Privacy Policy
This policy covers the public Centient website and Journal. We collect what we need to answer you, run the site, and keep the mailing list. We do not sell personal information. This site does not take payment.
1) Who we are
Centient Group, LLC
Keller, TX
Email: steve@centientgroup.com
This is the public marketing site and Journal for Centient coachbuilt humidors. Studio, the editor used to publish pages and Journal pieces, is invite-only. It is not the workshop operating system.
For privacy questions or requests, email steve@centientgroup.com.
2) What we collect
Forms on this site
Three public forms post to the same form handler and are stored with Supabase. Resend usually delivers a copy of a Contact or Configure inquiry to steve@centientgroup.com. Held or quarantined submissions are saved for review. The mailing list has its own confirmation, described below.
- Configure Humidor — questionnaire answers (size, finish, and related details), name, email, optional phone, and optional artwork (image or PDF, stored privately with Supabase).
- Contact — name, email, and message.
- Mailing list — email address and the page you signed up from. Footer “Private list,” homepage “Join,” and the overlay signup are the same mailing form.
Contact and Configure show this acknowledgment after a saved inquiry: “Thank you for your inquiry. We’ve received your message and will be in touch.” Submitting the form does not record that the address can receive mail, and it does not add the address to the private list. A new inquiry does not receive a confirmation link. A confirmation link that was already sent can still be opened until it expires. Opening that page does not send another message. Pressing Confirm this mailbox on a link that is still valid records that the address can receive mail. It does not add the address to the private list, establish who you are, or allow Studio access. The inquiry can be answered if that button is not pressed.
Request diagnostics
Contact and Configure also keep a diagnostic record for the request: the raw IP address seen by the host, an estimated city, region, and country for that network, a coarse browser family when the request identifies one, a coarse operating-system family when it matches iOS, Windows, macOS, or Android, and a device category of mobile, tablet, or desktop. These labels describe the request. They do not identify a person. The estimate describes the network. It is not a home or workplace address. Authorized Studio editors can view the record, including the raw IP while it is kept. Public visitors cannot.
The raw IP is kept for 14 days. A cleanup runs daily at 08:00 UTC, so an address can remain for up to about a day after that cutoff. The city, region, and country stay with the inquiry after the IP is cleared. The browser family, operating-system family, and device category stay with the inquiry after the IP is cleared. Research may use that estimate only to order candidates that are still unresolved. It does not establish who sent the inquiry. The raw IP is not sent to research or included in the notification email.
If the analytics preference is on, the inquiry can also keep the first page path of that visit, the referring site, the allowlisted campaign parameters, and a session identifier. If the preference is off or has not been set, those visit fields are not kept. The diagnostic record above is separate from that choice.
Mailing confirm and unsubscribe
A signup stores the address as pending and emails a confirmation link. We add the address to the private list only after that link is opened. The same email includes unsubscribe. You can also use /unsubscribe. One-click unsubscribe headers are included where we send list mail. Historical addresses imported from a prior mailing list stay confirmed unless they were already unsubscribed.
Website usage
Hosting logs (IP address, browser, path, referrer, time) for security and reliability. Public pages also load Google Analytics 4 (measurement ID G-8H8Y7HET95). Analytics is not loaded on Studio, the sign-in page, local development, or browsers that have opted out of measurement.
Studio (invite-only)
Authorized editors sign in with Supabase Auth. Session cookies are required for that access. Public visitors do not have accounts and can read published CMS rows only.
Embedded media and fonts
YouTube or Instagram embeds may set their own cookies if you load those blocks. Typefaces load from Adobe Fonts (Typekit).
What this site does not process
Payment cards, Stripe customer records, and workshop invoices are not collected here. Those records, if they exist, belong to a separate workshop system — not this marketing site.
3) How we use it
- Reply to Contact and Configure Humidor submissions;
- For Contact and Configure, compare the name, the exact email address, the message or questionnaire, and the network location estimate with public web sources so we can respond. Those fields are sent through Vercel AI Gateway to the research model openai/gpt-5.6-sol. The first pass uses Exa. An approved deeper pass can also use Perplexity. The model is asked to search the exact email and the commission. An exact email on a public professional page does not prove employment, title, or ownership. The network estimate may only change the order of candidates that remain unresolved. A name, a place, and a cigar interest together do not establish identity. The raw IP is not sent to research or included in the notification email. Private-list signups are not researched automatically. Results stay in invite-only Studio and are not sold. This is not an automated decision about you as a customer, and it does not grant Studio access;
- Operate, secure, and improve the public site and Journal;
- Send occasional mailing-list notes to addresses that confirmed a signup (or that were imported and later included in a send);
- Meet legal duties, including CAN-SPAM (physical address on commercial mail, and a working unsubscribe).
6) Retention
- Hosting logs: typically up to 12 months;
- Contact and Configure records, including the message or questionnaire, research briefings, quarantined rows, and the network location estimate, are kept so we can reply. This application does not delete those records on a schedule. Whether they should be deleted after 24 months, longer when a commission continues, is still an open decision. No shorter deletion schedule for the location estimate has been set;
- Artwork uploads: kept with the related Configure Humidor submission;
- Mailing list: until you unsubscribe. We may keep an unsubscribed record so we do not email you again;
- Historical imported addresses: until unsubscribed or deleted on request;
- Raw request IP on a Contact or Configure diagnostic record: 14 days. The daily cleanup can leave it for up to about a day after that cutoff. That cleanup clears the raw IP only. The city, region, and country stay with the inquiry record;
- This site does not retain payment or invoice records. Hosting and email providers keep their own operational logs.
7) Your choices
Leave the mailing list from the link in any list email. You may request access, correction, or deletion of personal information by emailing steve@centientgroup.com. We will verify the request.
We do not sell or share personal information for cross-context advertising. We do not use automated decision-making that produces legal or similarly significant effects about you.
We are a Texas limited liability company. Some US state privacy statutes apply only above size or revenue thresholds we may not meet. Write us anyway; we will handle a reasonable request. We do not appoint an EU representative or data-protection officer, and we do not claim an EU establishment.
8) International visitors
This site is operated in the United States. If you use it from outside the US, your information is processed and stored in the US.
9) Children
The site is for adults. We do not knowingly collect personal information from children under 13. If you believe a child provided information, contact us and we will delete it.
10) Updates
We may update this policy. The “Effective” date above will change when we post a new version on this page.