Privacy Policy

Controller: Arsalan Arshad
Email: arsalanarshad.dev@gmail.com
Web: https://arsalandev.studio
Support: https://arsalandev.studio/contact

Account information

When you create an account or sign in, we may collect your name, email address, and a password hash (if you use email/password). If you use Google Sign-In, we receive identifiers and profile details Google shares with us (typically name, email, and a subject ID) so we can create or link your account. We do not receive your Google password.

Contact and inquiry data

If you submit the contact form, we collect the details you provide (for example name, email, company, project needs, timeline, budget, and message).

Messages and attachments

If you use chat / messaging after signing up, we store conversation content, notification metadata, and any files you upload. Message bodies may be encrypted at rest. Uploaded files are stored with a private object-storage provider so the studio can review briefs and continue the engagement.

Technical and session data

We may process session cookies (web), device / app identifiers needed for signed-in sessions, refresh-token metadata for the mobile API (which can include approximate IP address and user-agent), and basic server logs for security and reliability.

Analytics

The website may use Google Tag Manager / Google Analytics (or similar tags configured in GTM) to understand aggregate traffic and product usage. These tools can set cookies or similar technologies and collect device and usage data according to Google’s policies.

• Provide, operate, and secure the website and mobile apps
• Respond to inquiries and deliver client work
• Authenticate users (email/password or Google)
• Send transactional email (verification, password reset)
• Improve the studio surfaces using aggregated analytics
• Comply with legal obligations and protect against abuse

I do not sell your personal information, and I do not use your chat content to train public AI models.

Depending on where you live, processing may rely on: performance of a contract or pre-contract steps (inquiries and delivery); consent (for example certain analytics or optional cookies); legitimate interests (securing the service, preventing abuse, improving the product in ways that do not override your rights); and legal obligation when required.

I use service providers (“processors”) to run the studio. They only process data on my instructions for the purposes above. Categories include:

• Hosting / database — currently Railway (application and Postgres)
• File storage — Cloudflare R2 (or compatible object storage) for chat attachments
• Email delivery — Resend (or similar) for verification and transactional mail
• Authentication — Google OAuth / Google Sign-In when you choose Google
• Analytics / tags — Google Tag Manager and Google Analytics when enabled
• App distribution — Apple App Store / Google Play and Expo / EAS build infrastructure when you install store or preview builds

I may disclose information if required by law, to protect rights and safety, or in connection with a transfer of the studio’s operations (with notice where appropriate).

Servers and processors may be located outside your country (including the United States and EU regions used by cloud providers). Where required, appropriate safeguards are applied by those providers’ terms and transfer mechanisms.

Account, inquiry, and message data are kept while your account is active and as needed to deliver or document the engagement, then for a reasonable period for security, dispute resolution, and legal compliance. You can request deletion (see below). Server logs and analytics data are retained according to each tool’s settings and operational needs.

I use industry-standard measures appropriate to a small studio: HTTPS, hashed passwords, encrypted chat content where enabled, private object storage for attachments, and access limited to the sole operator (and any authorized sub-admin tools). No method of transmission or storage is 100% secure.

• Access, correct, or update account details by contacting me
• Request export or deletion of your account and associated data
• Opt out of non-essential analytics cookies via your browser controls or Google’s tools where available
• Withdraw Google access in your Google Account permissions

Depending on your location (for example EEA/UK or certain US states), you may have additional rights such as restriction, objection, or lodging a complaint with a supervisory authority.

If you created an account, you may request deletion at any time by emailing arsalanarshad.dev@gmail.com from the address on the account, or via the contact form, with the subject “Account deletion request”.

After verifying ownership, I will delete or anonymize account profile data, sessions/tokens, and associated chat content and attachments that are not required to keep for legal or security reasons. Some residual records (for example billing correspondence outside the app, or delayed analytics) may remain for a limited period as required by law or processor retention.

The services are directed at adults and businesses. They are not intended for children under 13 (or the minimum age required in your country). I do not knowingly collect personal information from children. If you believe a child has provided data, contact me and I will delete it.

The companion app may use network access to talk to arsalandev.studio, and may use the system browser / Google Sign-In sheets for authentication. It does not require continuous background location. Push notifications, if added later, will be optional and described in an updated policy or in-app prompt.

Apple App Privacy / Google Play Data safety labels should be read together with this policy. If a label and this page ever differ, contact me and I will correct the inconsistency.

Case studies and presence links may point to third-party sites (GitHub, npm, Shopify, Salesforce, social networks, or product demos). Their privacy practices are their own. Open-source packages published under my name may have separate READMEs; hosted demos under *.arsalandev.studio are covered by this policy unless a product page states otherwise.

I may update this policy from time to time. The “Last updated” date at the top will change when material updates are published. Continued use after an update means you accept the revised policy.

Privacy and support requests: arsalanarshad.dev@gmail.com
Contact form: /contact

App Store Connect URLs for this studio:
Privacy Policy URL — https://arsalandev.studio/privacy
Support URL — https://arsalandev.studio/contact
Marketing URL — https://arsalandev.studio