Privacy Policy

alejandro.software is a personal portfolio and inquiry site operated by Alejandro Morales (“I”, “me”) from Beaverton, Oregon, United States. This policy explains what information I collect, why I collect it, and what your rights are.

Information I collect

From the contact form

When you submit the form at /contact I receive:

• Your name and email address
• Optional project type, budget, and timeline selections
• The message you typed
• The IP address that submitted the form (used only to enforce a per-IP rate limit; stored as a salted hash, never as plaintext)

From the booking flow

When you book a meeting at /book I receive your name, email address, the meeting slot you chose, any notes you entered, and (if a deposit applies) Stripe payment metadata. Card details are handled by Stripe and never touch this server.

From visiting the site

I run Vercel Analytics and Vercel Speed Insights for aggregate traffic and performance data. Both are cookieless and don't track you across other sites. I don't run Google Analytics, Meta Pixel, or any advertising trackers.

How I use it

• To reply to your inquiry or fulfil a booking
• To send a one-time confirmation email after a contact submission
• To prevent abuse (rate limits, honeypot detection)
• To understand which pages are read so I can improve the site

I do not sell your data, share it with advertisers, or use it to train AI models.

Third-party processors

The following services process data on my behalf:

• Vercel — hosting, edge functions, cookieless analytics, speed insights. (US-based, GDPR-compliant DPA available.)
• Resend — transactional email delivery for contact replies and booking confirmations.
• Neon — managed Postgres database for booking records.
• Upstash — rate-limit counter store (stores only a salted hash of your IP and a counter, expires within an hour).
• Stripe — payment processing for booking deposits, when applicable.

How long I keep it

• Contact form submissions: kept in my inbox for up to 24 months, then deleted unless we are actively working together.
• Booking records: kept for 7 years for tax/accounting reasons (US standard).
• Rate-limit hashes: auto-expire within 1 hour.
• Analytics: aggregated, no per-user retention.

Your rights

Whether you live in the EU/UK (GDPR), California (CCPA/CPRA), or anywhere else, you can email hello@alejandro.software to:

• Ask for a copy of any data I hold about you
• Ask me to correct or delete it
• Withdraw consent for any processing based on consent
• Object to processing or request portability

I'll respond within 30 days. There is no cost. You may also lodge a complaint with your local data-protection authority.

Cookies

The site sets a small number of strictly necessary cookies for the booking and admin flows (session and CSRF protection). I don't use advertising or tracking cookies.

Children

The site is not intended for anyone under 16. If you believe a minor has submitted information, email me and I'll delete it.

Changes to this policy

I'll update the “Last updated” date at the top of this page when I make material changes. The git history of this file is publicly viewable on the site's GitHub repository.

Contact

Alejandro Morales · Beaverton, Oregon, United States · hello@alejandro.software

See also the Terms of Service.