Privacy Policy

1. Information We Collect

We collect information you provide directly, including:

• Name, email address, and company name during account creation
• Project details, business information, and content submitted through our questionnaire and Client Portal
• Files, images, and documents uploaded through the Client Portal
• Messages sent through the in-portal chat feature
• Payment information processed through our third-party payment provider (Stripe)

2. How We Use Your Information

• To provide and deliver our web design and development services
• To communicate with you about your project status and deliverables
• To process payments and send invoices
• To improve our services and user experience
• To protect against fraud and unauthorized access

3. Third-Party Services

We use trusted third-party services to operate our platform:

• Supabase — Authentication, database, and real-time features
• Uploadcare — Secure file and image hosting
• Web3Forms — Contact form email delivery
• Stripe — Payment processing
• Vercel — Website hosting and deployment
• Cloudflare — Security and spam protection

Each third-party service operates under their own privacy policy. We do not sell your data to any third party.

4. Data Security

We implement industry-standard security measures including encryption in transit (HTTPS/TLS), Row Level Security (RLS) on our database, secure authentication tokens, and input sanitization. While no method of transmission over the internet is 100% secure, we take reasonable measures to protect your personal information.

5. Data Retention

We retain your data for the duration of our business relationship and for a reasonable period thereafter for legal and operational purposes. Project files and submissions are retained for 12 months after project completion unless you request earlier deletion.

6. Your Rights

You have the right to:

• Access your personal data stored in our systems
• Request correction of inaccurate data
• Request deletion of your data (subject to legal obligations)
• Export your project data and uploaded files
• Withdraw consent for marketing communications at any time

7. Cookies

We use essential cookies for authentication and session management. We do not use tracking cookies or third-party advertising cookies.

8. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• The right to know what personal information we collect and how it is used
• The right to request deletion of your personal information
• The right to opt out of the sale of personal information (we do not sell your data)
• The right to non-discrimination for exercising your privacy rights

To exercise any of these rights, contact us at ethan@m81studio.com.

10. International Data Transfers

Our services are hosted in the United States. If you access our services from outside the US, your data may be transferred to and processed in the US. By using our services, you consent to such transfer.

11. Do Not Track Signals

We do not track users across third-party websites. Our site does not respond to Do Not Track (DNT) browser signals because we do not engage in the type of tracking that DNT is designed to prevent.

12. Changes to This Policy

We may update this privacy policy periodically. Changes will be posted on this page with an updated revision date. Continued use of our services after changes constitutes acceptance.

13. Contact

For privacy-related inquiries, contact us at ethan@m81studio.com.