1. Scope
This Privacy Notice applies to the OwnFramework public website at ownframework.com, including the Spanish-language section, and to the workflow-review form. Separately contracted client work is governed by the applicable written agreement, data-handling plan, and engagement documentation, not by this Notice.
2. Information visitors provide
The workflow-review form is intentionally data-light. The form collects the categories below, and nothing else. Free-text fields are reviewed manually; they are not a secure document exchange.
- Your name.
- Your email address (used only as a reply route).
- Your business or project type.
- Optional business-stage information.
- Workflow categories you select.
- Tools involved in the workflow.
- Pain points or signals you select.
- What you would like to improve.
- Anything you decide should never be automated.
- Short free-text descriptions of the workflow, the pain, and any desired outcome.
- A consent acknowledgement that you have read the Terms of Use and the Privacy Notice.
- Anything you choose to send by email to [email protected].
Do not submit passwords, API keys, OAuth tokens, payment or banking information, Social Security numbers, payroll, tax, legal, or medical documents, customer or vendor lists, raw production exports, raw email archives, or any other sensitive material through any form or email on this site. See Section 10.
3. Technical and security information
When you load a page on this site or submit the form, the website and its supporting services automatically process:
- your IP address;
- your browser and User-Agent string;
- the time of the request;
- the requested URL and response status;
- security and rate-limit signals;
- short request identifiers used for audit and correlation;
- Cloudflare Turnstile challenge and verification data, as described in Section 4.
These technical records exist because every public website produces them. They are used to operate the site, protect it from abuse, and keep an auditable security trail.
4. Cloudflare and Turnstile
The workflow-review form is protected by Cloudflare Turnstile. Turnstile helps distinguish human visitors from automated abuse. Cloudflare processes technical signals including your IP address, TLS fingerprint, User-Agent, and the sitekey associated with this site. Cloudflare uses these signals to detect and block bots and to improve its bot-detection capabilities. Cloudflare is not used on this site for advertising or marketing profiling.
For Cloudflare's full privacy practices for Turnstile, see Cloudflare’s Turnstile Privacy Notice.
5. How information is used
OwnFramework uses the information described in Sections 2 and 3 only for the purposes below:
- review and respond to workflow-review requests;
- decide whether a discovery conversation is appropriate;
- operate and secure the public website;
- prevent fraud, abuse, and automated submissions;
- diagnose problems with the site or the intake endpoint;
- maintain audit and security records;
- comply with legal obligations;
- protect OwnFramework, visitors, and third parties.
OwnFramework does not use workflow-review submissions to populate a CRM or marketing list, does not send automated marketing messages, and does not train third-party AI models on submissions.
6. How information is disclosed
OwnFramework does not sell personal information, and does not share personal information for cross-context behavioral advertising. OwnFramework may disclose information to the following categories of recipients, only as needed:
- infrastructure, hosting, and security providers used to operate the site (including Cloudflare for Turnstile);
- email service providers used to reply to visitor requests;
- professional advisers, where reasonably necessary;
- authorities or parties where required by law, or where reasonably necessary to protect legal rights;
- a successor in a legitimate business transaction, subject to applicable safeguards.
Workflow-review submissions are not placed into marketing lists, and are not shared with third parties for advertising.
7. Cookies and local browser storage
The OwnFramework public website does not set analytics or advertising cookies, and the OwnFramework site scripts do not read or write localStorage or sessionStorage. Cloudflare Turnstile may place short-lived tokens as part of its challenge flow; see Section 4 for the link to Cloudflare's privacy notice.
8. Retention
OwnFramework retains information only as long as reasonably necessary for the purposes described in Section 5, including reviewing and responding to requests, maintaining security and audit evidence, resolving disputes, and complying with legal obligations. Retention varies by record type. Internal thresholds (such as the duration of sanitized queue packets, the suppression ledger, and operational reports) are documented in the OwnFramework operator runbook and are not published here because they are operational rather than visitor-facing.
9. Security
OwnFramework uses administrative, technical, and organizational safeguards appropriate to the information handled, including limited access to operator-only systems, encrypted transport, input validation at the intake endpoint, rate limiting, bot protection via Turnstile, sanitized logging, backups, and incident-response procedures maintained by the operator.
No internet transmission or storage method is guaranteed completely secure. OwnFramework cannot guarantee absolute security.
10. Data minimization and prohibited submissions
The public form is not a secure client-document exchange channel. If prohibited or sensitive material is submitted, OwnFramework may reject, quarantine, restrict access to, or delete it as appropriate, and may not always be able to inform the sender before action is taken. Do not rely on the public form as a secure channel for sensitive information.
11. Visitor choices and requests
You can ask OwnFramework to:
- provide access to the personal information we hold about you;
- correct inaccurate information;
- delete information, where applicable law allows;
- restrict further contact.
Send requests to [email protected]. OwnFramework may need to verify your identity before acting on a request. Requests may be limited by applicable law, security, recordkeeping, or other legal obligations.
12. Children’s privacy
The website is intended for business users and adults. It is not directed to children under 13, and OwnFramework does not knowingly collect personal information from children under 13 through the workflow-review form. If you believe information from a child under 13 has been submitted, contact [email protected] and OwnFramework will work to remove it.
13. External links
This site may link to third-party sites or services for the visitor's convenience. Those third-party sites have their own privacy practices, and OwnFramework is not responsible for their independent operation.
14. International visitors
OwnFramework is based in the United States, and the website is operated from the United States. If you visit the site from outside the United States, you understand that your information will be processed in the United States. OwnFramework does not claim to maintain a GDPR representative, EU-based transfer mechanism, or any specific international compliance framework that has not been implemented.
15. Security incidents
OwnFramework maintains procedures to assess and respond to security incidents. Where required by applicable law, OwnFramework will provide notice to affected visitors and to the appropriate authorities. The legal trigger and timing of any notice depend on the type of incident and the visitor's jurisdiction.
16. Changes to this Notice
OwnFramework may update this Notice. Updated versions will be posted on this page with a revised "Last updated" date. Material changes apply prospectively from the posted date unless applicable law requires otherwise.
17. Contact
Questions about this Privacy Notice or about how OwnFramework handles information can be sent to:
OwnFramework LLC
4014 Medina Road #1122
Akron, OH 44333, United States
[email protected]