What I collect, in plain English.

When you send me a message

The contact form and the project questionnaire send what you type (and any files you attach) to my inbox as an email, using a delivery service called Resend. It is not saved in a database on this site. I keep the email for as long as we are talking about a project, and I delete it if you ask.

The setup form for a monthly service is the one exception. It is emailed to me the same way, and a copy of your answers is kept for 90 days so I can set your service up without asking you twice. After that the copy is deleted automatically.

When you pay

Payment happens on Stripe’s own checkout page. Your card details go to Stripe and never pass through this website. The business name you type on the payment page, and your email if you add it, go to Stripe with the payment so I can match it to your project. I see your name, email, business name and the amount paid.

Visitor counts

A small script on these pages counts page views, taps on a phone number, form submissions and how fast the page loaded. It sets no cookie and stores nothing in your browser. To count unique visitors, the server mixes your IP address and browser type with a secret that changes every day and keeps only a short scrambled code, so yesterday’s visit cannot be matched to today’s. Your IP address itself is never written down. Counts are kept for 400 days and then deleted automatically.

If I emailed you first

I found your business’s email address on your public website or business listing. Every email I send has an unsubscribe link. Using it adds your address to a block list so you are not emailed again. You can also reply “remove me” and I will do it by hand.

The sites I build for customers

A website I build belongs to the business that paid for it, and runs on an account in their name. See how the handoff works.

If you used a chat, a phone line, a text or a form that I run for a business

Some local businesses pay me to run a chat on their website, to answer the calls they miss, or to ask their customers for a Google review. When you use one of those, you are dealing with that business. I handle the details for them and for nothing else.

• Website chat and photo check. What you type is used to answer you. If you leave a name or a number, that and the conversation are sent to the business so they can call you back, and kept for 400 days. A chat that never becomes a request is deleted after one day. The chat keeps the conversation in your browser tab so it survives a page change, and it is gone when you close the tab. It always says it is automated. A photo sent to the photo check is read once to answer you and is not kept.
• Missed calls. If a business does not pick up, an automated assistant answers and says so. It keeps your number and what you said as text, sends both to the business, and keeps them for 400 days. No audio is recorded and there is no voicemail.
• Review requests. A business gives me the name and the email or mobile number of a customer they finished a job for. That person gets one request and at most one reminder. Texts go only to people who told the business they agree to texts. Every message has a way to stop them, and stopping is permanent: the address is kept only as a scrambled code so it is never contacted again. If the business asks for it, a customer who opened the review link gets one thank you with the business’s website in place of the reminder. Reply STOP to a text and no business I run texts for will text you again; START undoes it.

To do this I use a small number of other companies, each only for its own job: Resend to deliver email, Twilio for calls and texts, Upstash to store the records, Stripe to bill the business, Vercel to host the site, Google to read a business’s own listing, and Anthropic to read a photo sent to a photo check. None of them is given your details for advertising, and I do not use them for advertising either.

Your IP address is used for a few minutes to stop abuse and is not kept with what you said. The only cookie this site sets is the sign-in for my own admin page.

Getting something removed

Email ricky.ybarra@novyxsites.com and say what you want deleted. I reply within one business day. If your details reached me through a business I work for, you can ask them or ask me, and either way they are removed.

Last updated October 6, 2026.