Privacy

Who is responsible for it

Silent Keel is the trading name of Verlox Limited, registered in Hong Kong at Unit 2904-05, 29/F, Universal Trade Centre, 3 Arbuthnot Road, Central, Hong Kong. That company is the data controller for everything on this page, which covers this site and the portal at app.silentkeel.com. Anything you want to ask or change goes to hello@silentkeel.com and reaches the person who runs Silent Keel directly.

The form on this site

What you send through the enquiry form, your name, email address, business, what you need and a budget if you gave one, is stored with the portal's records and emailed to us, so that a reply can go from our inbox to yours. Cloudflare Turnstile checks that the form was sent by a person; it runs on the page and tells Cloudflare only what that check needs. An enquiry is kept for as long as the conversation it started, and deleted on request like anything else here. The rest of this site holds nothing about you.

What the portal holds about you

• Your account. Your name and email address. We create the account when we invite you, from the address you gave us. If you sign in with Google, we also receive the picture on your Google profile and the identifier Google uses for you, and we store the tokens Google issues for the sign-in. We ask Google for nothing beyond your name, email address and picture, and we never read anything in your Google account.
• Your sign-ins. A sign-in code we email you is stored until it expires, ten minutes later. Each session records the network address and browser it was started from, so the portal can keep you signed in and spot abuse of the sign-in endpoints. Sessions expire after seven days. Sign-in attempts are counted per network address for a few minutes to slow down guessing; the count is not stored.
• Your projects. The agreements we propose, the answers and proposals you send back, the messages you and we write, the files you upload, and the deliverables and links we hand over. This is the work itself, and it is kept for as long as we work together.
• Your billing. For every invoice: its amount, its status, and the identifiers Stripe uses for it, the subscription and you. Your card details go to Stripe and never reach us.

What neither of them does

• Nothing is measured. No analytics, no session recording, no advertising pixels, on this site or in the portal. When that changes, this page changes with it, before it takes effect.
• Cookies only for signing in. This site sets none. Signing in to the portal sets __Secure-better-auth.session_token, which is your session and lasts seven days, and a short-lived handshake cookie during Google sign-in. No tracking cookies, on any page, ever.
• Nothing from anyone else's servers, with one exception: the enquiry form loads Cloudflare's Turnstile script, which is the bot check itself. Fonts, scripts and styles otherwise come from our own domains. Stripe's invoice pages open as separate pages when you follow a link to them.

Who else sees it

• Cloudflare runs this site and the portal, holds the portal's database and your files, and runs the bot check on the form.
• Resend delivers every email we send: the enquiry to our own inbox, the invitation, sign-in codes, and notifications that say what changed and link back to the portal. It comes from hello@silentkeel.com, and a reply reaches us.
• Stripe handles invoices, the operations subscription and payments, and holds your card. Stripe learns your name and email address.
• Google, if you sign in with it, learns that you signed in to the portal, under its own privacy policy. A sign-in by emailed code tells Google nothing.

Nothing is sold, shared with advertisers, or used to build a profile of you.

How long we keep it

Your account and project records are kept for as long as you have projects with us, and until you ask otherwise. Invoices and payment records are kept for seven years after the year they belong to, because Hong Kong tax law requires business records to be held that long.

Your data, your call

Write to hello@silentkeel.com and ask for a copy of anything we hold about you, or ask us to delete it. We will do it and confirm when it is done. You do not need to give a reason. The one exception: billing records that tax law requires us to keep stay until that period runs out. Nothing else survives the request. The commercial side is on the terms page.