Privacy Policy

Information We Collect

We collect information you provide directly and limited technical data needed to run the site:

• Contact Information: Name, email address, company details, and any other information you share when you email us. Inquiry handling in this codebase is email-driven and does not include server-side lead form processing.
• Project Information: Project goals, scope, timelines, budgets, and references you provide during discussions or onboarding.
• Onboarding Draft Data: If you use our onboarding flow, draft responses are stored in your browser local storage under `onboarding_progress` until submitted, removed, or cleared by you.
• Technical and Request Metadata: We may process IP address, browser/device context, and Cloudflare request country code to operate the site, including regional pricing display behavior. We also store `lastLoadingScreenShown` in local storage for loading screen frequency control.

How We Use Your Information

We use collected information to operate our services responsibly and communicate clearly:

• Inquiries and Communication: To respond to emails, answer questions, and continue requested conversations.
• Scoping and Proposals: To evaluate project fit, prepare estimates, and draft statements of work.
• Service Delivery: To plan, execute, and support design and development work under our client agreements.
• Operations and Security: To maintain site reliability, troubleshoot issues, and protect against misuse.
• Legal and Compliance Records: To retain records needed for contractual, accounting, dispute, or legal obligations.

Information Sharing

We do not sell personal information. We share information only when needed to run the business or comply with law. This site codebase does not include in-repo payment SDK, auth account system, or CRM integration:

• Infrastructure and Service Providers: With vendors that support hosting, communications, and core operations, under appropriate contractual safeguards.
• Professional Support: With advisors or contractors who need access to help deliver services and are bound by confidentiality obligations.
• Legal Requirements: When disclosure is required by law, regulation, legal process, or to protect rights and safety.
• Business Transitions: As part of a merger, acquisition, restructuring, or asset transfer, subject to applicable legal protections.
• External Links and Embedded Experiences: Our pages may include links to external websites and embedded storefront demos (including iframes). Those third parties may process data under their own terms and privacy policies.

Data Security

We use reasonable technical and organizational safeguards designed for the nature of our business. No internet transmission, storage system, or software environment can be guaranteed fully secure.

Your Rights

Depending on your location and applicable law, you may have privacy rights such as:

• Access: Request information about the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of personal data, subject to legal and contractual limits.
• Restriction or Objection: Ask us to limit certain processing, or object where permitted by applicable law.
• Withdrawal and Complaints: Withdraw consent where processing is consent-based and contact your local authority if you believe your rights were violated.

Cookies and Analytics

This site uses essential browser storage and similar technical mechanisms for core experience features, including onboarding draft persistence and loading-screen behavior. We currently do not run an in-repo consent manager, cookie banner, advertising tracker, or analytics SDK. You can manage cookies and local storage in your browser settings.

AI Chatbot Conversations

When you use the AI chatbot on this site, the text of your conversation is recorded and stored to help us improve the website, our services, and the overall visitor experience. Here is exactly what that involves:

• What We Record: The text content of messages exchanged between you and the chatbot, the page you were on when the conversation started, the date and time of the conversation, and automatically generated topic categories based on what you asked about.
• What We Do Not Record: No names, email addresses, IP addresses, device information, browser fingerprints, cookies, geolocation data, or session identifiers are captured. Conversations cannot be traced back to any individual visitor. The logging system is structurally anonymous by design — not by policy.
• How We Use Conversations: Conversation data is analyzed to identify gaps in the website's content, improve the clarity of service descriptions, refine pricing communication, and make the site more helpful overall. Data may be processed by AI tools to identify patterns and generate improvement recommendations. Conversation data is never sold, shared with third parties, used for advertising, or used for any purpose other than improving our own website and services.
• Automatic Redaction: If you happen to type personal information into the chat — like an email address or phone number — the system makes a best-effort attempt to automatically detect and redact it before storage. This is a safeguard, not a guarantee.
• Retention: Conversations are retained for 90 days and automatically removed after that period unless specifically preserved for ongoing analysis.
• Why No Opt-In Is Required: Since no personal data is collected — no names, emails, IPs, or any identifying information — the recorded data does not constitute personal data under most data protection frameworks and does not require consent. If you prefer not to have your conversation recorded, you can simply choose not to use the chatbot. For chatbot usage terms, see our Terms of Service.

Data Retention

We retain information for as long as reasonably needed to handle inquiries, perform contracted work, maintain required accounting and legal records, and resolve disputes. Browser-stored onboarding and loading-screen data remains on your device until submitted, replaced, removed, or cleared by you.

Changes to This Policy

We may update this policy periodically to reflect operational, legal, or product changes. Updates are posted on this page, and the "last updated" date shows when the latest revision became effective.

Contact Us

For privacy questions, data requests, or concerns about this policy, contact us at info@dropoutstudio.co.