Privacy Policy

01What we collect

When you fill out the contact form or sign in to the client portal, we collect your name, email address, and the content of any messages you send us. If you are a client, we store project and milestone data on your behalf inside our Supabase database.

We use Vercel Web Analytics — privacy-friendly, no third-party cookies, no fingerprinting. We do not run Google Analytics, Facebook Pixel, or any retargeting trackers.

02Why we collect it

We use your information only to operate the studio relationship: respond to your inquiry, ship your project, send you a build notification, or invoice you for work performed. We never sell your data and we do not share it with advertisers.

If you submit a contact form, we may use anonymized aggregates (e.g. ‘5 budget <$10k inquiries this month’) for internal planning. We never share identifying details outside the studio.

03How we store it

All client data lives in Supabase Postgres, encrypted at rest, in a US region. Access is gated by row-level security so a given client account can only ever see its own rows. Studio admin access is restricted to two people.

Production database backups run nightly. Backups are retained for 14 days and then destroyed.

04Your rights

You can request a copy of all data we hold on you, request correction, or request deletion. Email hello@guruboxz.com. We respond within five business days.

If you are a client and you leave us, the handoff playbook includes a full database export at no additional cost. We delete our copy 30 days after you confirm receipt.

05Contact

Questions about this policy go to hello@guruboxz.com. We'll route them to the right person within one business day.