Privacy

Kerrovia · Daniel Casarez, sole proprietor · Last updated 17 September 2026

How to read this

This page explains what information kerrovia.com collects, why, where it goes, and how to have it deleted. It describes what the site and the services behind it actually do; where something is switched off, it says so rather than reserving the right to switch it on quietly.

Questions, or a request to see or delete what I hold, go to daniel@kerrovia.com.

Everything needed to draw the page is built into the page itself — the fonts, the images, the styling. Nothing is fetched from another company to render it.

One measurement script does load, from Cloudflare: see § 02.

Cloudflare hosts the site. Like any web host, it processes your IP address and basic request details — browser type, the page asked for — to deliver the page and protect it from abuse. See Cloudflare’s privacy policy.

There are two, and they work differently. Only one of them asks you.

Cloudflare Web Analytics — always on, no cookies

A small script from Cloudflare loads on every visit and counts page views and measures how quickly the page loaded. It sets no cookies and does not identify you, which is why it is not behind the consent banner — there is nothing stored on your device to consent to. It tells me how many people read a page, not who they are. See Cloudflare’s privacy policy.

Microsoft Clarity — only if you accept

When you first visit, a banner asks whether I may use Microsoft Clarity analytics cookies to see how the page is used. Nothing loads unless you click Accept. If you decline, Clarity never runs.

If you accept:

• Clarity records how the page is used — scrolling, clicks, where people get stuck — so I can improve it.
• It is set to mask all page text in its recordings, and everything you type into the forms is masked. I cannot see your message in a recording.
• The page tells Clarity that analytics storage is allowed and advertising storage is not.
• Clarity sets cookies. Two are set on this site: _clck and _clsk. Microsoft publishes the full list, including the ones it sets on its own domains, in its Clarity cookie reference. See also Microsoft’s privacy statement.

Changing your mind: use Cookie settings in the footer at any time. If you decline after accepting, the page tells Clarity that consent is withdrawn and reloads without it.

These are stored in your own browser and are not sent to me. The Cloudflare measurement script in § 02 adds nothing to this list — that is what “cookieless” means:

pa-consent

Remembers your Accept or Decline, so the banner does not ask again. Set when you click either button.

pa-lang

Remembers English or Spanish. Set only if you use the language switch — a ?lang= link applies to that visit alone and stores nothing.

The contact form asks for your name, email and a short description of what you are doing by hand. It has no phone field, on purpose: I do not need your number to answer you.

Along with those, the page sends a few details that tell me how you found it: the page address, the referring site, the campaign tag in the link if there is one, your language, and which version of the page you saw.

As the form itself says: “Goes straight to my inbox — your message stays on this page until you press the button.” If you accepted analytics, Clarity’s recordings mask everything you type.

Your IP address is not stored with your message. It is used for one thing: limiting how often one address can submit the form, which stops spam. That happens at Cloudflare’s edge, and the address is not passed on to anywhere your message is stored.

Where your message goes

• My inbox, a Google Workspace mailbox.
• My own lead storage: two databases I control, used only to keep track of enquiries. One is n8n Cloud, the automation service that handles the form, whose workspaces run in the European Union. The other is Supabase, hosted in the United States.
• An automatic reply to you, confirming your message arrived. It may be skipped if too many messages arrive in one hour.

The automation keeps no record of the run. The workflow that handles your message saves no copy of each run; only the stored message above exists.

If the form cannot send, your own email app opens with your message ready. Then it is simply an email to me.

If your message is flagged as automated

The form carries a hidden field that no real visitor ever sees. Automated spam tends to fill it in; a person does not. A submission that arrives with it filled is answered normally but is not treated as an enquiry.

Those submissions are kept, in a separate table, rather than discarded unseen — so that if a real person is ever flagged by mistake, their message still exists and can be found. That is not hypothetical: a browser’s autofill filled that hidden field for some visitors in September 2026, and because nothing was stored at the time, there is no way to know who was affected. If you wrote to me and never heard back, email me directly and I will look.

The number published on this site, 956-394-0911, is for support and for people who would rather call than write. It is voicemail-first: there is no window when it is answered live. I send no marketing texts, and I do not call or text you unless you asked me to.

Calls are not recorded. The line runs on Grasshopper’s True Solo plan, where call recording is not available at all.

Voicemail is different. A message you leave is itself a recording, and I keep it and listen to it. Whether to leave one is your choice.

What I keep from a call or text: your number, any voicemail, and my own notes about what we discussed. There is no recording of the call itself.

How long: 30 days. That is Grasshopper’s own retention rather than a period I chose. Anything I copy into my own notes follows § 08.

• Payments are handled by Stripe, which processes your card or bank details; I never see your full card number. Stripe keeps a record of purchases and invoices — name, email, billing details, amounts.
• Your workflows run on your own instance, not mine, so the data they handle stays in your systems. What I hold is the access needed to build and maintain them.
• Your business data during an engagement — systems, credentials, and the data your workflows handle — is covered by the written agreement for that engagement.

• I do not sell or rent your information.
• I do not use advertising cookies. The page explicitly tells Clarity that advertising storage is denied, and the Cloudflare measurement script sets no cookies at all.
• I do not add you to a mailing list because you wrote to me.
• I do not call or text you unless you asked me to.

Voicemail

30 days, deleted by Grasshopper (§ 05). Calls themselves are not recorded.

Enquiries

Written enquiries that did not become work: 24 months, then deleted.

Flagged as automated

The same 24 months, then deleted — deliberately the same rule as an enquiry, because the reason for keeping them is that one of them might be an enquiry.

Client records

Invoices and engagement correspondence: 7 years.

• See or delete what I hold about you: email daniel@kerrovia.com. I reply within two business days and delete your enquiry from my inbox and both stores, along with any voicemail. Payment records Stripe must keep by law are the exception.
• Analytics: decline, or change your mind at any time through Cookie settings in the footer.

You do not have to give a reason, and asking does not affect anything else.

This site is for businesses and is not directed at children under 13. I do not knowingly collect their information.

If this policy changes, the date at the top changes with it. Clients on a managed plan are emailed about material changes.

These are the companies that handle any part of your information, and what each one does. Each link goes to that company’s own privacy policy.

Cloudflare

Hosts and serves this site, rate-limits the contact form, and provides the cookieless Web Analytics described in § 02.

Microsoft Clarity

Analytics, only if you accept (§ 02).

n8n Cloud

Runs the automation that handles your enquiry, and stores it. Hosted in the European Union.

Supabase

Second copy of your enquiry, hosted in the United States.

Google Workspace

The inbox your message arrives in, and the automatic reply.

Grasshopper

The phone line, including voicemail. Grasshopper is a GoTo company.

Stripe

Payments and invoices, if you become a client.

Client workflows are not on this list: they run on your own instance, not mine (§ 06).

daniel@kerrovia.com
3326 South Business Highway 281 #1011, Edinburg, Texas 78539-9719