Privacy policy.

ayweb is a remote web development studio. When we say “we,” “us,” or “ayweb” throughout this document, we mean ayweb studio. You can reach us at info@ayweb.app for any privacy-related question.

We only collect what you give us:

• Contact form data (`/contact` and `/chat`) — your name, email, company, project description, and any configuration choices you made in the estimator. Submitted voluntarily when you ask us to quote a project.
• Email content — anything you send us at info@ayweb.app stays in our inbox until you ask us to delete it.
• No analytics, no tracking pixels, no cookies — we do not run Google Analytics, Meta Pixel, Hotjar, or any similar service on this site. The only third-party request your browser makes is to load fonts from Google Fonts.

We never collect: payment information, browsing history, location beyond country (inferred from your IP at request time and not stored), or anything else not listed above.

Strictly to respond to your inquiry and, if we go on to work together, to deliver the project you hired us for. We never use your data for marketing automation, never sell it, never share it with advertisers.

Contact and chat submissions are relayed through Web3Forms (a form-relay service operated by Tezda Inc.) and delivered to our private inbox at team@ayweb.app. Web3Forms processes the submission in transit but does not store it long-term. See their privacy policy for their own data practices.

Our email provider stores the inbox content. Anything you send is kept there until we either delete it or you ask us to.

We keep inquiry data for as long as the conversation is active, plus 24 months after our last exchange in case you come back wanting to revive a project. After that we delete it.

For active client engagements: data tied to your project stays for the duration of the engagement plus three years (for warranty, audit, and tax reasons), then is deleted unless we have a separate data-retention agreement with you.

If you’re in the UK or EU you have the rights GDPR grants you; if you’re in California you have the rights CCPA grants. In practice, the same rights are honored for everyone:

• Access — ask what data we hold on you and we send it back as plain text.
• Correction — ask us to fix any inaccurate detail.
• Deletion — ask us to delete everything; we do it within 30 days and confirm in writing.
• Objection — withdraw consent for any processing.
• Portability — receive your data in a machine-readable format.

To exercise any of these, email info@ayweb.app with the subject “Privacy request.” We don’t require a form or a ticket — a plain email is enough.

The site loads three external services in your browser:

• Google Fonts — serves the Inter and JetBrains Mono webfonts. Google receives your IP and user-agent when the font is requested. No cookies.
• Web3Forms — only when you submit a form. See section above.
• Embedded project demos — when you open a case study, an iframe loads the demo bundle. Demos are first-party content served from ayweb.app; no third-party request is made on your behalf.

The site is HTTPS-only (HSTS preload), security headers (Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy) are set on every response, and the static deploy has no server-side code paths an attacker could target. Inquiry data is encrypted in transit and in our inbox at rest.

This site is not directed at children under 16. We don’t knowingly collect data from anyone in that age range. If you believe a child has submitted information to us, email us and we’ll delete it on request.

If we ever change this policy materially, we update the “Last updated” date at the top and, for active clients, send a heads-up by email. The current version always lives at this URL.

Anything unclear or anything we should change? Email info@ayweb.app — we read every message.

See also: Terms of Service