What we hold, who touches it, and how to make it go away.

What the form collects

Full name, work email, mobile phone, company, annual revenue band, company website, and the decision you want scored. Consent is recorded with the submission. Nothing else is requested and no field is inferred.

What the site does not collect

No advertising or tracking cookies, no cross site identifiers, no session recording, no fingerprinting, and no third party analytics tag. Conversion counting stores anonymous totals only: that a form was started, failed validation, failed delivery, or completed. No visitor identifier is attached to those rows.

What is stored server side about delivery

A delivery log holds the timestamp, outcome, response code, duration, and error class of each handoff attempt so failures are visible. It holds no applicant details, and the destination host is masked in any view that is not authorized.

North Star Intel LLC is the controller. The following categories of service provider process data on our behalf under their own terms. This list is kept current and is the list a buyer should review before submitting anything.

• Managed application and database hosting

  Stores application records and delivery logs. United States region.

• Site hosting and content delivery

  Serves the site and its server routes over HTTPS.

• Customer relationship platform

  Receives an application when an automation destination is configured, so the reading can be scheduled and tracked.

• Email

  Carries correspondence about your application.

Applicant data is never sold, never rented, and never used to train a public model. Automated phone contact happens only with your separate, optional authorization.

Applications that do not become engagements are deleted on request, and otherwise are reviewed and cleared once they are no longer relevant to the conversation they started. Engagement records are retained for the life of the agreement and the period required afterwards for tax and legal purposes. Delivery logs, which contain no applicant details, are retained as an operational record of whether handoffs succeeded.

• ·Ask what is held about you and receive a copy.
• ·Correct anything inaccurate before the intake session.
• ·Have the application deleted entirely, including the delivery log reference.
• ·Withdraw consent for contact at any time, which ends the application.

Send any of these to cody@northstarintel.ai. Requests are handled by Cody Johnson directly, not a queue.

Traffic is served over HTTPS. Application records are held in a managed database with row level access rules that deny all browser access, so records are reachable only by trusted server code. Automation credentials and access tokens are stored as server side secrets and are never exposed to the browser, returned by an API, or written into logs. Operational views that show delivery history are token gated and redact the destination host for anyone without that token.

We do not currently hold SOC 2, ISO 27001, HIPAA or PCI attestation, and we do not claim one. If your review requires a specific control, ask and you will get a direct answer about whether it exists today.

To report a security concern, email cody@northstarintel.ai with the detail and how to reproduce it. Reports made in good faith will not be pursued.

This site targets WCAG 2.2 level AA. Every interactive element is reachable by keyboard with a visible focus indicator, form fields carry real labels and error messages tied to the field, and status changes are announced politely rather than continuously.

All motion respects the reduced motion system setting, and a visible motion toggle lets anyone freeze the constellation and star animations regardless of that setting. A text size control is available for the whole page.

If any part of this site is difficult to use with your assistive technology, email us and we will fix it and give you the information another way in the meantime.