Privacy Policy

What you send through the request form

The form on the Contact page collects only what is needed to qualify an inquiry and reply to it:

• Your name
• Work email address
• Organization
• Your role or title
• Organization-size range
• The workflow or problem you describe
• When you would like to start
• Systems involved (optional)
• Phone number (optional)
• How you heard about Natural State Logic (optional)

The form also asks you not to send anything sensitive. Do not include passwords, API keys, account credentials, records about people your organization serves, protected health information, confidential documents, or screenshots of production systems. If sensitive material reaches Natural State Logic anyway, say so and it is deleted.

Information the service records about the request itself

Beyond the fields you type, the service that accepts submissions records:

• When the form was opened and submitted. The service compares the two times to filter out submissions completed implausibly fast. A form left open for most of a day restarts that measurement when you next interact with it.
• One decoy field. The form contains a field that is hidden from people and from assistive technology. Anything typed into it marks the submission as automated, and no visitor sees which signal was rejected.
• A keyed hash of your network. Rate limits are applied per network to stop one source from filling the queue. The address itself is never stored with the inquiry: the service stores a salted hash, and the salt is discarded when the service restarts, so the stored value cannot be reversed or matched to an address later.
• Where your first visit came from. When you first open a page on this site, a small script from this site keeps, in your own browser's local storage (not a cookie), the campaign tags in the link you followed (such as utm_source), an ad click identifier if the link carried one, the page that referred you, and the page you landed on. It sends nothing by itself and is forgotten after 90 days. When you send the request form, those values go with it, so Natural State Logic can see whether you found the site through search, an ad, a post, or another site. Clearing this site's data in your browser removes them.
• A challenge response. The form carries a Cloudflare Turnstile token. Natural State Logic verifies that token server-side with Cloudflare before the submission is accepted. Client-side completion alone is never treated as proof.

The Office Time Leak Scorecard

The scorecard asks 15 multiple-choice questions, then asks where to send your report. When you send it, the service receives:

• Your answer to each of the 15 questions, including the kind of business, how many people handle the office work, and a rough hourly cost
• Your name
• Email address
• Phone number (optional)
• Business name (optional)

It also records the same things the request form does: when you started, the decoy field, the Cloudflare Turnstile token, a keyed hash of your network, and where your first visit came from. Your score is worked out again on the server from your answers.

Natural State Logic uses a scorecard to show and email you your report, to add you to its own lead list in Alrighty with your score and answers so Tanner can see which problems you face, and to send up to three short follow-up emails over the next two weeks, each about one of your top leaks. Every follow-up has an unsubscribe link: one click stops the rest. They also stop if you send a request through the Contact page from the same email address. A scorecard is kept, and deleted, under the same rules as a request below.

How your request is used

Natural State Logic uses an accepted request to read and qualify the inquiry, reply to you, arrange an Intro call, and decide whether the work fits. It is not used for advertising or profiling, and inquiry information is not sold.

Who else processes it

• Cloudflare serves the website, terminates TLS, filters hostile traffic, and carries requests to the origin server through Cloudflare Tunnel. Cloudflare also provides Turnstile, which processes browser and device signals to decide whether a visitor is a person. Cloudflare's own privacy terms govern what it processes for those services.
• Google Analytics measures how the production site is used, under Google's own privacy terms. The measurement script is loaded only on production pages; development and preview pages do not load it.
• Resend is the email provider the service sends through. It delivers the notification that tells Tanner a request or a scorecard arrived, so it receives those details. For the scorecard it also sends you your report and, unless you unsubscribe, up to three short follow-up emails. Delivery is retried with a stable key so a retry cannot send the same email twice.
• Alrighty is the system Natural State Logic uses to keep track of its own leads and clients, hosted on Google Cloud. An accepted request, with where your first visit came from, is copied there as a new lead so it can be answered and followed up. It is not used for advertising. The automatic 90-day deletion below applies to the inquiry service's own record, not to that copy; a request to delete what is held, as described under your choices, covers both.
• A scheduling provider is offered only after a request is durably stored. If you follow the scheduling link, that provider's terms and privacy policy apply to the details you enter there.
• Email and calendar providers receive information if you choose the email fallback on the Contact page or continue the conversation by email.

Storage and access

Accepted requests are stored in a SQLite database on a server Natural State Logic controls. The service that writes to it runs as an unprivileged process with access to one data volume, and the server is not exposed directly to the internet: public traffic reaches it only through Cloudflare Tunnel. Records are read with restricted operational tooling or direct database access over the private management path. There is no browser dashboard and no public interface to the inquiry database.

Logging

The service writes structured operational logs, and every field in a log record is drawn from a fixed allowlist. A log record contains:

• The event, its outcome, an internal inquiry identifier, and timings such as how long a request took.
• No message bodies, names, email addresses, phone numbers, organization names, or request contents.
• No verification tokens, no secrets, and no raw network addresses.

This operational logging is separate from website analytics and from the inquiry record itself: a log record never contains inquiry content, and analytics never receives it.

Website analytics

Production pages load Google Analytics 4 through the shared page layout, under measurement ID G-ENR5YKVDJN. Development and preview pages do not load the measurement script at all.

Analytics records:

• Page views, with the page path and the referrer for each one.
• Browser and device information, and the approximate geography that follows from the network a request arrives on.
• The site interactions Natural State Logic has configured as events.
• On the scorecard, that it was started, that the details form was shown, that a scorecard was sent, that its call button was pressed, and which of the four kinds of business was picked. No other answer, and no name, email, phone number or score.

Google Analytics may set its own first-party analytics cookies in your browser while it measures a visit. Natural State Logic does not deliberately send the values you type into the request form, or the contents of an inquiry, to analytics: those stay in the service described above, and the inquiry record and its operational logging remain separate from analytics.

Retention and deletion

An accepted inquiry is treated as unqualified until it becomes a client engagement. Unqualified inquiries are deleted automatically once they are 90 days old; the deletion runs on the server and can be run on demand, including as a preview that reports what would be removed without removing it. When an inquiry becomes a client engagement, its record is marked as qualified and the relevant details move into the business system that holds client records, where the retention that applies to client work takes over.

The deletion job runs on the server several times a day and can also be run on demand, including as a preview that reports what would be removed without removing it.

Backups

The inquiry database is backed up on the server. Each backup is a consistent snapshot of the database, encrypted with AES-256-GCM under a key derived from a passphrase, and authenticated so that a modified or truncated file is refused rather than restored. The seven most recent backups are kept; older ones are removed as new ones are written, so information deleted from the live database does not survive indefinitely in a backup. The restore procedure is exercised, and a restored copy is verified before it replaces anything.

Security measures that affect your information

• Server-side validation of every field, with request-size and field-length limits.
• Server-side verification of the Cloudflare Turnstile token for every submission.
• Honeypot and completion-time signals, plus per-network rate limits.
• Parameterized database access and no visitor-supplied markup rendering.
• Encrypted backups, a non-root service container, and secrets kept outside the code.

Alrighty text messages and phone calls

Alrighty, the approvals app Natural State Logic runs for its own business and its clients, can remind the people who decide a request by text message or phone call. The program and how to stop it are described in the Terms.

• What is kept. Your mobile number, when you confirmed it and turned texts or calls on or off, and for each text or call: when it was sent, which request it was about, whether it was delivered, and any key you pressed on a call.
• Why. Only to remind you about requests waiting in Alrighty, and to record a decision you make by phone in that request's activity.
• Who processes it. Twilio delivers the texts and calls, under its own privacy terms, and receives your number and the reminder's wording. Google Cloud hosts Alrighty and stores the record.
• Never shared for marketing. No mobile information is shared with third parties or affiliates for marketing or promotional purposes. Your opt-in and consent to receive texts are not shared with any third party.
• Stopping. Reply STOP to any text, or turn texts and calls off in Alrighty Settings. Removing your number there deletes it; the record of reminders already sent stays with the request it was about.

Your choices

You can ask what is held about you, ask for it to be corrected, or ask for it to be deleted. Email hello@naturalstatelogic.com and say what you want done; Tanner handles these requests directly and replies. If a request concerns a record that has already become part of a client engagement, Natural State Logic explains what is retained and why before acting.

What this policy does not claim

This policy describes current practice for this website and for Alrighty's texts and calls, and nothing more. It has not been reviewed by a lawyer, it is not legal advice, and it is not a contract. It does not claim certification or compliance with any framework. Signed engagement terms take precedence for work delivered to a client.

Changes

When practice changes, this page changes with it, and the date at the top reflects the change. Material changes to how inquiry information is handled are reflected here before the new practice is used for new submissions.

Contact

Questions about this policy, or about any request you have sent, go to hello@naturalstatelogic.com.