Security, privacy & data practices

pointpresence.com is built on the Lovable platform and uses Lovable Cloud for backend services. Lovable provides the underlying hosting, database, edge function runtime, and secret storage. Point Presence is responsible for the application code, data we collect through this site, the third-party services we connect, and how we respond to privacy requests.

Public marketing pages do not require an account. Internal dashboards (analytics, leads, and site intelligence) are protected by an authentication gate and are only available to authorized Point Presence staff. Authentication state is verified server-side; client-only role checks are not used for sensitive views.

Through forms, the chatbot, and the consultation booker we may collect: your name, business name, email address, phone number, website URL, and the details you choose to share about your project. We use this information solely to respond to your inquiry, deliver the services you request, and follow up about related offerings.

We do not sell personal information. We do not use submitted lead data to train AI models.

The following services may receive data submitted through this site:

• Lovable Cloud — application hosting, database, and edge functions
• GoHighLevel — CRM and lead routing
• Resend — transactional and notification email delivery
• Google Analytics 4 — aggregated traffic measurement
• Google reCAPTCHA — bot protection on forms
• Stripe — payment processing for clients on paid plans

We use first-party and analytics cookies to measure aggregate traffic and improve the site. We do not run third-party advertising trackers. Browser controls and the Global Privacy Control (GPC) signal can be used to limit tracking.

API keys, webhook secrets, and service credentials are stored as server-side secrets and are accessed only inside Lovable Cloud edge functions. They are never embedded in client-side code or exposed in the browser.

Lead and consultation records are retained for as long as needed to provide our services and meet legal or accounting obligations. You can request deletion of your personal information at any time by emailing the address below.

To access, correct, or delete personal information we hold about you, email sales@pointpresence.com with the subject line "Privacy request". We respond within 30 days.

If you believe you have found a security vulnerability affecting pointpresence.com, email sales@pointpresence.com with details and steps to reproduce. Please give us a reasonable window to remediate before public disclosure.

Point Presence is a marketing agency and does not currently claim SOC 2, ISO 27001, HIPAA, or PCI certification for this website. Payment card data entered on client checkout pages is handled directly by Stripe, a PCI-DSS Level 1 certified provider; we never store full card numbers on our servers.