How We Use Your Data

1. Overview

At WebCraft Studios, we treat your data with the same care and precision we apply to every website we build. This page outlines exactly what information we collect, why we collect it, how we protect it, and the choices you have regarding your personal and business data. Our commitment is simple: transparency, security, and respect for your privacy.

2. What We Collect

We only collect data that is necessary to deliver, maintain, and improve our web development services. This includes:

• Contact & Account Information: Name, email address, phone number, company name, and job title provided during inquiries, onboarding, or account creation.
• Project & Design Assets: Brand guidelines, logos, copy, images, credentials, and source files shared for development purposes.
• Communication Records: Emails, chat logs, and meeting notes related to your project scope, feedback, and revisions.
• Usage & Analytics Data: Non-identifiable site performance metrics, error logs, and browser data used to optimize functionality and user experience.
• Payment Information: Processed securely through PCI-compliant third-party payment gateways. We never store full credit card numbers.

3. How We Use Your Data

Your data enables us to deliver exceptional results while maintaining a secure and efficient workflow. We use collected information for:

• Service Delivery: Building, testing, deploying, and maintaining your website or digital product.
• Communication: Responding to inquiries, sending project updates, and coordinating feedback cycles.
• Billing & Invoicing: Processing payments, generating receipts, and managing subscription or maintenance plans.
• Improvement & Analytics: Analyzing performance trends to enhance our development practices and recommend optimizations.
• Legal & Compliance: Maintaining records required for contracts, tax obligations, and regulatory standards.

4. Storage & Security

Protecting your data is non-negotiable. We implement industry-standard safeguards to ensure confidentiality and integrity:

• Encryption: All data in transit is protected via TLS 1.3. Sensitive data at rest is encrypted using AES-256 standards.
• Access Controls: Role-based permissions ensure only authorized team members can access project-specific information.
• Secure Infrastructure: We use enterprise-grade hosting with regular security audits, automated backups, and intrusion detection systems.
• Data Retention: Project files and client data are retained for 24 months post-project completion unless otherwise agreed. Afterward, data is securely wiped from active systems and backups.

5. Third-Party Services

We partner with trusted vendors to power specific aspects of our workflow. We only engage providers who meet strict security and privacy standards:

• Hosting & CDN: For reliable, fast website deployment and global content delivery.
• Payment Processors: Stripe/PayPal for secure, compliant transaction handling.
• Analytics & Monitoring: Privacy-focused tools to track performance without identifying individual users.
• Communication Tools: Encrypted email, video conferencing, and project management platforms.

We do not sell, trade, or rent your personal information to third parties for marketing purposes. Data sharing occurs solely to fulfill service obligations and is governed by strict data processing agreements.

6. Your Rights

Depending on your location, you may have rights under GDPR, CCPA, or similar privacy regulations. These include the right to:

• Access a copy of the personal data we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion or anonymization of your data (where legally permissible)
• Opt out of non-essential communications at any time
• Export your data in a machine-readable format

To exercise any of these rights, simply contact our privacy team. We will respond within 30 business days and process verified requests at no cost.

7. Policy Updates

We may update this policy periodically to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will notify registered clients via email and update the "Last Updated" date at the top of this page. We encourage you to review this document regularly.