Boldr

This explains what we collect when you use boldrstudio.com or work with us, why, and what we do with it. It describes what this site actually does rather than every practice a website could theoretically have.

The short version

  • We use no analytics, no advertising trackers, and no pixels. There is no Google Analytics, no Meta pixel, and no third party tracking script anywhere on this site.
  • We do not sell, rent, or share your personal information for advertising.
  • The only cookie we set keeps our own team signed in to our internal admin area. Browsing the public site gives you no cookie at all.
  • We never see or store your card number. Payments are handled entirely by Stripe.

Who we are

Boldr Studio operates this site. Remote-first · United States. For any privacy question or request, email hello@boldrstudio.com.

What you send us through the booking form

When you submit the form on our booking page we collect your name, email address, company or project name, the project type you select, your budget range, your timeline, and whatever you write in the message field.

That goes to us as an email through our email provider. It is not stored in a database on this website.

What we collect when you pay an invoice

To find your invoice we ask for the invoice number and the email address it was billed to. If you pay online you are taken to a checkout page hosted by Stripe.

Your card details are entered on Stripe's systems and are never transmitted to or stored by us. We receive only confirmation of whether the payment succeeded, the amount, and a transaction reference.

What we hold about clients

If you become a client we keep business contact information in our internal system: contact name, company, email address, phone number, our own notes about the project, and the estimates and invoices we issue you.

This is ordinary business record keeping and we keep it for the periods set out below.

What gets collected automatically

Our hosting provider records standard server logs when a page is requested. These can include your IP address, browser type, the page requested, and the time. We use them for security and to diagnose technical problems.

We do not use them to build a profile of you and we do not combine them with anything else.

Cookies

We set one cookie, and only for members of our own team signing in to the internal admin area. It holds a signed session identifier so the person stays logged in, and it expires after seven days. It is strictly necessary for that sign-in to work.

Visitors browsing the public site are not given a cookie, and we use no cookies for analytics or advertising.

Why we use it

  • To reply to your inquiry and work out whether we are a fit for your project.
  • To perform our contract with you: delivering work, issuing estimates and invoices, and collecting payment.
  • To keep the records accounting and tax law require.
  • To keep the site secure and working.

We do not use your information for automated decision making that produces legal or similarly significant effects, and we do not use it to train any AI model.

Who we share it with

Only the service providers that make the business run. Each processes it on our behalf and under contract.

  • Vercel, for website hosting and server logs.
  • Neon, for the database behind our internal admin system.
  • Resend, for sending email such as booking notifications, estimates, and invoices.
  • Cloudflare, for domain management, DNS, and routing email sent to our address.
  • Google, because our business mailbox is a Google account.
  • Stripe, for payment processing. Stripe controls your card data and handles it under its own privacy policy.
  • Our accountant, and our attorney if needed.

What we will not do

We do not sell your personal information and we do not share it for cross-context behavioral advertising.

We may disclose information if the law requires it, to respond to a lawful request, to enforce our agreements, or in connection with a merger or sale of our business. In that last case we will require whoever receives it to honor this policy.

How long we keep it

  • Booking inquiries: two years in our email, then deleted unless you became a client.
  • Client records, estimates, and invoices: seven years after the last transaction, to meet tax and accounting requirements.
  • Server logs: our hosting provider's standard retention, generally no more than thirty days.
  • Payment records: held by Stripe under its own policy. We keep only the invoice and the transaction reference.

How we protect it

Connections across the site are encrypted. Access to our internal systems is limited to the people who run the studio, our critical accounts require multi-factor authentication, and we do not store card numbers at all.

No system is perfectly secure and we cannot promise absolute security. If a breach affects your personal information we will notify you, and any authority that needs to know, without undue delay.

Your choices

Ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Email hello@boldrstudio.com and we will respond within thirty days. We may need to verify who you are first, and we may have to keep certain records the law requires us to keep, such as invoices.

We honor these requests wherever you live, and whether or not a particular privacy statute happens to apply to a business our size.

If you are in the European Economic Area or the United Kingdom you also have the right to object to or restrict processing, the right to data portability, and the right to complain to your local supervisory authority. Our legal bases are performance of a contract, our legitimate interest in operating and securing the business, and compliance with legal obligations.

Visitors outside the United States

We operate in the United States and our service providers store information there. If you contact us from elsewhere you are sending your information to the United States, where privacy laws may differ from those where you live.

Children

This site is not directed to children and we do not knowingly collect personal information from anyone under sixteen. If you believe a child has sent us information, tell us and we will delete it.

Changes

If we change this policy we update the date at the top, and we will say so on the site if the change is significant. Continuing to use the site after a change means you accept it.