Privacy Policy

Information you give us — name, email, phone number, company, project description, and anything else you type into our forms (lead, audit, contact, /start). When you become a client, we additionally collect billing address, tax identifiers if applicable, and project files / messages exchanged in /app.

Information collected automatically — IP address (used for region detection and rate-limiting; we hash it before storage), user-agent, referrer, and pages visited. We use Vercel Analytics (no cookies, no PII) for aggregate traffic counts and counts of clicks on our call, chat and quote buttons.

Information from cookies — three, all our own. A country cookie (redenn-geo) holding a two-letter country code derived from your IP address, set on first visit and kept for 24 hours, so we can show prices in your currency; an authentication cookie, set only when you sign into /app or /admin; and an rd_attr cookie that records which campaign or website first sent you to us (for example a Google search or one of our ads), kept for 90 days and saved with any enquiry you send, so we can learn which ads work. We do not use third-party advertising cookies, retargeting pixels, or session-replay tools, and no third-party ad trackers are installed.

• To respond to your enquiry and scope your project.
• To deliver the project work you've contracted us for.
• To invoice and process payment (via Razorpay; older Stripe payment links are still reconciled).
• To send transactional emails (project updates, invoice receipts) — never marketing without explicit opt-in.
• To improve the website itself (which pages convert, where forms are abandoned).
• To comply with legal obligations (tax, accounting).

We share data with the minimum number of providers needed to run the business:

• Vercel — hosts the website and the portal.
• Supabase — database + authentication.
• Resend — transactional email delivery.
• Razorpay — payment processing (card and bank transfer). Stripe only for payment links sent before October 15, 2026.
• Google — analytics for aggregate page-view data, business listings, place reviews.
• Tax authorities, accountants, and legal counsel as required by law.

We do not sell your data. Ever. We do not share leads with other agencies, partners, or affiliates.

If you give us your mobile number and opt in at redenn.com/legal/sms, or ask us in writing to text you, we may send you SMS messages about your project, appointments, invoices and replies to your questions. Message frequency varies with your project; message and data rates may apply. Reply STOP at any time to opt out and HELP for help. Opting out of texts does not affect any other service.

No mobile information will be sold or shared with third parties for promotional or marketing purposes. Your consent to receive texts is never shared with anyone, and we do not use texting for cold marketing.

Calls to and from our team may be recorded for quality and record-keeping. You will hear an announcement at the start of any recorded call, and you can ask us not to record.

Lead and audit-request data: 24 months from last contact, then deleted unless you've become a client.

Client + invoice data: minimum 7 years, per Canadian and Indian tax-law retention requirements.

Portal messages and files: for the life of the engagement plus 24 months, after which we offer to export and then delete. You can ask for export / deletion at any time.

You can ask us, at any time, to:

• See a copy of the data we hold on you
• Correct anything that's wrong
• Delete it (subject to legal retention obligations for accounting records)
• Export it in a machine-readable format
• Stop using it for analytics or any optional purpose

Email privacy@redenn.com and we'll respond within 14 business days.

The two Redenn entities are in Canada and India, and our providers (Vercel, Supabase, Razorpay) operate globally. By using the site you consent to your data being processed in those regions. We use providers that are SOC-2 / ISO 27001 certified and rely on standard contractual clauses for cross-border transfers where applicable.

Our services aren't directed at children under 16, and we don't knowingly collect data from them. If you believe we have, email us and we'll delete it.

We'll update the "Last updated" date at the top whenever we change this policy materially. For substantive changes, we'll also email active clients.