Privacy policy

• We collect what you give us in forms, plus basic visit data from analytics and security tools.
• We do not sell personal information, and we do not set advertising or retargeting cookies.
• Card and bank details are entered with Stripe when online payment is turned on. We do not store full card numbers.
• To see, correct or delete what we hold about you, email [email protected].

Last reviewed 2026-10-16. This page is updated when counsel review completes.

Benchford LLC (organization pending with the Colorado Secretary of State) is based in Lyons, Colorado. We build custom software for businesses on the Front Range, host it and look after it. We run benchford.com (the site) and benchford.app (the client portal). Questions about privacy: [email protected].

This policy covers personal information we collect through the site and the portal, and in dealing with people who inquire about or buy our services. It does not describe how a system we build for you handles your customers' or staff members' information. For that system you decide what is collected and why, and your own privacy notice covers it.

We sell to businesses. The site is not meant for children, and we do not knowingly collect information from anyone under 18.

• Inquiry and contact forms: your name, email, phone if you give it, business name, what you want built and the page you wrote from.
• Portal accounts: your name, work email, business name and role, and account activity.
• Signature records in the portal: typed name, date and time, device and network details, and the document version you signed.
• Project documents you upload or we create for you. They may contain personal information about your staff or customers.
• Payments, when online payment is turned on: billing contact and invoice status. Card and bank details are entered with and held by Stripe. We do not store full card numbers.
• Email we send you: your address and delivery status from our email provider.
• Analytics: pages viewed, referring page, device and browser type, approximate location from your network address, and a random identifier. We use Google Analytics 4.
• Security and delivery logs from our network provider, Cloudflare.

We do not collect precise location or biometric data. Please do not put sensitive personal information into the inquiry form.

We use information to:

• respond to inquiries;
• scope, price, build, host and support projects;
• run and secure the portal;
• invoice and collect;
• keep records for tax, legal and insurance purposes;
• improve the site; and
• protect the site, our clients and ourselves against fraud and abuse.

We do not use the site or portal to profile you. We do not make automated decisions about you that have legal effects.

The portal uses a session cookie to keep you signed in, and our network provider sets security cookies. Google Analytics sets cookies to count visits. We do not set advertising or retargeting cookies. You can block cookies in your browser settings, though the portal needs its session cookie to work.

We do not sell your personal information. We share it with the companies that help us run the site and portal, and as needed:

• Cloudflare: delivery, security and hosting.
• Google: analytics (Google Analytics 4).
• Amazon Web Services: sending email (Amazon SES).
• Stripe: payments, when online payment is turned on.
• Plerity Inc: the software platform and hosting the portal runs on, under a written agreement that limits its use of the data to running the platform.
• Our email provider: receives and sends our business email, including messages you send us.

We may also disclose information when the law or a court requires it. We may do so to protect rights, safety or property, and to our professional advisers, insurers and auditors. If the business is sold or reorganized, we may share it as part of that, and we will tell portal users.

We keep signed agreements, signature records, invoices and tax records for as long as the law requires. We keep other information no longer than we need it for the purposes above. When a portal account ends, you can export your content. Then we delete it from live systems, except for records we must keep. Backup copies age out on our backup schedule.

We use reasonable administrative, technical and physical safeguards, including encrypted connections, access controls and backups. No system is perfectly secure. These are controls we maintain, not an audit or certification. If a breach affects your personal information, we will notify you and the authorities as Colorado and federal law require.

The Colorado Privacy Act (C.R.S. 6-1-1301 and following) applies to a business that does business in Colorado and meets one of two tests. One test is handling the personal data of 100,000 or more Colorado consumers in a year. The other is earning revenue from selling personal data while handling the data of 25,000 or more. Benchford sells to businesses, is new and does not sell personal data, so we do not expect to meet either test. We will reassess each year, and if that changes.

Colorado's data security, data disposal and breach-notification laws apply to us whatever the thresholds. We honor reasonable requests to see, correct or delete personal information, whether or not a particular privacy statute applies. The site and portal are for businesses in the United States.

To ask for access, correction, deletion or a copy of your information, or to ask a question, write to [email protected]. We may ask you to confirm who you are. If we cannot do what you ask, we will say why, and you may ask us to reconsider. You may also contact the Colorado Attorney General's office. We will not treat you worse for asking. Requests about data in a system we built for a client should go to that client, which decides how the data is used.

We may update this policy. We will post the new version with a new date, and tell portal users by email or in the portal if a change is material.