Privacy policy

Who we are

Axtra Studios is a design, development and AI agency in Lahore, Pakistan. This policy covers axtrastudios.com and explains what we learn about you when you use it, what we do with that and what you can ask of us. We are the controller of that information.

What you give us

The site has two forms: the short one at the foot of most pages and the project brief on /contact. When you send one we receive what you typed in: your name and email address, and depending on the form your company, phone number, budget range, the services you are interested in, your message and any file you attach. We ask for nothing else, and you never need an account.

With it, the form sends how you reached the site: the page you first landed on, the site that linked you to us, and any campaign tags in that link (from a LinkedIn post or an ad, for example). It tells us which channels bring enquiries. None of it is stored on your device; it travels with your message and nowhere else.

What is collected automatically

• Server logs. Our host, Vercel, records each request (IP address, browser, page and time) to run and protect the site. We do not use these logs to identify you.
• Analytics, only if you accept. If you choose Accept in the cookie notice, Google Analytics records the pages you view, how you arrived, your device and browser, and an approximate location derived from your IP address (Google does not store the address itself). Microsoft Clarity, on the same Accept, records how pages are used (clicks, scrolling and mouse movement) as session replays and heatmaps, so we can see where the site is unclear. It never records what you type into a form: our forms are masked in full and their contents never leave your browser. If you choose Decline, or do nothing, neither ever loads.

Cookies

We set one cookie of our own, to remember your answer to the cookie notice. Google Analytics and Microsoft Clarity set their cookies only after you accept. The full list, with how long each lasts, is in our cookie policy. You can change your answer at any time: Cookie settings.

Why we use it, and on what basis

• To answer your enquiry and, if you want, to prepare a proposal: this is a step you asked us to take before a possible contract, and our legitimate interest in replying to people who write to us.
• To understand how the site is used and improve it: only with your consent, which you can withdraw whenever you like.
• To keep the site secure and working: our legitimate interest in running it safely.

We do not use your details for automated decisions, and we do not sell them.

Who else handles it

We share information only with the services that run the site for us, each bound by its own terms:

• Vercel hosts the site (privacy policy).
• Resend delivers form submissions to our inbox (privacy policy).
• Google Analytics, only with your consent (privacy policy).
• Microsoft Clarity, only with your consent. It stores its data in Microsoft’s Azure cloud (privacy statement).
• YouTube, only when you press play on a video review. The player loads from YouTube’s privacy-enhanced domain, and nothing is requested from YouTube before you press play.
• Calendly, if you follow “Book a call”. It opens on Calendly’s own site, under its policy. The link carries the same campaign tags described above, never your name or email, so we can see which channels lead to calls.

Some of these providers are in the United States or elsewhere outside your country; they protect transfers with the safeguards their policies describe. We would also disclose information if the law required it.

How long we keep it

An enquiry stays in our inbox while we talk and, if we work together, for as long as the project and our records require. An enquiry that does not lead to work is deleted within 24 months. Google Analytics keeps its data for 14 months. Microsoft Clarity keeps recordings for 30 days (a small random sample, and any we mark, for up to 9 months) and heatmaps for up to 9 months. Server logs are kept for a short period set by Vercel.

Security

The site is served only over HTTPS, forms travel encrypted to our email provider, and access to our inbox is limited to the people who answer it. No method is perfectly secure, but we take reasonable care.

Children

The site is meant for businesses and is not directed at anyone under 16. If you believe a child has sent us their details, tell us and we will delete them.

Other websites

Case studies link to our clients’ live products, and the footer links to our social profiles. Those sites have their own policies, and this one stops at our door.

Your rights

Depending on where you live (for example under the GDPR or the UK GDPR), you can ask us to show you what we hold about you, correct it, delete it, limit or object to how we use it, or give it to you in a portable form. Where we rely on consent you can withdraw it at any time, which does not affect what happened before. Email info@axtrastudios.com and we will reply within one month. You can also complain to your local data protection authority.

For California residents

In the last twelve months we have collected the identifiers and enquiry details described above, and, with consent, analytics about site use. We do not sell or share personal information for cross-context behavioural advertising. You may ask to know, correct or delete what we hold, and we will not treat you differently for asking.

Changes

When what is true about the site changes (a new tool, a new form), we update this page and the date at the top. If a change needs your consent, the cookie notice will ask again.