Privacy Policy

This policy explains how Huerta Group LLC (“Huerta Group,” “we,” or “us”) handles information collected through huertagroupllc.com, the inquiries it receives, and our Customer Portal at portal.huertagroupllc.com, including how that information is managed afterwards in our internal business systems.

If you become a client, your written agreement may contain further terms about the information you share during the work. Use of the website itself is covered by the Terms of Use.

Free Business Workflow Check requests

When you submit the Free Business Workflow Check form, we receive your name, your business or organization, your email address, and your description of the process or challenge you would like to discuss. Your availability is optional.

Contact page messages

When you use the Contact page form, we receive your name, your organization, your email address, the inquiry type you choose, your message, and the page the form was sent from.

How you found us

With a Free Business Workflow Check request, we also record the page it was sent from, any campaign tags that were part of the link you followed to the website (for example “utm_source”), and the name of the website that referred you, such as a search engine or directory. We keep only the referring site’s name, not the full address of the page you came from.

Communications

If we correspond or speak with you, we keep the emails we exchange and the notes we make about your request and any work that follows.

Technical information

Like any website, ours receives technical information that browsers send automatically, such as your IP address, browser and device type, the page requested, and the time of the request. Our hosting provider processes this information to deliver and protect the website. To limit repeated form submissions, the website briefly uses your IP address in server memory; it is not stored with your request. Our own server logs record short technical status codes, not the content of what you submit.

What we do not ask for

The website’s forms do not ask for a telephone number, do not accept file uploads, and do not collect payment information. (Files are accepted only in the Customer Portal, described below.) Please do not include confidential, financial, medical, or other sensitive information in a form.

We use the information described above to:

• review your request or message and reply to you by email;
• propose, confirm, prepare for, and hold a conversation you have asked for;
• keep records of inquiries and of any customer relationship that follows;
• if you become a client, prepare proposals and agreements, carry out the work, and handle invoicing and accounting;
• if you use the Customer Portal, give you access to your projects, exchange documents with you, and keep a record of that exchange;
• protect the website and its forms against spam, abuse, and automated submissions;
• understand, from campaign tags and referring sites, which channels lead people to request a conversation; and
• meet our legal, tax, and accounting obligations.

Submitting a form does not sign you up for a newsletter or marketing emails. We contact you about your request.

When a Free Business Workflow Check request is received, it is stored and an internal email notice tells us that a new request has arrived. That notice contains no details from your request: no name, email address, organization, or message.

Your request is then reviewed in our internal business system. If a conversation makes sense, we email you to propose a time; nothing is scheduled until that time is confirmed with you. The website has no online booking tool. If the conversation takes place by phone or video call, the provider of the service we agree to use processes the call under its own terms.

The website does not use analytics, advertising, or tracking scripts, and it does not set cookies of its own.

The Free Business Workflow Check page uses your browser’s session storage to remember, for the current browser tab only, any campaign tags and the referring website from your arrival, so they can be included if you submit a request. This stored item contains no name or contact details, is not sent anywhere unless you submit the form, and is cleared by your browser when the tab is closed.

The Customer Portal is a separate site. When you sign in to it, it sets strictly necessary cookies that keep you signed in; it does not use analytics or advertising cookies.

Our hosting provider may, in limited circumstances such as protecting the website against an attack, use a strictly necessary security check or cookie.

Because the website does not track visitors for analytics or advertising, it does not change its behavior in response to “Do Not Track” or similar browser signals.

Free Business Workflow Check requests are stored in Huerta Group’s internal business system, which we call Headquarters. We use it to manage inquiries, customers, possible work, proposals, projects, tasks, and references to invoices. Requests identified as duplicates, tests, or spam may be kept with that label.

Access to Headquarters is limited to authorized Huerta Group users, who must sign in with a password and multi-factor authentication. The website form can add a new request but cannot read stored records.

Customer Portal accounts are linked to the customer contact records kept in Headquarters, and portal documents and activity are stored alongside them (see “Customer Portal” below).

Messages sent through the Contact page are currently stored in a separate database used by the website, not in Headquarters.

Our Customer Portal at portal.huertagroupllc.com lets people connected to existing customer work exchange documents with us. This section describes the information it uses.

Accounts

Portal accounts are by invitation only; there is no public registration. We set up an account for a person who is a current contact of one of our customers, using the name and email address already in our records, and give that person a one-time link to activate it. You choose your own password; we never see it. Your account page shows your name, email address, company, and the number of projects you can reach.

Signing in

You sign in with your email address and password. Sign-in is provided by Supabase, our database and authentication provider. Self-service password reset is not currently offered: if you cannot sign in, contact the person you work with at Huerta Group, who can issue a new one-time link.

Project access

An account can see only the projects we have authorized for it, and never another customer’s information. Access is checked by our database each time you open a page or a file.

Your uploads

You can upload a file when we have asked for one. Accepted files are PDF, Word, Excel, CSV, text, PNG, and JPEG, up to 25 MB each, and each account has limits on how many files it can upload per hour and per day and on total storage. We check that a file’s contents match its type before accepting it. With each upload we record the file, its name, type, and size, the request it answers, who sent it, and when. You can see your successful uploads in the portal.

Shared documents and deliverables

We may share documents and deliverables with you through the portal. They can be downloaded only while you are signed in and your access is current; there are no public links. You can confirm that you received a deliverable, and we record that confirmation. We can withdraw a shared document, after which it is no longer available in the portal.

Access controls and removal

We can suspend an account or remove access to a project, and access to a customer’s projects ends automatically when a person is no longer a current contact for that customer. A change takes effect on the next page or file request.

Private storage

Portal files are kept in private storage with Supabase in the United States. Files have no public address and are delivered only through the portal after an access check. Authorized Huerta Group users can see the files you upload, in Headquarters.

Activity records

The portal keeps a permanent record of account and access events (accounts enabled, activation or reset links issued, accounts suspended or restored, and project access granted or removed) and of document activity (files requested, uploads received, documents published, deliverables released, items withdrawn, and receipts confirmed), with the time and whether Huerta Group or the account holder acted. Our authentication provider records when you last signed in, and our hosting provider processes technical request information as described above.

What the portal does not do

The portal does not offer messaging, payments, public sign-up, or self-service password reset. If any of these is introduced, this policy will be updated first.

The website does not take payments and has no checkout. If you become a client, invoices and accounting records for your engagement are kept in QuickBooks Online, our accounting system, provided by Intuit. Those records may include your name, your business, billing contact details, invoice amounts, and payment status. Headquarters may keep a reference to an invoice, such as its number and status.

Payment methods are set out in your engagement agreement. Online card payment through the website, Headquarters, or the Customer Portal is not currently offered; if it is introduced, this policy will be updated to name the payment provider and describe what it receives.

We use outside service providers to run the website and our business systems. They process information on our behalf to provide their services:

• Vercel hosts the website, Headquarters, and the Customer Portal and processes technical request information.
• Supabase hosts the databases that store inquiries, Contact page messages, and customer records, stores Customer Portal files, and provides sign-in for Headquarters and the Customer Portal.
• Resend delivers the internal notice that a new Free Business Workflow Check request has arrived. The notice carries no details from your request.
• Intuit (QuickBooks Online) holds accounting and invoice records for clients.
• Our business email provider carries the emails we exchange with you.

These providers are based in the United States. The database that stores inquiries and customer records is located in the United States, as is Customer Portal file storage; the database that stores Contact page messages is located in Canada.

We may also share information with professional advisers, such as accountants or attorneys, who are bound to keep it confidential; where required by law or legal process; to protect the rights, safety, or security of Huerta Group, our clients, or others; or as part of a merger, sale, or other transfer of the business.

We do not sell personal information, and we do not share it for targeted advertising.

Inquiry and customer records are not deleted automatically. We keep them for as long as they are needed for the purposes described in this policy, as a record of our business relationships, and as required for accounting, tax, legal, and contractual purposes.

Customer Portal files, including documents later withdrawn, and the portal’s activity record are kept as part of the customer record and are not deleted automatically. Withdrawing a document removes it from the portal, not from our records.

Backup copies, including encrypted backups, may keep information for a period after it has been removed from our active systems.

We use reasonable safeguards suited to a business of our size. The website is served only over encrypted connections. Headquarters requires multi-factor authentication, access to stored records is limited to authorized users, and internal email notices carry no details from your request. In the Customer Portal, files are kept in private storage, every page and file request is checked against the account’s current access, and uploads are limited by type, size, and number.

No website, email, or storage system is completely secure, and we cannot guarantee the security of information sent to us over the internet. This is one reason we ask you not to send sensitive information through the website forms.

You can ask us to tell you what information we hold about you, to correct it, or to delete it. You can also ask us not to contact you again about a request. To make a request, email info@huertagroupllc.com from the address you used with us, or explain how we can confirm that the request comes from you.

We will respond within a reasonable time and as required by the law that applies to you. We may keep some information where we need it to meet legal, accounting, tax, or contractual obligations, to protect against fraud or abuse, to resolve disputes, or where it must be preserved for a legal matter. Deleted information may remain in backups for a limited period before those backups are replaced.

Depending on where you live, you may have additional privacy rights under applicable law. We will honor those rights as that law requires.

The website is intended for businesses and adults. It is not directed to children, and we do not knowingly collect information from children under 13. If you believe a child has sent us information, please contact us and we will delete it.

We will update this policy when our practices change, including before any new feature that collects information becomes available. The current version, with its effective date, is always posted on this page.

Huerta Group LLC
Privacy requests and questions: info@huertagroupllc.com