Privacy

Pascucci Labs (Host With Pascucci) runs https://pascucci.rocks. This page explains what personal information we collect through it, why, who we share it with, and what you can ask of us.

Who is responsible

Greg Pascucci is responsible for privacy at Pascucci Labs (Host With Pascucci). Contact: [email protected].

What we collect

• Site request form: your name, email and message, sent to the site's Postgres database and by email to the site owner.
• The intake form (/start): your business name and description, area, hours, phone, email, address and social links if you give them, the domain you own or want, your colours and style, the pages and services you want, testimonials, your logo and photos, and when you accepted the terms. It is stored in the site's Postgres database, and the logo and photos as files on the server, never on a public web address. We also keep your answers to the approval page (approve, or the changes you ask for).
• Quote requests: for the bigger tiers, the same intake form, with the tier you chose, is kept and emailed to Greg and Sky so they can quote; no payment is taken. A quote request that does not go ahead is deleted 90 days after it was last changed.
• Content for your site: the answers and content you send us (such as text, logo and photos) are processed by AI tools to build it.
• Domain checks: a domain name you type is looked up in the public registry (Verisign for .com and .net, CIRA for .ca) to see if it is taken. Only the name is sent.
• The setup fee and hosting subscriptions: Stripe processes each payment on its own checkout page, so we never see your card details. We keep the subscriber's name, email and payment records. Earlier subscriptions started through PayPal are processed by PayPal.
• Google Analytics 4: page-view analytics, only if you click Accept on the cookie notice. If you accept, the Google Analytics tag sets Google Analytics cookies in your browser.
• Google Fonts: your browser requests the site's fonts from Google, which receives your request.
• Server logs: the Nginx web server on the host records your IP address, browser and the pages requested, kept to run and protect the site.
• Cloudflare: the site is delivered through Cloudflare, which handles your requests on their way to the site.

Why we use it

• The site request form: to read your request and write back to you.
• Your answers and site content: to build your site with AI tools, show you a private preview before it goes live, and email you about it (the payment, the preview, your changes, going live, and your domain after a cancellation).
• Subscription and payment records: to run your hosting subscription and keep the records of what was paid.
• Google Analytics, if you accept it: to see how the site is used.
• Server logs and Cloudflare: to run the site and protect it from attacks.

Consent

Sending the site request form asks us to reply to the email address you give. Sending the intake form asks us to build your site and to email you about it; ticking its boxes agrees to the terms and lets us publish what you send on your site. You may withdraw consent at any time by writing to [email protected].

Who we share it with

We do not sell personal information. We use these service providers:

• Stripe (United States): processes the setup fee and hosting subscription payments, and runs the customer portal where you manage or cancel your subscription. On Bookings and payments sites and above, your customers' payments go to your own Stripe account, under Stripe's privacy policy; we do not hold your Stripe keys.
• PayPal (United States): processes payments for subscriptions started through PayPal.
• Google: Google Analytics 4 page-view analytics (only if you accept it) and Google Fonts.
• Cloudflare: delivers the site and protects it from attacks.
• Gmail (United States): sends and receives the email about site requests.
• Namespro (Canada): the mail server that sends our emails about your site, from [email protected], and the host of the email mailboxes included with your tier, which hold the mail you send and receive.
• Your scheduling provider (for example Cal.com), on Bookings and payments sites and above: runs bookings in the scheduling account you own. Your customers' booking details go to that account, under the provider's privacy policy.
• Verisign (United States) and CIRA (Canada): answer the domain availability checks.

Where it is stored

Personal information is stored on the site server in British Columbia, Canada. Email goes through Gmail and payments through Stripe or PayPal, so some information is processed in the United States and is then subject to that country's laws. The email mailboxes included with your tier are hosted by Namespro in Canada. Bookings, where your site has them, are kept by your scheduling provider, which may store them outside Canada.

How long we keep it

Emails and messages are deleted within 12 months. Order and payment records are kept for 6 years.

Intake forms that are never paid for are deleted, with their logo and photos, 90 days after they were last changed. For clients, the intake answers, logo and photos are kept while we build and host your site, and deleted 90 days after your hosting ends or the project is stopped. You can ask us to delete them sooner (see below); Stripe keeps its own payment records.

How we protect it

The site is served over HTTPS through Cloudflare, and site requests are held in the site's database on the server. Intake uploads are stored as private files on the server that no web address serves, readable only by the site's own service. Approval links are long random codes, and we store only a scrambled form (a hash) of them.

Cookies and analytics

The site uses Google Analytics 4 to count visits. Google Analytics loads only after you click Accept on the cookie notice; until then nothing is requested from Google for analytics and no Google Analytics cookies are set. Once you accept, it sets Google Analytics cookies in your browser and sends page-view information to Google. If you click Decline, or do not choose, it never loads. You can change your choice at any time with Cookie settings in the footer of every page; choosing Decline there stops Google Analytics and removes the cookies this site set. Declining has no effect on how you use the site. The site sets no other cookies of its own. Your choice is remembered in your browser's local storage.

Your choices and rights

You may ask to see the personal information we hold about you, have it corrected, or have it deleted, and you may withdraw consent. Write to [email protected]. We reply as soon as we reasonably can. A deletion request removes your intake answers, logo and photos; payment records we must keep are kept for the period above.

Concerns and complaints

Please contact us first. If you are not satisfied, you may complain to the Office of the Information and Privacy Commissioner for British Columbia (oipc.bc.ca), which oversees the BC Personal Information Protection Act (BC PIPA).

Changes

We update this page when our practices change and change the date at the top.