Rate limiting currently runs in application memory; a shared store (e.g. Redis) may be added for production consistency — if added, this notice will be updated before activation.

C. Analytics (not active on the site as of this notice)

  • No third-party analytics SDK is installed in the current codebase.
  • If first-party or third-party analytics are enabled later (page views / CTA / form events), we will update this notice and apply an appropriate consent approach before activation.

Why we use the data

  • To receive, qualify, and respond to your Audit or Project Inquiry request (service request).
  • To operate and secure the forms (fraud/spam prevention).
  • Optional marketing emails only if you opt in via the separate marketing checkbox (never required to submit a service request).

How we handle leads (actual pipeline)

When notify mode is live, form payloads are sent server-side to:

  1. Email via Resend (to Founder/ops addresses configured in environment), and
  2. Linear (issue created for internal follow-up — temporary ops tracker, not a client CRM marketed on the site).

When notify mode is mock (local/dev), submissions may be written to a local folder or logged to server console; mock paths are not a production archive.

We do not load website form leads into cold-email or sequenced outreach tools from this site.

Cookies / similar technologies

The public marketing site does not currently set analytics cookies. Essential hosting/session behavior may apply via the hosting provider (Vercel). If analytics cookies are introduced, this section will be updated before activation.

Retention

Form emails and Linear issues are kept for up to 24 months, then deleted or archived.

Sharing

Processors involved in the current live path (when configured): Resend (email delivery), Linear (task/issue tracking), Vercel (hosting). We do not sell personal data.

Your rights

Depending on applicable law, you may request access, correction, deletion, or restriction. Data-subject requests go to the Founder contact above. Agents / site automation do not auto-decide legal outcomes. Internal ops: log → acknowledge → escalate to Founder.

Forms and consent

  • Submitting a form requires acknowledgement that we may process your data to handle that request.
  • Marketing consent is separate, optional, and unchecked by default.

Changes

We may update this notice when site behavior changes (new processors, analytics, retention). Material changes will be reflected on /privacy before or when those features go live.

Forms: Audit · Project Inquiry