Privacy Policy

1. Information We Collect

1.1 Information You Provide

We collect information that you voluntarily provide to us, including:

• Contact Information: Name, email address, phone number, and company name when you fill out contact forms or request a demo
• Business Information: Company details, website URL, industry, and project requirements
• Communication Data: Any information you provide when contacting us via email, phone, or contact forms
• Project Information: Details about your web development needs, preferences, and specifications

1.2 Automatically Collected Information

When you visit our website, we automatically collect certain information, including:

• Usage Data: Pages visited, time spent on pages, click data, and navigation patterns
• Device Information: Browser type, operating system, device type, and IP address
• Analytics Data: Website performance metrics and user interaction data
• Cookies and Tracking: Session cookies and analytics cookies (see Section 8 for details)

2. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve our web development services
• Communication: To respond to inquiries, demo requests, and provide customer support
• Project Management: To understand your requirements and deliver customized solutions
• Website Improvement: To analyze usage patterns and enhance user experience
• Marketing: To send promotional materials and service updates (with your consent)
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Security: To detect, prevent, and address technical issues and fraudulent activity

3. Data Security

We take data security seriously and implement industry-leading measures to protect your information:

3.1 Infrastructure Security

• AWS Infrastructure: Our services are hosted on enterprise-grade Amazon Web Services (AWS) infrastructure with built-in redundancy and security
• Encryption in Transit: All data transmitted between your browser and our servers is protected using SSL/TLS encryption (HTTPS)
• Encryption at Rest: Sensitive data stored in our databases is encrypted using industry-standard encryption algorithms
• Secure Database: We utilize advanced database security with row-level security policies to ensure data isolation

3.2 Access Controls

• Limited Access: Only authorized personnel have access to personal data on a need-to-know basis
• Authentication: Secure admin authentication systems with multi-factor authentication where applicable
• Regular Audits: Periodic security audits and vulnerability assessments
• Automated Backups: Regular automated backups to prevent data loss

While we implement robust security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but strive to use commercially acceptable means to protect your personal information.

4. Third-Party Services

We may use trusted third-party service providers to assist in delivering our services:

• Cloud Infrastructure: We use secure cloud hosting services (Lovable Cloud/Supabase) built on enterprise-grade infrastructure
• Analytics Services: Website analytics tools to understand user behavior and improve our services
• Communication Tools: Email service providers for business communications
• Development Tools: Software development and project management platforms

All third-party service providers are carefully vetted and required to maintain appropriate security measures. They are prohibited from using your personal information for any purpose other than providing services to us.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Contact Information: Retained while you are an active customer or prospect, plus applicable legal retention periods
• Project Data: Maintained for the duration of the project and a reasonable period afterward for reference and support
• Communication Records: Kept for business continuity and legal compliance purposes
• Analytics Data: Typically retained for 24-36 months for trend analysis

You may request deletion of your data at any time (see Section 6 for your rights).

6. Your Rights (GDPR/CCPA Compliance)

Depending on your location, you may have certain rights regarding your personal information:

• Right to Access: Request a copy of the personal information we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal data (subject to legal obligations)
• Right to Restrict Processing: Request limitation on how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Opt-out of certain data processing activities, including marketing
• Right to Withdraw Consent: Withdraw previously given consent at any time
• Right to Lodge a Complaint: File a complaint with your local data protection authority

To exercise any of these rights, please contact us using the information provided in Section 12.

7. Do Not Sell My Personal Information

We do not sell your personal information to third parties. We do not and will not share your personal data with third parties for their direct marketing purposes. Your information is used solely to provide and improve our services.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website:

8.1 Types of Cookies We Use

• Essential Cookies: Required for website functionality and security
• Analytics Cookies: Help us understand how visitors interact with our website
• Preference Cookies: Remember your settings and preferences

8.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling cookies may affect the functionality of our website.

9. Children's Privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately, and we will take steps to delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from the laws of your country. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy, including the use of standard contractual clauses and secure infrastructure.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you of significant changes via email or prominent notice on our website
• Provide you an opportunity to review the updated policy

Your continued use of our services after changes become effective constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For privacy-related inquiries or to exercise your data rights, please include "Privacy Request" in your subject line. We will respond to your request within 30 days.