Draft

Privacy

Last updated: October 10, 2026

This page describes what this website actually collects today. Simmons Security Solutions runs S3 Media Team from Houston, Mississippi.

Questions: email sales@s3mediateam.com. S3 Media Team works from Houston, Mississippi, and serves Chickasaw, Calhoun, and Monroe counties. This draft does not list a street address.

Quote requests

The quote form on the contact page, the about page, and the service pages asks for your name, email, your town, the kind of project, and any details you type. Those fields are saved in the site database in a table named website leads. A hidden field is there to catch automated spam. If that hidden field is filled in, the submission is dropped and is not saved.

Saving a quote also sends an email to sales@s3mediateam.com so Greg can reply. That email includes the details you typed. The quote form does not send you an automatic confirmation email.

The server reads the connection address (Cloudflare's connecting IP, or an X-Forwarded-For or X-Real-IP header) only to count quote submissions. The counter allows 5 submissions in a 10-minute window and lives in the server's memory for that window. The quote save does not write that address into the website leads table.

Compass check-up

The free Compass check-up on /compass asks for the organization name, website address, city and state, organization type, a goal, a pain point, your name, an optional role, and your email address. The site then:

• Fetches the public website address you entered and records basic checks such as speed, HTTPS, robots.txt, and sitemap.
• Looks up a public Google listing for the organization name and city you entered, using a Google Maps connection through Lovable. That lookup can include rating, review count, review text used to summarize sentiment, phone, and address.
• Sends the public website address to WordPress.com mShots (s.wordpress.com) to capture a screenshot for the report.
• Saves the checkup, scores, and contact details in the site database.

A new checkup is saved as approved. The report page at /report/… shows that checkup to anyone who has the link. Signing in is not required. An administrator can later mark a checkup rejected, and the public page then stops loading it. Administrator notes on a checkup are stored separately and are not part of the fields the public report loads.

The site emails that address a link to the report and sends a copy to sales@s3mediateam.com. It also emails sales@s3mediateam.com when the checkup is submitted. Those messages go out through Lovable's email service, from notify.s3mediateam.com.

The report page includes a form to request a free Compass review by email: your name, email, and an optional message. That request is saved with the checkup and is only accepted while the checkup is approved. S3 replies by email, usually the same business day.

Website onboarding and payments

The website onboarding form collects the organization name, contact name, optional role, email address, chosen plan, domain status, optional domain name and registrar, goals, pages, a description, a primary action you want visitors to take, brand colors, a media link, and whether you want a logo, stock photos, or default colors. You can also upload a logo and photos. Uploads go to a private storage bucket named onboarding-uploads on Lovable Cloud (Supabase), after the server checks the file type and size and issues a short-lived upload link.

Payment uses Stripe Checkout embedded on the onboarding page. The charge is a subscription with the setup price and the monthly price for the plan you selected. Card numbers are entered in Stripe's form. This site's database stores the Stripe checkout session id, the subscription id when Stripe provides one, the amount, the payment status, and the time payment was recorded. It does not store card numbers.

If onboarding is saved and payment is not recorded, the site can email sales@s3mediateam.com a reminder that includes the organization, contact name, role, email, and plan from that form.

Accounts and service requests

The sign-in page can create an account with an email address and a password, or continue with Google. Account records are kept by Lovable Cloud authentication (Supabase Auth). A signed-in customer can save a service request with a contact name, a service type, and optional organization, town, and details. The request is stored with that account's user id.

Analytics, fonts, and hosting

When a Google Analytics measurement id is configured, choosing OK loads Google's gtag script from googletagmanager.com. That script sets a random-ID cookie such as _ga and sends page views to Google. Choosing No thanks does not load the script. No thanks also stops analytics and clears analytics cookies already in this browser (_ga, _ga_*, _gid, and _gat). The choice is saved in this browser and can be changed later from Cookie settings in the footer.

Barlow and Bebas Neue are stored on this site and loaded from here. The browser does not request those font files from Google.

The site is built to run as a Cloudflare worker through Lovable. Form data, checkups, onboarding records, bookings, and service requests are stored in Lovable Cloud (Supabase). Files from onboarding are stored in that same Supabase project.

Hosting and infrastructure providers keep standard server logs for a limited time under their own settings.

Who can see it

Quote alerts, Compass alerts, report-ready copies, and unpaid-onboarding reminders are emailed to sales@s3mediateam.com. Stripe, Google, WordPress.com (for screenshots), Lovable (email, hosting, database, and storage), and Cloudflare process the pieces described above because the site calls them.

S3 can export saved quote, onboarding, Compass, and service-request rows through a private endpoint that requires a secret key.

Only people authorized by the owner of S3 Media Team can access customer records.

S3 does not sell personal information.

How long it is kept

Quote form requests, Compass check-up requests, and other inquiries that did not become a customer are kept up to 2 years, then deleted. Records for paying customers (onboarding, bookings, invoices, payment records, and service requests) are kept 7 years for tax and accounting, then deleted. Stripe keeps its own payment records under its own policies. Hosting and infrastructure providers keep standard server logs for a limited time under their own settings.

Customers can email sales@s3mediateam.com to ask for a copy or deletion of their information. S3 responds within 30 days.

Minimum age

Services are for businesses, churches, schools and people 18 or older. They are not directed at children under 13, and we don't knowingly collect information from children under 13.