Privacy policy

This page explains what information Winstead Media and 2 Acre Farm ("we", "us") keeps when we send you an invoice, when you pay one, and when you use the client portal — and what we do with it. The short version: we keep only what we need to bill you and keep our books, we never sell it, and your card or bank details never touch our systems.

What we collect

• Contact details you or your organization gave us: name, company, email, phone, and billing address.
• Billing records: invoices, line items, amounts, due dates, payments and refunds, and notes about the work.
• Payment references from our payment processor: the card brand and last four digits, or bank name and last four, plus a reference ID so we can charge a saved method you authorized. We never see or store full card numbers, expiry dates, CVCs, or bank account numbers.
• Basic activity: when an invoice was sent and first viewed, and when you signed in to the portal.

How payments work

Payments are processed by Stripe. When you press Pay, you enter your details on Stripe's secure page, not ours. If you choose to save your card or bank account, Stripe stores it and we can charge it for future invoices or a recurring plan you agreed to. You can remove a saved payment method at any time from the client portal, or by asking us.

How we use it

• To send you invoices, receipts, and sign-in links.
• To collect payment you've agreed to, including scheduled charges for a recurring plan.
• To keep accurate business and tax records.
• To answer your questions about your account.

We don't use your information for advertising, we don't sell or rent it, and we don't share it except as described below.

Who else handles it

We use a small number of service providers, each only for the job described:

• Stripe — payment processing and storing saved payment methods.
• Resend — delivering invoice, receipt, and sign-in emails.
• Vercel — hosting this website.
• Supabase — the database where billing records are stored, encrypted at rest.

We may also disclose information if the law requires it, or to our accountant or tax advisor for bookkeeping.

Cookies and tracking

We use only the cookies needed for the site to work: one that keeps you signed in to the client portal (for up to 30 days), and a short-lived one used during payment. Your browser also remembers a few display preferences, such as light or dark mode and whether you've dismissed a welcome message. There are no analytics, advertising, or tracking cookies on these pages.

How long we keep it

We keep invoices and payment records for as long as we need them for tax and accounting purposes — generally several years after the year they relate to — and then delete them. Contact details for clients we no longer work with are archived and can be removed on request, unless we still need them for records we're required to keep.

Security

All pages are served over HTTPS. Invoice links use long, unguessable addresses, portal sign-in uses one-time email links, and our own access is protected by two-factor authentication. No system is perfect, but we take reasonable steps to protect your information and will tell you promptly if a breach affects you.

Your choices

You can ask us to show you the information we hold about you, correct it, export it, or delete what we're not required to keep, and you can remove a saved payment method at any time. Email contact@winstead-media.ai and we'll respond within 30 days. Depending on where you live, you may have additional rights under local law, and we'll honor them.

Children

These services are for businesses and adults. We don't knowingly collect information from children under 13.

Changes

If we change this policy, we'll update the date at the top. Significant changes will be mentioned on your next invoice.

Contact

Winstead Media
741 Sterling Rd.
contact@winstead-media.ai
7792453253