← Back to home

Privacy Policy

Last updated: 2026-05-19

This is a draft document for the MVP launch. A reviewed version by legal counsel will replace it before public launch.

InDims Studio ("we", "us", or "our") is a company registered in Hong Kong. This Privacy Policy explains how we collect, use, share, and protect personal information when you use our website and services.

1. Information we collect

  • Account information: name, email, company, billing address.
  • Payment information: handled by Stripe, we do not store card numbers.
  • Project assets: files you upload (logos, copy, images) for site delivery.
  • Usage data: pages visited, features used, basic telemetry. Analytics are only enabled with your consent.
  • Cookies: see our Cookie Policy.

2. How we use it

  • To provide and improve our services.
  • To process payments and issue invoices.
  • To deliver the website you ordered.
  • To send transactional emails (orders, updates, security).
  • To send marketing emails only if you opt in. You can unsubscribe at any time.

3. Sharing

We share data with the minimum set of processors needed to operate:

  • Stripe (payments, invoicing)
  • Cloudflare (CDN, security)
  • Resend / Postmark (transactional email)
  • Anthropic / OpenAI (only when an AI feature is used)
  • Cloud storage (encrypted, project assets)

We do not sell personal information. All processors are bound by data processing agreements.

4. Your rights (GDPR / CCPA / PDPO)

  • Access your data
  • Correct inaccurate data
  • Delete your data ("right to be forgotten")
  • Export your data
  • Object to processing
  • Lodge a complaint with a supervisory authority

To exercise rights, email privacy@indims.studio. We respond within 30 days.

5. Data retention

Account data: as long as your account exists and 90 days after deletion (for legal/audit). Financial records: 7 years (Hong Kong requirement). Project assets: 90 days after subscription end, then deleted.

6. International transfers

Data may be processed in the US, EU, and Hong Kong. Cross-border transfers use Standard Contractual Clauses where required.

7. Children

Our service is not intended for users under 18. We do not knowingly collect data from minors.

8. Changes to this policy

We will notify you of material changes by email or in-app notice at least 14 days before they take effect.

9. Contact

InDims Studio (Hong Kong) · privacy@indims.studio