Privacy Policy

Last updated: 2026-05-02

What we collect

We collect information you submit directly through our contact form (name, email, company, message) and aggregated, anonymized analytics data via Google Analytics 4 (page views, referrers, device type, approximate location at city level).

How we use it

• To respond to your inquiry and scope a project.
• To improve site performance and content based on aggregated patterns.
• To send transactional emails when you submit our contact form.

Data sharing

We do not sell or share your personal data. Sub-processors with access to limited data: Google Analytics (analytics), Resend (transactional email), Firebase (form storage), Vercel (hosting). All under appropriate data processing agreements.

Cookies

Essential cookies for site function. Optional analytics cookies activate only after you accept via the consent banner. You can withdraw consent at any time by clearing site data or revisiting the banner.

Your rights

You may request access, correction, deletion, or export of your personal data by emailing signal@cdistudio.io. We respond within 30 days.

Retention

Contact form submissions retained 24 months. Analytics data retained 14 months (GA4 default). Project files retained for the contract duration plus 7 years for tax records.

International transfers

Our servers are in the US (Vercel, DigitalOcean). If you are in the EU/UK, your data is transferred to the US under Standard Contractual Clauses.

Contact

Privacy questions: signal@cdistudio.io.