Privacy Policy

Information we collect

• Contact details — name, email address, company name, and phone number submitted via intake or contact forms.
• Project details — goals, budget, timeline, and content submitted during the intake process.
• Payment information — processed exclusively by Stripe. We never see or store card numbers.
• Usage data — page views, referral source, and session duration collected in aggregate by analytics software.
• IP addresses and technical metadata collected for security and fraud prevention.

How we use data

• Prepare scoped quotes and project recommendations.
• Deliver project milestones and workspace updates.
• Send project-related communications. No marketing without explicit consent.
• Detect and prevent fraudulent submissions and abusive requests.
• Meet legal obligations such as tax records and dispute resolution documentation.

Sub-processors

Data is shared only with the vendors required to operate our services. Each is contractually bound to protect your data.

• Stripe — payment processing (United States)
• Supabase — database, authentication, and file storage (AWS, United States)
• Vercel — hosting and content delivery (global edge)
• Resend — transactional email (United States)
• Google Calendar — discovery call scheduling (United States)
• Sentry — error monitoring (United States)

Self-service privacy controls

Logged-in clients can download a copy of their data or delete their account at any time from account settings. Data export returns a JSON file; account deletion anonymizes records we are required to retain (invoices, tax records) and removes everything else.

Data retention

• Inquiry records: 2 years if no project is initiated.
• Active project data: retained for the engagement period plus 1 year.
• Payment records: 7 years to meet tax and legal requirements.
• You may request deletion at any time. We will delete what we are not legally required to retain.

Cookies and analytics

We use analytics cookies to understand aggregate site traffic. We do not use advertising cookies or cross-site tracking. You can disable cookies in your browser settings without affecting site functionality.

Your rights (GDPR / UK GDPR)

If you are in the EU or UK, you have the right to access, correct, port, or delete your personal data, and to object to or restrict processing. To exercise any right, email hello@crecystudio.com.

California residents (CCPA)

We do not sell or share personal information as defined under the CCPA. California residents may request disclosure of the categories of data we hold or ask for deletion by emailing hello@crecystudio.com.

Questions about this policy

Email hello@crecystudio.com.