PrivacyPlain English

What we do with your details.

Short version: an email address so we can reply, a sentence about the job, and nothing goes anywhere near a buyer.

The long version is below, written out rather than summarised, with every company that touches it named. One reply or one text gets the whole thing deleted.

If you filled in the form on this site

What we ask for: Two things are required: your email address, and a sentence about the boring part eating your time. Five more are offered and every one of them is optional: your name, your business name, what kind of business it is, your phone number, and where the business is.
Why each one: The email address is how we answer you, and there is no other reason for it. The sentence is the job itself, so it is the only thing we actually need to know. Where the business is decides the rate, because it is not the same on both sides of the Canadian border and we would rather ask than guess from your phone number. Your name, your business name and your trade make the reply a reply instead of a template. Your phone number is only used if you give it and only to answer you.
What is never asked: No payment details, no card, no bank details, no date of birth, no government number, no password. Nothing on this site asks for any of those and nothing on this site ever will. If a page claiming to be us asks you for one, it is not us.
Where it goes, first: The form posts to a function running on Vercel, which hosts this site. The submission is written to that function's own log before anything else happens, so an enquiry cannot be lost to a mail problem.
Where it goes, then: One notification email, to info@boringparts.com, which is a Google Workspace mailbox. Depending on how delivery is configured that mail is sent either through Resend or straight through Google's own mail servers. If the Telegram alert is switched on, a copy of the same enquiry is also sent as a message to Tanvir's own Telegram account so a reply can go out from a phone.
Who reads it: Tanvir. There is no team, no shared inbox tool, no CRM and no assistant. It is one person reading one mailbox.
How long it is kept: The mail stays in the mailbox and the log line stays in Vercel's logs, which roll off on Vercel's own schedule rather than ours. If you ask for it to be deleted, the mail and anything written down from it go the same day. See the last block on this page.

We do not sell your details, we do not rent them, we do not trade them and we do not add you to anybody else's list. There is nobody we would sell them to and no version of this business where that changes.

If we emailed you first

Where your address came from: A published business email address: your own website, a public business licence record, a directory listing or a public profile. It is a business address at a business, found in public, and it was not bought from a list broker and not scraped out of anybody's inbox.
What we hold against it: The business name, the city, the trade, the published email address, the name of the owner where that is published too, and the public page it came from. Nothing about you personally beyond that, and nothing you did not publish yourself.
What we record about the sending: That an address was mailed, and whether it opted out, bounced or complained. Those records live in Vercel Blob storage, filed under a one way hash of the address rather than under the address itself, and they are the only reason we cannot accidentally mail you again after you have said no.
Getting off it: Every one of those emails carries a one click unsubscribe link, and it takes effect immediately rather than in ten days. Replying with the word stop does the same thing. So does texting the number at the bottom of this page.

If you came from an ad

On Facebook and Instagram: We run ads there, which means Meta decides who sees them and Meta knows who clicked. What Meta does with that is governed by Meta's own privacy policy and not by this page. We cannot see who you are from a click.
If you used a form inside Facebook or Instagram: Some of those ads can carry an instant form that you fill in without leaving the app. When that happens Meta collects the answers and holds them, and we download them from Meta's advertising tools. From that point they are treated exactly like a form submission on this site: same mailbox, same one reader, same deletion on request.
No pixel on this site: There is no Meta pixel, no conversions API, no Google Analytics, no advertising tag and no tracking cookie on any page of boringparts.com. Clicking through from an ad does not hand anything back to the ad platform from here.

What the site records by itself

Server logs: Vercel records every request to this site, which includes your IP address, the browser you used and the page you arrived from. That happens at the hosting layer on every website on the internet and we did not switch it on. We read it to see whether a page is being loaded and whether the form is working.
Cookies: None. This site sets no cookies at all, which is why there is no cookie banner on it. The homepage does write one flag into your browser's own session storage, so that reloading the page does not replay the opening animation at you. It is a single character, it never leaves your browser, and closing the tab deletes it.
Fonts and scripts: The typefaces come from Google Fonts and the animation libraries come from the jsDelivr content network, so loading a page makes a request to each of those. They see that request the way any content network does. Nothing on this site sends either of them anything you typed.
The Tuesday List: Nothing typed into the form on this site goes on The Tuesday List. The lines on that page come from people who were told, in the message that asked them the question, that their answer would be published with no name, no business name and no city, before they answered it. Nothing is published from an answer where that was not said first.

If we end up doing work for you

Running one job for a business usually means being connected to something that business already uses: a booking system, a mailbox, a spreadsheet, a messaging account. That is a different and much bigger thing than an enquiry form, so it is governed by the lines printed on the homepage rather than by this page, and those lines are the deal.

We connect only what the job needs and you can unlink it at any time. Nothing goes out in your name unsigned. Your money never passes through us. You pay us and nobody else does. You get one report a week in plain language, and if you ask what is automated we say so.

Your customers' details are yours. They are used to do the job you asked for and for nothing else, they are never used for anybody else's business, and when the work stops the connection is removed. Anything we were holding to run that job goes with it.

Getting it deleted, or getting a copy

The two ways: Reply to any email from us with the word delete, or text 480 698 4576. Either one reaches the person who can do it. You do not need an account, a form, a reference number or a reason.
How long it takes: The same day, in practice within a few hours. The one thing we keep afterwards is the record that you asked to be left alone, which is held as that one way hash and nothing else, because deleting it is exactly how a business accidentally emails somebody a second time.
A copy of what we hold: Ask the same way and you get it written back to you in the same reply. It is a short list.
Corrections: Tell us what is wrong and it is fixed. Addresses and business names go out of date constantly and we would rather be told.
Children: This is a business to business service. Nothing here is aimed at anybody under 18 and we do not knowingly collect anything from one.
If this page changes: The date below changes with it. There is no change log and no archive, so if what it says matters to you, keep a copy of the version you read.

Last updated 5 October 2026