Legal
Privacy policy
What s4l.io collects, who it goes to, how long it stays, and how to make us delete it. Written to be read rather than to be survived.
Last updated 8 October 2026
Who this policy covers
This policy applies to s4l.io, operated by Midnite Systems, LLC, doing business as Sites4Logistics (S4L.IO), from Valencia, CA. It covers this website, the forms on it, and the email and invoicing we send to people who contact us or become clients. It does not cover websites we build for our clients — those run under their own policies, on their own domains.
Information we collect
We collect two kinds of information, and only two.
Information you give us. Whatever you type into a form or send us directly: your name, company, email address, phone number, the website you already have, and whatever you tell us about your operation. If you become a client, that extends to billing contacts and the details needed to issue an invoice or an agreement.
Information your browser sends. Standard request data — IP address, browser and device type, referring page, and which pages you viewed. This is how any web server works; we use it to keep the site up and to understand which pages are doing their job.
We do not buy contact data about you, and we do not enrich what you send us against third-party databases.
How we use it
- To reply to your enquiry and prepare a scoped quote.
- To deliver work you have engaged us for, and to invoice you for it.
- To send transactional email you asked for — confirmations, invoices, agreements. Not a newsletter you did not sign up to.
- To understand, in aggregate, how the site is found and used, so we can improve it.
- To meet tax, accounting and other legal obligations.
Who else sees it
We do not sell, rent or trade personal information. It is shared only with the service providers below, each of which processes it on our instructions to run a specific part of the business, and with anyone we are legally required to disclose it to. If the business were ever sold or merged, client records would transfer as part of it.
| Provider | Role | What it processes |
|---|---|---|
| Vercel | Hosting and CDN | Serves every page of s4l.io and terminates TLS. Processes request metadata — IP address, user agent, requested URL — as part of delivering and protecting the site. |
| Supabase | Database and form handling | Stores quote requests. Everything you type into a form on this site is written here. |
| Resend | Transactional email | Delivers the confirmation you receive after submitting a form. It sees the recipient address and the message. |
| Stripe | Payments and invoicing | Issues invoices and processes card payments for clients under an active engagement. Card details go to Stripe directly and are never stored by us. |
| Google Analytics 4 | Website analytics | Reports how the site is found and used: which pages you viewed, roughly how long you spent on them, which buttons you clicked, and whether you submitted the quote form. It sets a first-party cookie so a second visit is not counted as a new person. IP addresses are truncated by Google before storage, and we do not use Analytics to identify anyone. |
| Microsoft Clarity | Session replay and heatmaps | Records how people move through the site — pointer movement, scrolls, clicks and the order pages were viewed in — and replays it so we can see where a page confuses someone. Text you type into form fields is masked before it leaves your browser and is never recorded. It sets a cookie so several pages in one visit are joined into a single session. |
| Vercel Web Analytics | Page view counts | Counts page views without cookies and without following you between sites. It records the page, the referring site, and coarse device and country information — nothing that identifies you. |
| Vercel Speed Insights | Performance measurement | Reports how fast pages actually loaded for real visitors, so we can fix the slow ones. It measures timings, not people, and sets no cookie. |
Cookies and analytics
This site sets no advertising cookies and carries no remarketing tags. Google Analytics 4 sets a first-party cookie so a returning visit is not counted as a new person; that is the only cookie the public site sets, and it is the extent of the tracking here.
What we measure, stated plainly: which pages you viewed, roughly how long you spent on each, which buttons and phone or email links you clicked, and whether you submitted the quote form. Where you arrived from — a search, a link, an AI assistant — is recorded against the first page of your visit, so we can tell which pages bring people in. None of it identifies you, none of it is combined with data bought elsewhere, and none of it follows you to other websites.
We also record sessions. Microsoft Clarity replays how visitors move through the site — where the pointer went, what was clicked, how far each page was scrolled — so we can see which parts of a page are confusing rather than guessing. It is the same tool we would use on a client's site, and we run it on our own first.
What a recording never contains: anything you type. Form fields are masked in your browser before the recording is sent, so your name, email, phone number and message are not in it. We are not trying to watch individuals — we are trying to find the pages that do not work.
Blocking any of it costs you nothing here. Every page is complete, server-rendered HTML and works with scripts switched off entirely — the analytics is the only JavaScript on a public page, and the site is fully usable without it.
How long we keep it
Quote requests that do not become engagements are kept while they are still commercially relevant and then deleted. Client records, invoices and signed agreements are kept for as long as the relationship lasts and afterwards for the period required by tax and accounting law. Analytics data is retained on Google's default schedule for the property.
Your rights
You can ask us, at any time, to:
- tell you what personal information we hold about you;
- correct anything that is wrong;
- delete it;
- stop sending you anything that is not strictly transactional;
- send you a copy in a portable format.
Email nic@s4l.io from the address you contacted us with and we will action it. California residents have these rights under the CCPA; because we do not sell personal information, there is no sale to opt out of.
Security
Traffic to this site is encrypted in transit. Form submissions and client records sit behind authentication and row-level access rules in our database, and payment card details never touch our systems — they go to Stripe directly. No system is perfectly secure, and we will not pretend otherwise; what we will do is tell you promptly if something involving your data goes wrong.
Children
S4L.IO sells to businesses. This site is not directed at children under 13 and we do not knowingly collect information from them. If you believe a child has submitted something, email us and we will delete it.
Changes to this policy
When this policy changes we update the text and the date at the top of this page. Material changes will be summarised here rather than slipped in silently.
Contact
Midnite Systems, LLC, dba Sites4Logistics (S4L.IO)
29115 Avenue Valley View, Suite A
Valencia, CA 91355
nic@s4l.io
(661) 666-2416
Straight answers
The six questions people actually ask
Who operates S4L.IO?
Midnite Systems, LLC, a California limited liability company. Sites4Logistics is its registered fictitious business name, and S4L.IO is the brand you see on this site. That is why an invoice or card statement can show Midnite Systems. More on that here.
Does S4L.IO sell my personal information?
No. We do not sell, rent, or trade personal information, and we never have. Information you submit is used to reply to you, to run an engagement if you become a client, and to meet legal obligations — nothing else.
What happens to the details I put in the quote form?
They are written to our own database and reviewed by a person here, usually within one business day. They are not pushed into an advertising platform, a lead marketplace, or a shared list, and they are not used to build a profile of you anywhere outside our own client records.
Do you use cookies for advertising?
No. We run Google Analytics 4 to see which pages get found and read, and Microsoft Clarity to replay how people move through a page so we can fix the confusing ones. Neither is an advertising tool: there are no ad pixels, no remarketing tags, and nothing here follows you to other websites. Clarity masks anything you type into a form before the recording leaves your browser.
How do I get my data deleted?
Email nic@s4l.io from the address you contacted us with and ask for deletion. We will remove the record and confirm it, except where we are required to keep something — a paid invoice, for instance, has to be retained for tax purposes.
Do California privacy rights apply here?
Yes. S4L.IO operates from Valencia, California, and California residents can exercise their rights under the CCPA by writing to us. Because we do not sell personal information, there is no opt-out of sale to action — but access, correction and deletion requests are all handled the same way, by email.
Next step
Questions about the site, not the policy?
Tell us what you move and we will send back a scoped quote with one number on it.