Privacy Policy

Joey Childs Media is a one-person studio in San Jose, California, run by Joey Childs. This policy covers www.joeychildsmedia.com and the JC Media Portal, the signed-in area where clients see their reporting. There is no other company behind it and no shared customer database.

Page views are counted with Vercel Web Analytics, which measures traffic in aggregate without cookies and without following you to other sites. It tells me that a page was viewed, not who viewed it.

If you send the contact form, what you type in it reaches me as an email so I can reply. It is not added to a mailing list and it is not sold or shared.

Portal accounts are created by me for clients I already work with; there is no public sign-up. An account holds your name, your email address, and a password that is hashed by Supabase Auth — I never see it.

Signed in, the portal stores:

• Files you upload, in a private bucket only you and I can read
• Deliverables I share back to you
• Feedback and revision notes you leave on a site review
• Invoice records — period, amount, and status. Card and bank details are never entered into or stored by the portal
• Reporting pulled from the Google accounts you connect, covered below

If you are a client and you connect your Google account, the portal asks for three read-oriented permissions, each for one purpose:

• Google Analytics (read only) — to show the sessions, users, and traffic sources on your dashboard
• Search Console (read only) — to show the search queries, clicks, impressions, and rankings your site earns
• Google Business Profile — to read your profile so local performance appears alongside the rest, and to make a change to it when you have asked me to

That data is used for one thing: producing the reporting you see in your own portal. It is never sold, never used for advertising, never used to train AI or machine-learning models, and never shown to another client.

JC Media's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The access and refresh tokens Google issues are held in a Postgres database at Supabase, in a table whose row-level security policy admits only the operator account. Metric snapshots used to draw your charts are stored the same way and are readable by your account and mine.

You can disconnect at any time from your Google account permissions page, which immediately revokes the tokens. Email me and I will delete the stored connection and the snapshots that came with it.

Three vendors run the infrastructure, and none of them are given your data for their own purposes:

• Vercel — hosts the site and the portal, and provides the aggregate page-view counts
• Supabase — the database, sign-in, and private file storage
• Google — the source of the analytics, search, and business-profile data you connect

Nothing is sold, and nothing is handed to advertisers or data brokers. The only other case where information leaves is a legal demand I am required to answer.

Portal data lives as long as the account does. When an engagement ends, ask me to close the account and I will delete the account, the uploads, the Google connection, and the stored reporting. Invoice records are kept as long as tax and accounting rules require.

Emails you send stay in my mailbox unless you ask for them to be deleted.

Ask and I will tell you exactly what is stored about you, correct it, or delete it. California residents have those rights under the CCPA; I extend the same to everyone, because with a client list this size there is no reason not to.

This site is not directed at children and no account is knowingly created for anyone under 13.

The site and portal are served over HTTPS. Portal data is separated by row-level security policies in the database, so one client's account cannot read another's, and uploaded files sit in private buckets that require a signed URL. No system is perfect; if something looks wrong, tell me and I will act on it the same day.

If this policy changes, the date at the top changes with it. A change that affects how Google account data is used will be emailed to affected clients rather than quietly published.

Questions, corrections, or a deletion request — Joey Childs, Joey Childs Media:

• joey@joeychildsmedia.com
• (408) 687-5490
• San Jose, CA

More about the signed-in area is on the JC Media Portal page.