Privacy

Flat 99 (“we,” “us”) builds small-business websites. This page explains what information we collect, where it lives, and how you can ask us to change or remove it. We try to keep this short and readable.

Who we are

Flat 99 is operated by Richard Shillington. Contact: richard@gotrichard.com. The service runs on Cloudflare (Workers, D1 database, and — when enabled — R2 object storage).

What we collect

• Order / intake info — name, email, phone, business name, city, niche, goals, offer, copy, hours, FAQs, social links, domain preference, plan choice, template choice, optional brand colors, and related questionnaire answers.
• Publish consent — whether you agreed we may put your business name, brand, and provided copy on the site we build.
• Collateral — logos, photos, flyers, brand kits, and similar files you upload. File metadata is stored in our database; file bytes go to Cloudflare R2 when that bucket is enabled. If R2 is not bound, we may keep metadata only and ask you to re-send files.
• Promo codes — if you redeem one, we store the code against your order.
• Change-bot / help chat logs — messages you send in the free help or change bot, plus identifiers you provide (often email + order id) so we can apply tweaks.
• Operational email — order confirmation to you, and internal notify mail to richard@gotrichard.com.
• Technical basics — standard request logs/security signals from Cloudflare hosting (IP, user agent, timestamps) as part of running the site safely.
• Signup IP — we store the network IP on orders for abuse prevention (shared networks may be flagged for human review; this is not a permanent ban).
• First-party analytics — simple pageview counts on Flat 99 (and client sites that include our beacon). No Google Analytics. We store path, referrer host, and a daily anonymous visitor hash derived from IP + truncated user agent — no advertising cookies.
• Import URL — if you ask us to rebuild from an existing site you own (or have permission to rebuild), we store that URL and a lightweight preview extract.

Where it is stored

• Cloudflare D1 — orders, sites, activity, chat/change-request records, promo redemption, and intake JSON.
• Cloudflare R2 — collateral file bytes when the R2 binding is enabled.
• Email provider — transactional mail (currently Resend or similar) to deliver order notices.

We do not sell your personal information.

How we use it

• Build, host, and improve your website and CRM backend.
• Quote your plan (year-1 free slot, $99/yr, or promo free build).
• Reply to you and process change-bot requests.
• Keep basic records for support, fraud prevention, and accounting.
• Show site owners simple first-party traffic counts in the admin console.

What appears on your public site

When you check publish consent at intake, you authorize us to publish the business name, branding, and copy you provided (and reasonable polish of that copy) on the website we build for you. Do not submit secrets, passwords, or private customer lists in intake or chat.

Retention, export, and cancellation

• You can request a full export of your site assets we hold — we do not lock downloads behind a paywall.
• To cancel hosting, stop renewals, or ask us to delete or correct personal data, email richard@gotrichard.com with your order id and email.
• We may keep limited records needed for legal, tax, or dispute reasons after cancellation.
• Collateral and chat logs are kept while your order/site is active and for a reasonable period afterward unless you ask us to remove them sooner (subject to the above).

Cookies and tracking

The marketing and intake pages are intentionally light. We do not run a heavy ad-tracking stack on Flat 99 itself. Cloudflare may set security/performance cookies as part of hosting.

Children

Flat 99 is for business customers. We do not knowingly collect information from children under 13 for this service.

Changes

We may update this page. The “Last updated” date at the top will change when we do. Continued use after an update means you accept the revised notice.

Contact

Questions about privacy: richard@gotrichard.com