How we handle your information

Last updated: May 26, 2026

Desert Peak Co. ("Desert Peak," "we," "us," "our") operates desertpeakco.com and the related admin platform at app.desertpeakco.com (together, the "Sites"). This Privacy Policy explains what information we collect, what we do with it, who we share it with, and how we protect it. It applies to visitors to our Sites and to clients who engage us for design, development, hosting, or related services.

1. Who we are

Desert Peak Co. is an Arizona limited liability company with its principal place of business at 4539 N 22nd St Ste. N, Phoenix, AZ 85016. The data controller for purposes of this policy is Desert Peak Co. itself. You can reach us at hello@desertpeakco.com or 312-680-0626.

2. Information we collect

We collect only what we need to operate the Sites, serve clients, and run the business:

Information you give us — your name, email address, phone number, business name, and any details you share via our contact, intake, proposal, or sign-up forms.
Project and service data — information you provide while we build or maintain something for you (content, logos, written copy, business context, and any credentials or API keys you choose to share for the work).
Payment information — collected and processed by our payment processor (currently Stripe). We do not store full card numbers or bank-account numbers on our own servers; we keep only the limited transaction metadata Stripe returns to us (last 4 digits, brand, status).
Account information — if you log into our admin platform, your authentication identifier from our login provider (Clerk) and any settings you change.
Automatically collected technical data — IP address, browser type, device type, pages visited, referring page, and timestamps, collected through standard server logs and analytics for security, debugging, and traffic measurement.
Cookies and similar technologies — strictly necessary cookies for login/session, plus limited analytics cookies (no advertising trackers).

We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us and we'll delete it.

3. How we use it

We use the information we collect to:

Respond to inquiries and provide the services you've requested.
Build, deliver, host, and maintain custom websites, software, and related deliverables for our clients.
Send invoices, process payments, and manage subscriptions (through Stripe).
Send transactional emails (proposals, agreements, executed copies, project updates, password resets).
Operate, secure, debug, and improve the Sites and the admin platform.
Comply with legal obligations and enforce our agreements.

We do not sell, rent, or trade your personal information, and we do not use it for cross-context behavioral advertising.

4. Who we share it with

We share information only with the limited categories of recipients needed to operate the business:

Service providers we rely on — including Vercel (hosting), Turso / Neon (databases), Stripe (payments), Resend (transactional email), Clerk (authentication), and similar infrastructure providers, each acting under their own terms and only for the purposes for which we engaged them.
The other party to a transaction with you — for example, if you sign a multi-party agreement through our platform, the other signers see your name, role, signature, and signing date.
Professional advisors — our accountants, lawyers, or insurers, only when necessary and bound by confidentiality.
Authorities — if we're legally required to disclose information by valid subpoena, court order, or law, we comply with the minimum required and, where lawful, give the affected party notice.
In a business transaction — if Desert Peak Co. is ever sold, merged, or restructured, information may transfer to the successor entity, subject to this Policy.

5. How we protect it

We use commercially reasonable administrative, technical, and physical safeguards: encryption in transit (TLS) on every endpoint we operate; encryption at rest on our managed-database and storage providers; least-privilege access for the small number of people authorized to see production data; secret rotation when staff or contractors change; and regular dependency updates on the platforms we run. We rotate client-supplied credentials (database connection strings, API keys, admin passwords) at the end of each engagement.

No method of transmission or storage on the internet is 100% secure. While we take security seriously, we can't guarantee absolute security. If we ever become aware of a breach that affects you, we'll notify you as required by applicable law.

6. How long we keep it

We keep personal information only as long as we need it for the purposes described in this Policy, to provide services, comply with our legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymize it on a routine schedule. Backups may persist for a limited additional period under our hosting providers' retention policies.

7. Your choices and rights

Depending on where you live, you may have the right to:

Access the personal information we have about you.
Correct information that's inaccurate.
Delete information we no longer need to keep.
Object to or restrict certain processing.
Receive a portable copy of your information.
Withdraw consent where we rely on it.

To exercise any of these rights, email hello@desertpeakco.com. We'll respond within a reasonable time after verifying your identity. You can opt out of marketing emails at any time using the unsubscribe link in any marketing email; we'll still send transactional emails related to active engagements.

8. Cookies

We use cookies (small text files stored on your device) for two purposes only: (a) strictly necessary session and authentication cookies so you can log in and the platform works, and (b) limited first-party analytics so we can see traffic trends. You can disable cookies in your browser; some Site features (including login) won't work without them.

9. International users

Our infrastructure is located in the United States. If you access the Sites from outside the U.S., you understand that your information will be processed in the U.S., which may have different data-protection rules than the country you're in.

10. Changes to this Policy

We may update this Policy from time to time. When we do, we update the "Last updated" date at the top. Material changes will be communicated through a notice on the Sites or by email to active clients.

11. Contact

Questions, requests, or complaints about this Policy: hello@desertpeakco.com · 312-680-0626 · Desert Peak Co., 4539 N 22nd St Ste. N, Phoenix, AZ 85016.