Privacy Policy
Effective date:
Neon Toad Digital is a digital systems studio in Fort Wayne, Indiana, owned and operated by Kyle Todoran. In this policy, “Neon Toad,” “I” and “me” mean that business.
This policy explains what information neontoaddigital.com collects, why, how long it’s kept and what you can ask me to do with it. It covers this website, its forms and its payment page. It doesn’t govern the websites or digital systems I build for clients; those services may be subject to their own privacy policies and agreements. Work performed under a signed client agreement is also governed by that agreement.
Information you give me
Contact form. Your name, email address, business name (optional), phone number (optional), how you’d like me to reply, your message and the page you sent it from.
Project onboarding form. Clients who have signed on use this form (at /start-a-project/) to send me the details and files for their website:
- Your business name, your name, email address and phone number.
- Your business address, website and social media links, if you choose to provide them.
- Your answers about your business, services, customers, brand and goals.
- Any files you upload, such as photos, logos and documents.
- A link to videos you choose to share, such as a Google Drive, Google Photos, iCloud or Dropbox folder.
Both forms include a hidden spam check and a timing check. These aren’t saved with your submission.
Agreements and payments. If you become a client:
- You sign your client agreement through BoldSign, an electronic signature service. BoldSign records each signer’s name, email address and signature, along with a record of the signing, such as the time and IP address.
- Once the agreement is signed, I create a customer record for you in Stripe, my payment processor, with your name, business name, email address and the package you chose, and email you a payment link. The link carries a signed reference to your agreement, not your name or email address, and stops working after 14 days.
- You pay on Stripe’s secure checkout page. Stripe collects your card or bank account details directly; I never see or store your full card or account number. Stripe shares with me your name, business name, email address, billing address, payment status, and the type and last four digits of your payment method.
- Your payment method is saved with Stripe so the remaining payments in your agreement can be charged as your agreement describes.
Information collected automatically
Hosting logs. This website is hosted on Amazon Web Services (AWS Amplify). Like most web hosts, AWS automatically records standard information about each visit: your IP address, browser and device type, the page requested, the page that referred you and the date and time. AWS keeps these logs as part of its hosting service. I can view them for security and troubleshooting, but I can’t edit or delete individual entries.
Form and payment service logs. When you send a form or use the payment page, the service that processes it keeps limited technical records, such as a random submission or agreement reference, the number, type and size of uploaded files, and error codes. These records don’t include your name, contact details, message, answers, the names of your files or your payment details.
Google Analytics. This website uses Google Analytics to understand how visitors find and use it: the pages viewed, how a visitor arrived (for example, from a search engine or another website), their approximate location (city or region, based on IP address), device and browser type, and how long a visit lasts. Google Analytics uses cookies to tell one visit from another. I use these reports only to improve this website. I don’t use them for advertising, and I don’t try to identify individual visitors.
Only if you accept. Google Analytics runs only if you accept analytics cookies in the notice on this website. Until you do, nothing is sent to Google Analytics and no Analytics cookies are set. Your choice is saved in your browser’s local storage for 12 months, so you aren’t asked on every page. Google Analytics never runs on the project onboarding form or the payment pages.
Saving your progress and uploading files
Your answers. The project onboarding form saves your answers on your own device, in your browser’s local storage, so you can finish later. Your answers aren’t sent to me until you press send. They’re cleared when you send the form or choose “Start fresh,” and they expire 14 days after you last change them. You can also remove them at any time by clearing this site’s data in your browser.
Your files. Files you add to the form upload right away to private, encrypted storage, so large photos don’t hold up your submission. Until you send the form, they stay there and aren’t included in any notification to me. Files from a form you never send, and files you remove before sending, are deleted automatically 14 days after upload. Choosing “Start fresh” or clearing your browser data doesn’t remove files that have already uploaded; they’re deleted on the same 14-day schedule.
How I use your information
- To reply to your message.
- To understand your business and prepare a proposal.
- To build, launch and maintain your website and digital systems if you become a client.
- To take payments under your client agreement and send you the emails that go with them.
- To keep this website and its forms working and secure.
- To understand how visitors find and use this website, so I can improve it.
I don’t sell your information, use it for advertising or add you to a mailing list.
Who else handles it
I use a small number of service providers to run this website and my business:
- Amazon Web Services (AWS), for website hosting (AWS Amplify), form and payment-page processing, private file storage and sending email: form notifications to me, and payment and onboarding emails to clients (Amazon SES).
- Google, for my business email (Google Workspace), where form notifications arrive; Google Drive, if you upload videos or files to a folder I share with you; and Google Analytics, for the website statistics described above.
- Stripe, for payments: secure checkout, saved payment methods, invoices and receipts.
- BoldSign, for signing client agreements electronically.
These providers process information as part of the services they provide to Neon Toad Digital and maintain their own privacy and security practices. I may also disclose information if the law requires it or to protect my rights or someone’s safety.
How long I keep it
| Information | How long |
|---|---|
| Project onboarding answers and uploaded files | Deleted automatically 24 months after you send them |
| Contact form messages and email copies of onboarding submissions, in my business email | Generally kept for about 24 months and deleted periodically |
| Files uploaded to the onboarding form but never sent, or removed before sending | Deleted automatically 14 days after upload |
| Download links in my notification emails | Stop working after 30 days |
| Payment links | Stop working after 14 days |
| Signed agreements and payment records, in BoldSign and Stripe | Kept for as long as needed for our work together and for tax, accounting and legal purposes |
| Form and payment service logs | 30 days (90 days for onboarding submissions and payment notifications) |
| Hosting logs | Kept by AWS for as long as this website is hosted with AWS Amplify |
| Answers saved in your browser | Up to 14 days after your last change, on your device only |
| Google Analytics data tied to a visit or device | Deleted automatically by Google within 14 months |
| Your analytics cookie choice | 12 months, on your device only |
If you become a client, content that becomes part of your website or digital systems stays with that work, and your client agreement governs it.
How I protect it
- Information sent between your browser and this website’s services is transmitted over encrypted HTTPS connections.
- Project files are kept in private, encrypted storage that isn’t publicly accessible.
- The download links in my notification emails expire after 30 days.
- Card and bank details are entered on Stripe’s checkout page and never pass through or stay on Neon Toad’s systems. Payment links expire after 14 days and don’t contain your name or email address.
- Access to the information you submit is limited to authorized personnel and service providers who need it to perform their responsibilities.
No system is perfectly secure, but I take reasonable steps to protect what you send me.
Your choices
You can ask me to show you, correct or delete personal information you submitted through this website’s forms by emailing hello@neontoaddigital.com. I may take reasonable steps to verify your identity before fulfilling a request. I’ll respond to verified privacy requests within a reasonable period and within any timeframe required by applicable law.
I may keep information when reasonably necessary for legal, accounting or business-record purposes. Some technical information retained by service providers, such as AWS Amplify access logs, may not be individually deletable.
You can change your analytics cookie choice at any time with , also at the bottom of every page. Declining stops Google Analytics and removes its cookies from this site. You can also block cookies in your browser or install Google’s Google Analytics opt-out browser add-on.
Children
This website is for businesses. It isn’t directed to children under 13, and I don’t knowingly collect information from them.
Changes to this policy
If I change this policy, I’ll update the effective date above. Significant changes will be noted on this page.
October 15, 2026: Added Google Analytics, which runs only if you accept analytics cookies. See “Information collected automatically.”
Contact
Questions about this policy or your information: hello@neontoaddigital.com