Privacy and data boundaries for Payback Map.

We use Vercel Analytics to understand page visits and limited custom events such as resource clicks, start-path clicks, intake-result states, and support-form attempts. These events are designed to avoid raw form text, email addresses, phone numbers, private customer data, passwords, or payment details.

If you use the AI intake, the page may send the fields you provide to an AI service for a readiness assessment. You should only provide safe, redacted workflow notes: business type, workflow type, rough volume, current tools, pain points, and human-review boundaries. Do not submit passwords, API keys, billing data, private customer lists, regulated records, or sensitive customer details.

If you submit the support form or schedule an intake appointment, we may receive your name, email, company, topic, message, appointment time, and the page where the request started. These details are used to respond, confirm scope, and support the Payback Map process.

Payment is handled by Stripe. Payback Map does not store full card numbers or banking credentials. Stripe may process payment details under its own privacy and security terms.

We use submitted information to answer questions, evaluate whether a workflow is ready for a Payback Map audit, schedule intake appointments, deliver the audit, improve site clarity, and maintain safety boundaries.

We may use service providers such as Vercel, Resend, Stripe, scheduling tools, AI model providers, and messaging or workflow tools to operate the site and deliver the service. Secrets and API keys are kept in environment variables rather than public site files.

We keep support, scheduling, and audit-related information only as long as reasonably needed for service delivery, records, dispute prevention, security, and business operations.

The safest choice is to use redacted examples only. If you accidentally submit sensitive information, contact support and ask for deletion or correction.

Use Payback Map Support for privacy questions, access/deletion requests, or data-safety concerns.