Privacy policy
How Cornerstone Web Co. handles the information you share with us. Plain English, like everything else we do.
Last updated: July 26, 2026
Cornerstone Web Co. ("Cornerstone," "we," "us," or "our") builds websites, client portals, and business systems for service businesses. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and the choices you have. It applies to our website, our client portal, and the services we provide to clients.
This policy does not change the terms of any agreement between Cornerstone and a client. Where a signed agreement addresses data, that agreement also applies (see our Master Service Agreement).
1. Information We Collect
(a) Information you give us — name, business name, email address, phone number, billing details, and project information you submit through our website contact forms, our onboarding questionnaire, the client portal, email, or phone calls with us.
(b) Information collected automatically — when you visit our website, we and our analytics tools may collect standard usage data such as IP address, browser type, device information, pages viewed, and referring links, using cookies and similar technologies (see Section 5).
(c) Payment information — payments are processed by Stripe. We receive limited details such as confirmation of payment and billing contact information. We do not store full payment card numbers.
(d) Client materials and credentials — to deliver projects, clients provide content such as logos, images, and text, and, where needed, access to their own accounts and platforms (see Section 3).
2. How We Use Information
We use the information we collect to deliver and manage our services and projects; communicate with you and respond to inquiries; prepare invoices and process payments; operate, secure, and improve our website and client portal; and meet our legal, tax, and accounting obligations. We do not sell your personal information.
3. Client Account Credentials
Clients sometimes give us access to their own accounts and platforms — for example, hosting, domain, analytics, or business profiles — so that we can perform the agreed work. We use these credentials only to perform the services, limit access to what is needed, store them using a reputable password manager, and enable multi-factor authentication where the platform offers it. Our handling of client credentials is also governed by our Master Service Agreement. Clients may change or revoke this access at any time.
4. Third-Party Service Providers
We rely on trusted providers to run our business. These currently include Assembly (our client portal), Airtable (our CRM and project records), Stripe (payment processing), Google (email, files, and related tools), and website analytics providers. These providers process information on our behalf or under their own privacy policies, and we share only what is reasonably needed to provide our services. We encourage you to review their privacy policies. We do not sell personal information to third parties.
5. Cookies
Our website uses cookies and similar technologies to keep the site working, remember preferences, and understand how the site is used through analytics. You can control or disable cookies through your browser settings, though some features may not work as well without them. For more detail, see our Cookie Policy.
6. Data Security
We use commercially reasonable administrative and technical safeguards to protect information, including least-privilege access, reputable password management, and encryption in transit provided by the platforms we use. No website or online service can be completely secure, so we cannot guarantee absolute security. We do, however, work to protect your information and to use providers that maintain their own security practices.
7. Data Retention
We keep personal information for as long as we need it to provide our services and to meet legal, tax, and accounting requirements. When we no longer need it, we delete or anonymize it. Information tied to a specific client engagement is retained, returned, or deleted in line with our Master Service Agreement and the applicable Statement of Work.
8. Your Rights
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, or to opt out of marketing messages. To make a request, contact us using the details in Section 12, and we will respond as required by applicable law. You can unsubscribe from marketing emails at any time using the link in the email. We do not sell your personal information.
9. Children's Privacy
Our website and services are intended for businesses and adults, not for children. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with information, please contact us and we will delete it.
10. External Links
Our website and materials may link to third-party websites that we do not control. We are not responsible for the content or privacy practices of those websites, and we encourage you to review their privacy policies before providing information.
11. Policy Updates
We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date above, and for material changes we will provide a more prominent notice where appropriate. Your continued use of our website or services after an update means you accept the revised policy.
12. Contact Information
If you have questions or requests about this Privacy Policy or your information, please contact us:
Cornerstone Web Co.
Email: cornerstonewebconet@gmail.com
Address: Charlotte, North Carolina
Client portal: cornerstoneweb.myassembly.com