Privacy Policy

Joey Childs Media is a studio in San Jose, California, founded by Joey Childs. This policy covers www.joeychildsmedia.com and the JC Media Portal, the signed-in area where clients see their reporting. There is no other company behind it and no shared customer database.

Page views are counted with Vercel Web Analytics, which measures traffic in aggregate without cookies and without following you to other sites. It tells us that a page was viewed, not who viewed it.

If you send the contact form, what you type in it reaches us as an email so we can reply. It is not added to a mailing list and it is not sold or shared.

Portal accounts are created by JC Media for clients we already work with; there is no public sign-up. An account holds your name, your email address, and a password that is hashed by Supabase Auth, which we never see.

Signed in, the portal stores:

• Files you upload, in a private bucket only you and JC Media can read
• Deliverables we share back to you
• Feedback and revision notes you leave on a site review
• Invoice records: period, amount, and status. Card and bank details are never entered into or stored by the portal
• Reporting pulled from the Google accounts you connect, covered below

If you are a client and you connect your Google account, the portal asks for three read-oriented permissions, each for one purpose:

• Google Analytics (read only): to show the sessions, users, and traffic sources on your dashboard
• Search Console (read only): to show the search queries, clicks, impressions, and rankings your site earns
• Google Business Profile: to read your profile so local performance appears alongside the rest, and to make a change to it when you have asked us to

That data is used for one thing: producing the reporting you see in your own portal. It is never sold, never used for advertising, never used to train AI or machine-learning models, and never shown to another client.

JC Media's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The access and refresh tokens Google issues are held in a Postgres database at Supabase, in a table whose row-level security policy admits only the operator account. Metric snapshots used to draw your charts are stored the same way and are readable by your account and ours.

You can disconnect at any time from your Google account permissions page, which immediately revokes the tokens. Email us and we will delete the stored connection and the snapshots that came with it.

Three vendors run the infrastructure, and none of them are given your data for their own purposes:

• Vercel: hosts the site and the portal, and provides the aggregate page-view counts
• Supabase: the database, sign-in, and private file storage
• Google: the source of the analytics, search, and business-profile data you connect

Nothing is sold, and nothing is handed to advertisers or data brokers. The only other case where information leaves is a legal demand we are required to answer.

Portal data lives as long as the account does. When an engagement ends, ask us to close the account and we will delete the account, the uploads, the Google connection, and the stored reporting. Invoice records are kept as long as tax and accounting rules require.

Emails you send stay in our mailbox unless you ask for them to be deleted.

Ask and we will tell you exactly what is stored about you, correct it, or delete it. California residents have those rights under the CCPA; we extend the same to everyone, because with a client list this size there is no reason not to.

This site is not directed at children and no account is knowingly created for anyone under 13.

The site and portal are served over HTTPS. Portal data is separated by row-level security policies in the database, so one client's account cannot read another's, and uploaded files sit in private buckets that require a signed URL. No system is perfect; if something looks wrong, tell us and we will act on it the same day.

If this policy changes, the date at the top changes with it. A change that affects how Google account data is used will be emailed to affected clients rather than quietly published.

Questions, corrections, or a deletion request. Joey Childs, Joey Childs Media:

• joey@joeychildsmedia.com
• (408) 687-5490
• San Jose, CA

More about the signed-in area is on the JC Media Portal page.