How CFW handles information submitted through the website, public audit app, email, and intake workflows.
Cromwell FutureWorks, also referred to as CFW, provides workflow advisory, audit, and practical systems services. This policy explains how CFW handles information collected through cromwellfutureworks.com, the public workflow audit app at public-audit.vercel.app, email, and related intake workflows.
CFW is designed to collect only the information needed to understand whether there is a fit for a Workflow Opportunity Audit or related advisory conversation.
CFW uses ordinary hosting, security, and form-protection technologies needed to operate the website and request workflows. These may include Vercel request logs, Cloudflare domain, DNS, and Turnstile security signals, browser cookies or local storage needed for application behavior, and similar operational metadata.
CFW does not currently use advertising pixels or sell personal information. If CFW later adds non-essential analytics, advertising, or broader tracking tools, this policy should be updated before those tools are used in production.
CFW operates a standalone public workflow audit app at public-audit.vercel.app. The app uses the details you submit to validate the intake, generate a free directional workflow audit, show temporary job status and result links, secure the service, prevent abuse, and improve product reliability.
The public audit app separates required service processing from optional consent choices. You can choose whether CFW may follow up, keep a CFW internal review copy, store submitted inputs, store generated outputs, or use anonymized analytics. If you do not opt into storage, CFW still may keep minimal operational job status for short-term service delivery, debugging, security, and abuse prevention.
Do not submit confidential, regulated, customer, financial, health, legal, HR, credential, trade secret, or highly sensitive information through the first website request or audit teaser flow.
If a later engagement requires sensitive material, CFW will determine a more appropriate collection, review, and access process before receiving it.
CFW may use trusted service providers to operate the website, public audit app, email, forms, security controls, analytics, lead storage, and report generation. Current or planned providers include Vercel for hosting, Render for the public audit API, Cloudflare for domain/DNS and bot protection, Google Workspace for business email and collaboration, Supabase for secure database storage, OpenAI for AI-assisted report generation, and Resend or a similar provider for transactional email.
These providers process information only as needed to provide their services to CFW, subject to their own terms, security practices, and privacy commitments.
CFW keeps inquiry and lead information only as long as reasonably needed for the business purpose for which it was collected, including responding to requests, managing potential engagements, maintaining business records, and meeting legal or security obligations.
Public audit status and result links are temporary. If you do not opt into input or output storage, CFW limits retained public audit records to minimal operational status needed for short-term service delivery, security, debugging, and abuse prevention. If you opt into follow-up, CFW internal review, input storage, or output storage, CFW may retain the allowed records for the selected retention period or as otherwise reasonably needed for those purposes.
When information is no longer needed, CFW will delete, archive, or de-identify it where practical.
CFW does not sell personal information. CFW may share information with service providers, professional advisors, or authorities when necessary to operate the business, protect rights and security, comply with law, or complete a transaction involving the business.
CFW uses reasonable administrative, technical, and operational safeguards for a small business website and advisory practice. No website, email system, or internet transmission can be guaranteed to be completely secure.
CFW services are intended for businesses and professional users. CFW does not knowingly collect personal information from children.
CFW may update this policy as the website, audit product, providers, or business practices change. The effective date above reflects the latest published version.
