How this website and portal handle information.
Information about the public inquiry tool, portal records and connected services.
Public project inquiries
The public inquiry tool prepares text in your browser. It does not send the inquiry to IllumiCraft. Choosing Copy Project Inquiry places that text on your device clipboard.
Portal accounts and project records
The workspace stores account details, project memberships, documents, tasks, discussions, approvals and operational records in a separate IllumiCraft Supabase project. Access is controlled by account status, project membership and permissions. Staff drafts remain internal until an authorized user publishes them. Clients can see information deliberately shared with their project and their own submissions.
Authentication and device storage
The hosting platform may require ChatGPT sign-in before the site can be accessed. The portal uses its own Supabase authentication. Session information is stored on your device to maintain portal sign-in. Staff access also requires authenticator verification. Sign out when using a shared device.
Files and external links
Uploaded portal documents use private storage and authenticated access. Google Drive, Canva, payment links and other external services have their own access settings and privacy practices. A link saved in the portal does not alter the external file’s sharing settings.
Activity records and communication
The portal records changes, revisions, approval decisions and access administration actions. In-portal notifications are available. Automated outbound email, calendar sync and payment reconciliation are not connected unless explicitly indicated in the workspace settings.
Appropriate use and retention
Only upload information needed for the engagement. Do not place passwords, secret API keys, identity documents or medical information in project notes. Archiving hides information from the active workspace but is not permanent deletion. Retention, deletion requests and recovery arrangements must be agreed with the owner before sensitive production onboarding.
Technical service information
Hosting and database providers may process technical request information to operate and secure the services. No advertising analytics scripts have been added to this website. Company contact channels and a production retention schedule will be added when those arrangements are finalized.