Security & Privacy

What data we collect

Through the Refract Films website we may collect:

• Contact form submissions — name, email, phone, project details, and any message you choose to send.
• Google sign-in profile — if you sign in with Google, we receive your name, email address, profile photo, and a unique Google user ID. This data is stored only in your browser's local storage; it is not sent to our servers.
• Booking details — if you book a consultation, our scheduling partner (AscendSyncPoint) collects the details required to schedule and confirm your meeting.
• Analytics — anonymous page views, referring URL, device and browser type, and approximate location are captured via Google Tag Manager / Google Analytics and our internal analytics. We do not link analytics to your identity unless you have signed in.

How we store and protect it

• Encryption in transit. All traffic to refractfilms.com and rollisfontenot.com is served over HTTPS/TLS.
• Encryption at rest. Our database is hosted on Neon/PostgreSQL with provider-managed encryption at rest.
• Credential handling. API keys, database credentials, and OAuth client secrets are stored as platform-managed environment variables. They are never committed to source control or exposed to browsers. Where applicable, only the public client identifier (e.g., the Google OAuth Client ID) is exposed to the frontend.
• Sign-in flow. Google sign-in is handled entirely in your browser using Google Identity Services. Refract Films does not receive or store your Google password.
• Backups. Database backups are managed by our hosting provider with point-in-time recovery.

Who can access your data

• Internal access is limited to Rollis Fontenot III and a small set of contractors working directly on Refract Films engagements, on a least-privilege basis.
• Admin and analytics dashboards on this site are excluded from search-engine indexing via robots.txt and are not advertised through public navigation. Formal authentication on these internal surfaces is being hardened (see “Open items” below); in the meantime they are obscured by URL only.
• We do not sell, rent, or trade your personal information to third parties.

Integrations and vendors

We rely on a small number of third-party services to operate the site. Each one is bound by its own privacy policy:

• Neon / PostgreSQL — database hosting.
• Replit — application hosting and deployment.
• Google Identity Services — optional sign-in.
• Google Tag Manager & Google Analytics — anonymous traffic analytics.
• YouTube Data API — embedding our public channel content.
• AscendSyncPoint — booking and scheduling widget.
• OpenPhone — business phone and SMS notifications.

Your rights

You can ask us to:

• Access the personal information we hold about you.
• Correct any information that is inaccurate.
• Delete your information, subject to legal record-keeping requirements.
• Withdraw consent for analytics by using a browser-level Do-Not-Track or ad-blocker, and sign out of Google to clear the local sign-in record at any time.

We respond to verified requests within 30 days.

Open items we're actively improving

• Adding server-side authentication and role-based access controls to internal admin and analytics surfaces (URL-only obscurity today).
• Documenting a formal backup-restore and incident-response runbook.
• Publishing a versioned sub-processor list as vendors change.

We list these openly because honest disclosure is more useful than a polished claim.

Data retention

Contact and inquiry records are retained for as long as we have an active or prospective client relationship and for a reasonable period afterward for tax, accounting, and dispute-resolution purposes. Analytics data is aggregated and retained according to provider defaults.

Children

The Refract Films website is intended for a business audience and is not directed to children under 13. We do not knowingly collect data from children.

Changes to this page

We may update this page from time to time. The “Last updated” date at the top reflects the most recent revision. Material changes will be highlighted at the top of the page.