Legal

Privacy Policy

What NVIL collects when you use nvil.co, why we collect it, who we share it with, and the choices you have. Written in plain English on purpose.

Last updated: September 21, 2026

The short version. We collect what you give us (a contact form, a signature) and what running a website produces (basic analytics). We use it to reply to you, to do the work you hired us for, and to keep the site working. We do not sell it, we do not run ads, and you can ask us to delete it at any time by emailing contact@nvil.co.

Who we are

NVIL (New Vision Interactive Labs) is an independent web development studio in Chicago, Illinois. This policy covers nvil.co and the tools that run on it: the contact form, the free website audit, NVIL Blueprint, the plan finder, NVIL Sign, the client portal, The Lab Arcade, and NVIL Trades. It does not cover websites we build for clients, which have their own policies.

What we collect and why

We only collect information for a reason you can see. Here is each place on the site that collects anything, and what happens to it.

Contact form

When you send a project inquiry we receive your name, email address, phone number if you add one, business name, preferred way to be contacted, project type, and your message. We use it to reply to you and to scope the work. The form is processed by Netlify Forms and delivered to our inbox. If you arrived from the free audit, the plan finder, or Blueprint, the form may be pre-filled with the result you saw, and that becomes part of your message only when you choose to send it.

Free website audit

The audit checks the web address you type in. That address is sent to our server so the check can run, and the results are shown to you. We do not keep a record of the addresses checked or the scores on our servers. Your browser holds the last score briefly so the contact form can mention it, and that copy is deleted once it is used or when you close the tab.

NVIL Blueprint

Blueprint runs in your browser. Your answers and the finished sheet are stored in the page's own web address and, briefly, in your browser, so you can share or return to the link. Nothing is sent to us unless you press "Start this project", which pre-fills the contact form with your sheet's summary and link.

Plan finder

Your answers stay in your browser. If you continue to the contact form, the recommended plan is added to your message.

NVIL Sign

When we send you an agreement to sign electronically, we collect and keep your name, email address, the signature you draw or type, the date and time of each step, and the IP address and browser used for each step. That record is the audit trail that makes the signed agreement verifiable, and we keep it for as long as the agreement matters. Copies of the executed agreement are emailed to you and to us through Resend, our email provider. NVIL Sign pages are private and are not indexed by search engines.

Client portal

If you are a client using the portal, we hold your login email, a hashed password, your business details, the reply settings you choose, and the reviews the portal pulls from your Google Business Profile, which include the reviewer's public name, rating, and text. Draft replies are generated with an AI service (Anthropic) that receives the review and your settings to write the draft. Drafts are never posted anywhere by us; you copy them into Google yourself. Portal data is stored with Supabase. You are responsible for having the right to share your reviews with us under Google's terms.

The Lab Arcade

The arcade games keep scores and settings in your browser only. There are no game accounts and nothing is sent to us.

NVIL Trades

Lesson progress and quiz results are saved in your browser only. We never see them.

Analytics

We use Google Analytics 4 to understand which pages and tools people use. It sets cookies and records pages visited, approximate location derived from your IP address, device and browser type, and events such as which tool you opened. We do not send it your name, email, or anything you type into a form. Google's own privacy policy applies to how Google processes this data. You can opt out with Google's browser add-on or by blocking cookies for nvil.co; the site works either way.

Hosting logs

Netlify, which hosts nvil.co, keeps short-lived server logs that include IP addresses and request details. We use them only to keep the site secure and running.

Cookies and browser storage

Beyond the Google Analytics cookies described above, nvil.co does not set tracking cookies. The site uses your browser's local storage for conveniences that never leave your device: your dark or light theme choice, game scores and saves, NVIL Trades progress, and the temporary hand-offs between the free tools and the contact form. Clearing your browser data removes all of it.

How we use information

  • To reply to you and to scope, quote, and deliver the work you ask for.
  • To run the tools you choose to use, such as signing an agreement or the client portal.
  • To keep the site secure, fix problems, and understand what is useful.
  • To meet legal and accounting obligations.

We do not sell personal information, we do not share it for advertising, and we do not send marketing email unless you have asked for it.

Who we share it with

We share information only with the services that run the site, and only what each one needs:

Netlify
Hosting, the contact form, serverless functions, and storage for NVIL Sign records.
Supabase
Accounts and data for the client portal.
Google
Analytics, the PageSpeed Insights service used by our audit tools, and the Business Profile connection used by the portal.
Anthropic
AI drafting of review replies inside the client portal.
Resend
Transactional email, such as signed agreement copies.

We may also disclose information if the law requires it, to protect our rights or safety, or as part of a sale or merger of the business, in which case this policy would still apply to it.

How long we keep it

Contact form messages are kept while we are talking and for our business records afterwards. Signed agreements and their audit trails are kept for the life of the agreement and as long as the law or our records require. Portal accounts are kept until you ask us to delete them. Analytics data is kept for the retention period set in Google Analytics. Anything that only lives in your browser is under your control.

Security

The whole site is served over HTTPS. Passwords are stored hashed, not in plain text. NVIL Sign records are stored in private storage that only NVIL can reach. No website can promise perfect security, so we keep the amount of information we hold small and delete it when it is no longer needed. If we ever learn of a breach affecting your information, we will tell you and any authorities the law requires.

Your choices and rights

You can ask us at any time to see the personal information we hold about you, correct it, or delete it, and you can ask what we have shared and with whom. Email contact@nvil.co and we will answer within 30 days. We will never treat you differently for asking. Some records, such as a signed agreement, may need to be kept for legal reasons even after a deletion request, and we will tell you if that applies.

If you live in California or another state with its own privacy law, those laws may give you specific rights to know, delete, correct, and opt out of sale or sharing. We do not sell or share personal information as those laws define it, and you can exercise any of those rights through the email above.

Children

nvil.co is a business website and is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has contacted us, email us and we will delete the information.

Visitors outside the United States

NVIL operates from the United States and the services above store data there. If you visit from elsewhere, your information will be transferred to and processed in the United States, where the law may differ from your own. By using the site you accept that. If you are in the European Economic Area or the United Kingdom, you have the rights to access, rectify, erase, restrict, and port your data, and to object to processing; email us to use them.

The site links to client websites, social networks, and other third parties. Their privacy practices are their own and this policy does not cover them.

Changes to this policy

When we change this policy we update the date at the top. If a change is significant, we will say so on the site. Continued use of nvil.co after a change means you accept the updated policy.

Contact

Questions, requests, or concerns about privacy: email contact@nvil.co or call (773) 355-0592. NVIL, New Vision Interactive Labs, Chicago, Illinois.

See also our Terms of Use and Accessibility Statement.