Legal
Cookie Policy
Effective date: July 25, 2026
This Cookie Policy explains the cookies, local storage, and session storage that Umfress Business Solutions LLC uses on this website and portal, and the third-party services that only load when you actively choose to use them. We do not run advertising pixels, marketing trackers, or analytics tools on this site, and we do not currently place any optional tracking cookies — so this site does not display a consent banner. If that ever changes, we will add one and default optional categories to off.
Strictly necessary — always on
These are required for authentication, security, and core functionality. They cannot be disabled without breaking the site.
- Supabase auth session (local storage,
sb-*-auth-token) — keeps you signed in to the client portal and dashboard. Provider: Supabase (first-party via umfressbs.com). Duration: until sign-out or token expiry. - Portal access session (encrypted first-party cookie) — issued after a valid access code is redeemed so the portal can verify your session on the server. Provider: Umfress Business Solutions. Duration: session.
- Ava concierge session id (session storage,
ava_session_id) — correlates a single browsing session with Ava’s conversation log for support and security. Duration: current tab session.
Preferences — first-party only
Small values stored in your browser to remember your UI choices. No personal data is transmitted; clearing them only resets the preference.
- Ava mute / speech rate (local storage,
ava_muted,ava_rate) — remembers whether Ava’s voice is muted and your preferred playback rate. - Ava visitor record (local storage,
ava_visitor) — remembers whether you have already been greeted so Ava does not repeat her welcome. Duration: persistent until you clear browser storage. - Guided tour progress (local storage,
tour:*) — inside the dashboard, remembers which product tours you have already seen or completed. - Sidebar state (first-party cookie,
sidebar:state) — remembers whether the dashboard sidebar is expanded or collapsed. Duration: 7 days.
Analytics — none
This site does not use Google Analytics, GA4, Google Tag Manager, Hotjar, Mixpanel, PostHog, Segment, or any equivalent analytics service. We do not place analytics cookies.
Marketing / advertising — none
This site does not run Meta Pixel, LinkedIn Insight Tag, Google Ads, TikTok, X, or any other advertising or remarketing pixel. We do not place marketing cookies and we do not sell or share your browsing information with advertisers.
Third-party services (only when you use them)
- Calendly — loaded only after you click a “Book” or “Schedule” button. Once loaded, Calendly may set its own cookies inside its widget or on calendly.com. See Calendly’s privacy notice for details.
- Google Fonts — the Instrument Serif and Work Sans typefaces are requested from
fonts.googleapis.com/fonts.gstatic.comwhen the page loads. Google receives your IP address as part of the HTTP request but does not set cookies for font requests. - Supabase & Lovable AI Gateway — first-party backend calls that power authentication, portal data, and Ava / Alex responses. No third-party cookies are set.
- ElevenLabs — Ava’s and Alex’s voices are streamed through our own server; the browser never contacts ElevenLabs directly and no ElevenLabs cookies are set on umfressbs.com.
Managing your preferences
You can clear cookies and browser storage for this site at any time from your browser’s privacy settings. Strictly necessary items will be recreated the next time you sign in. Ava’s mute preference can also be toggled directly from the Ava launcher.
Contact
Umfress Business Solutions LLC · info@umfressbs.com
