Privacy Policy
1. Who we are
CherryPicked Solutions LLC (“we”, “us”) is a limited liability company registered in the State of Georgia, USA, with its office in Atlanta, Georgia 30350. We operate cherrypickedsolutions.com and cherrypicked.io (the “Site”). We are the controller of the personal data described here. Privacy contact: miteshmodi@cherrypicked.io.
2. What we collect, why, and on what legal basis
| Data | When | Purpose | Legal basis (GDPR/UK GDPR) |
|---|---|---|---|
| Name, email, phone (optional), company (optional), project details, NDA preference, estimate reference, optional specification file | You submit the project inquiry form | Reply to your request, scope and quote work, keep a record of the conversation | Steps at your request before a contract (Art. 6(1)(b)); our legitimate interest in running our business (Art. 6(1)(f)) |
| Scope selections, price range, optional name/email/notes | You lock or save a quote in the estimator | Give you a reference code you can reopen; follow up if you ask | Art. 6(1)(b) / 6(1)(f) |
| Pseudonymous IP hash, request type, outcome, correlation ID (we do not store your raw IP address in our database) | Every API request | Security audit trail, abuse and fraud prevention, rate limiting | Legitimate interest in securing the Site (Art. 6(1)(f)) |
| Technical request data (IP address, user agent, URL) in hosting-provider logs | Every page request | Delivering the Site, security, troubleshooting | Legitimate interest (Art. 6(1)(f)) |
| Your cookie/analytics choice (stored in your browser’s local storage) | When you use the cookie banner | Remember your choice | Strictly necessary to honour your choice |
| Random session ID, page route, performance metrics (first-party telemetry) | Only after you accept analytics | Understand site performance and which pages are useful | Consent (Art. 6(1)(a)) |
| Google Analytics 4 and Google AdSense identifiers and usage data | Only after you accept analytics & ads and only if we have enabled those services (they are currently not enabled) | Measure traffic; show ads | Consent (Art. 6(1)(a)) |
| Contract, invoice and payment records | If we work together | Perform the contract, bookkeeping, taxes | Art. 6(1)(b), legal obligation (Art. 6(1)(c)) |
We do not use automated decision-making or profiling that produces legal or similarly significant effects. We do not knowingly collect special-category data (such as health data) and the Site is not designed to receive protected health information. Please do not send us payment card numbers, Social Security numbers, passwords, or health records. Our forms automatically reject unmasked card and Social Security numbers.
3. Who we share data with (processors and service providers)
- Render Services, Inc.: application hosting and PostgreSQL database (United States).
- Cloudflare, Inc.: network edge / CDN and DDoS protection in front of our hosting.
- Resend (Resend, Inc.): active email-delivery processor (United States). When you submit the contact form, Resend receives the contents of your inquiry, your name and email address (and company or phone number if you provide them), and the reference code, solely to email us a notification of your inquiry. Notifications are sent from notifications@send.cherrypickedsolutions.com to our business mailbox. Resend processes this data on our behalf and may retain delivery logs per its own policies.
- Stripe, Inc.: card payments, only if you choose to pay an invoice through Stripe. Stripe collects your card details directly on its own pages; we never receive or store card numbers. Stripe acts as an independent controller for payment processing and fraud prevention.
- Google LLC (Google Analytics, Google AdSense): only after consent and only if enabled. Google may act as an independent controller for advertising.
- Our email and business-tools providers: to receive and answer the messages you send us.
- Professional advisers (lawyers, accountants) and authorities where required by law.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising unless you accept the advertising option in the cookie banner while ads are enabled.
4. International transfers
We are based in the United States and our providers process data in the United States (and possibly other countries). If you are in the EEA, UK, or Switzerland, your data is therefore transferred to the US. Where required, we rely on the safeguards offered by our providers, such as Standard Contractual Clauses and, where the provider is certified, the EU–US Data Privacy Framework. You can request information about the safeguards by emailing us.
5. How long we keep data
| Data | Retention |
|---|---|
| Project inquiries (including any uploaded file) | 24 months after submission, then automatically deleted. If we enter a contract, the contract and invoice records are kept as long as the law requires (generally up to 7 years for tax and accounting records). |
| Saved quotes / estimates | 24 months, then automatically deleted |
| Security audit logs (pseudonymous) | 12 months, then automatically deleted |
| Rate-limit counters | Minutes to hours (deleted when the window expires) |
| Hosting-provider access logs | Per the provider’s own short retention window |
| Your cookie choice (local storage) | Until you clear it; we ask again after 12 months |
You can ask us to delete your data sooner at any time (see section 7).
6. How we protect data
HTTPS with HSTS, a strict Content Security Policy and other browser security headers, encrypted hosting and database, rate limiting, input validation, pseudonymised IP logging, least-privilege access, and a documented incident response plan. No method of transmission or storage is 100% secure. See also our security and vulnerability disclosure page.
7. Your rights
If you are in the EEA, UK, or Switzerland you have the right to access your data, have it corrected or erased, restrict or object to processing (including processing based on legitimate interests), receive your data in a portable format, and withdraw consent at any time (withdrawal does not affect earlier processing). You may also lodge a complaint with your local data protection authority.
If you are a California resident (CCPA/CPRA) or live in another US state with a privacy law you may have the right to know what personal information we collect and how it is used and disclosed, to request deletion, to correct inaccurate information, to opt out of the sale or sharing of personal information, to limit use of sensitive personal information, and not to be discriminated against for exercising these rights. In the past 12 months we collected identifiers (name, email, phone, IP-derived hash), commercial information you give us when you request a quote, and (only with consent) internet-activity data. We did not sell personal information and did not collect sensitive personal information. We honour the Global Privacy Control browser signal as a request to opt out of analytics and advertising.
How to make a request: email miteshmodi@cherrypicked.io with the subject “Privacy request” and the email address you used on the Site (plus your reference code if you have one). We may need to verify your identity before acting, for example by replying to the email address on record. We respond within 30 days (45 days for California requests, extendable where permitted). An authorized agent may submit a request on your behalf with your written permission. There is no charge unless requests are manifestly excessive.
8. Children
The Site is intended for businesses and is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has given us personal data, email us and we will delete it.
9. Cookies
We set no cookies of our own. See the Cookie Policy for details of local storage and the optional third-party cookies that load only after your consent.
10. Changes
We will post updates on this page and change the “Last updated” date. If a change is material we will make that clear on the Site.
11. Contact
CherryPicked Solutions LLC, Atlanta, Georgia, USA · miteshmodi@cherrypicked.io