Privacy Policy

Effective October 22, 2026

This policy explains what Sherman Web Design Studio at studio.shermanwebdesign.com (the “Studio”) collects and how it’s used. The Studio is run by Ken Sherman, doing business as Sherman Web Design, in Lakeland, Florida. Contact: ken@shermanwebdesign.com.

Signing in

You sign in with Google or Microsoft. From them we receive only your email address, your name, your profile picture and an account ID. We keep your email, name and account ID to recognize you; we never see your Google or Microsoft password.

What we store

Your account: email, name, sign-in provider ID, the sites you can access and your role on each.
Sites and content: the pages, templates, images and settings of the websites you manage.
Form entries: what visitors submit through forms on our clients’ websites, stored for that site’s owners. Each client decides what their forms collect.
Activity logs: a record of changes made in the Studio (who changed what, and when), for security and support.
Credits: a history of prepaid credits added and used. We do not store card numbers.

AI assistant

When you use the Studio’s chat assistant, your messages and the site content it needs are sent to xAI, our AI provider, to generate responses.

Where it’s hosted

The Studio and client websites run on Cloudflare. Data is stored in Cloudflare’s database, key-value and file storage services (D1, KV and R2).

Cookies

The Studio uses a sign-in session cookie (and a short-lived cookie during sign-in). We don’t use advertising or tracking cookies.

Sharing

We don’t sell your data. We share it only with the providers that run the service (Cloudflare for hosting, xAI for the assistant, and Google or Microsoft for sign-in), or when the law requires it.

When you register a domain through the Studio, the registrant contact details you provide (name, organization, address, email and phone) are shared with our registrar, Name.com, and through it with the domain’s registry and as ICANN requires, to register and maintain the domain. WHOIS privacy is on by default, at no charge, so the public WHOIS record shows Name.com’s privacy service instead of your contact details. Name.com handles that information under its Privacy Policy.

Keeping and deleting data

We keep your data while your account or site is active. Form entries are kept for up to a year by default unless a site owner deletes them sooner. Email ken@shermanwebdesign.com to see, correct or delete your data, and we’ll take care of it.

Domain names are the exception. If you register a domain through the Studio, its domain registration records (including the registrant contact details and your agreement to the registration terms), the related billing records and the domain emails we send you are kept for the registration term plus 7 years, as required by our registrar agreement with Name.com, even if you ask us to delete your account. All other data is deleted as described above. See Domain registration pricing & terms.

Children

The Studio is for businesses and organizations and isn’t meant for children under 13. We don’t knowingly collect their information; if you think we have, contact us and we’ll delete it.

Changes

We may update this policy. We’ll change the effective date above, and for significant changes we’ll let account holders know.

Governing law

This policy is governed by the laws of the State of Florida, USA.