Privacy Policy

Draft, pending review by counsel. This text is a working draft and should be reviewed by a qualified attorney before launch.

Last updated: October 14, 2026

This policy explains how Success Facilitators, Inc., a Florida corporation doing business as peoplefirst.si ("peoplefirst.si", "we", "us") handles personal data for the Website Audit at audit.peoplefirst.si. We collect only what we need, and we never sell personal data.

What we collect

Order details: your name, email, billing address and the website URL you submit, collected through Stripe Checkout. Card details go directly to Stripe; we never see the full number.
Free check-up: website URL, email and your optional newsletter choice.
Audit data: publicly available content and technical data from the website you submit (pages, headers, scripts, screenshots).
Correspondence: messages you send us.
Basic server logs kept by our hosting provider (IP address, browser, pages requested) for security and reliability.

Why we use it (and legal bases)

To deliver the audit you ordered (contract).
To take payment, calculate tax and keep accounting records (legal obligation; contract).
To send the newsletter only if you opt in (consent; unsubscribe any time).
To secure and improve the Service (legitimate interests).

Service providers

We share data only with providers that help us run the Service, under contracts that limit their use of it: Stripe (payments, tax and fraud prevention; Stripe acts as an independent controller for some payment data under its own privacy policy), Vercel (website hosting), our email provider (report delivery), and AI model providers used to analyze public website content and AI-assistant answers. We do not send your payment details to AI providers. Data may be processed in the United States; where required, we rely on standard contractual clauses or equivalent safeguards.

Retention

Audit reports and scan data: kept for 24 months so we can answer questions and run re-audits, then deleted. You may ask us to delete them sooner.
Order and tax records: kept for 7 years as required for accounting.
Free check-up requests: 12 months. Newsletter: until you unsubscribe.
Server logs: per our host's standard retention (typically under 30 days).

Cookies

This site does not use advertising or tracking cookies. Stripe sets cookies on its checkout pages for security and fraud prevention. If we add analytics, we will update this policy and ask for consent where required.

Your rights

EU/UK (GDPR): you can request access, correction, deletion, restriction, portability, or object to processing, and withdraw consent at any time. You may complain to your local data protection authority.

California (CCPA/CPRA) and other US states: you can request to know, correct and delete your personal information. We do not sell or share personal information for cross-context behavioral advertising, and we will not discriminate against you for exercising your rights.

To exercise any right, email info@peoplefirst.si. We will respond within 30 days (45 days where US state law allows) and may need to verify your identity.

Children

The Service is for organizations and is not directed to children under 16.

Security

We use HTTPS, access controls and reputable providers. No system is perfectly secure; we will notify you of a breach affecting your data as required by law.

Contact

Success Facilitators, Inc. (peoplefirst.si) · info@peoplefirst.si