Legal
Privacy Policy
The short version: this site collects little, uses it only to answer your messages and understand how the site performs, and never sells it. No advertising, no data brokers, no cross-site tracking.
Effective July 25, 2026
Who we are
Graf Technology, LLC ("Graf Technology", "we"), a Wisconsin limited liability company. You can reach us through the contact page.
What we collect and why
Contact form submissions. If you write to us, we receive what you send: the topic you chose, your name, email address, message, and, if you provide them, a phone number and company name. We use this to read and respond to your inquiry and to maintain a record of the correspondence in our support system. Submissions are retained for up to 24 months after the inquiry is resolved, then deleted.
Live chat. The chat widget on this site connects to our self-hosted support system. Starting a chat asks for your name and email so we can respond; the conversation is stored with your support history under the same retention practice as contact submissions. Not using the chat sends nothing.
Site analytics. We use a self-hosted instance of Umami, a privacy-focused analytics platform, configured without advertising identifiers or cross-site tracking. It records page views, referrers, and interaction events, and it may record session replays and heatmaps (how visitors scroll, move, and click), not tied to your identity, so we can find and fix usability problems. Form field contents are not captured in replays. All analytics data stays on infrastructure we control and is never shared with or sold to anyone.
Security and server logs. Our hosting provider (Vercel) and network provider (Cloudflare, including the Turnstile spam check on our contact form) generate standard technical logs (such as IP address, user agent, and requested URL) used for security, abuse prevention, and reliability. We do not enrich these logs with personal information, and message contents are never written to production logs.
What we do not do
- No advertising and no advertising trackers.
- No sale or rental of personal information, to anyone, ever.
- No cross-site tracking.
- No collection beyond what this policy describes.
Service providers
A short list of providers process data on our behalf, each receiving only what its role requires: Cloudflare (DNS, network security, Turnstile), Vercel (hosting), Resend (email delivery of contact submissions), and our self-hosted analytics and support systems, which run on infrastructure we control.
Your rights
You can ask what we hold about you, request a copy, request a correction, or ask us to delete it. Write to us through the contact pageand we will handle it promptly. If you are in a jurisdiction with specific privacy rights, such as the EU/EEA under GDPR or California under the CCPA/CPRA, those rights apply and we honor them, including the right to know, delete, and not be discriminated against for exercising them. We do not "sell" or "share" personal information as those terms are defined in the CCPA.
Children
This site is a business site, not directed at children under 13, and we do not knowingly collect their information. If you believe a child has submitted personal information, contact us and we will delete it.
Changes
If this policy changes, the new version appears here with an updated effective date. We will not weaken the commitments above quietly.