Privacy.

Who handles your data

Deploy Studio, a websites and digital product studio based in Dubai (United Arab Emirates), is responsible for the data collected on this site.

For any request about your data: business@goncalossoares.com

What we collect

• Estimator: your answers stay in your browser until you ask for the written scope. The "Copy link to this estimate" link carries the answers in the address itself (we don't store them) — whoever receives it can see them.
• Written scope request: your email (required) and, if you give them, your name, company, phone or WhatsApp and message — along with your answers, language, currency and the calculated estimate.
• Booking a call: your name, email, phone and company (if you give them), your message, the time you chose and your time zone.
• Proposals: when you open a proposal link, we record that it was viewed and when — and your reply (accept or decline, with the reason if you give one).
• Payments: the status of each payment and its invoice. Card details stay with Stripe — they never pass through us.
• Contracts and signature: the company details you confirm for the contract (legal name, tax number or TRN, address, country, representative and the signer's email) and the proof of signature — the typed name, the email confirmed with a code, the date and time, the IP address and browser, the accepted text and the document's fingerprint (SHA-256). The signed PDF is emailed to you and to the studio.
• Messages: the emails we exchange with you about your request are kept in its history.
• Client area: with the code we email you, you see only your own project — where it stands, the accepted proposal, payments (including monthly maintenance payments, if you have maintenance), invoices and credit notes, meetings and the messages exchanged with the studio — and you can pay, cancel a meeting or write to us. What you write there is kept in your request's history and reaches us by email and as a notification on the studio's phone. Of the code we keep only a fingerprint computed with a secret key and its last 4 characters, so we can recognise it (never the full code), and when it was last used.
• Project and accounts, in the client area: the brief (your answers and the files and links you add) and support requests (the conversation and attachments); the demo account for the store review (username and password); the company documents for the Apple and Google Play accounts (the commercial registration or trade licence, the proof of address and, only if Apple asks for it, an identity document of the signatory), used only to open those accounts; and the keys and connections you give the studio to work in your accounts (the Apple .p8 Team Key and the GitHub, Vercel and Supabase connections). The demo account and the documents are stored encrypted and only the studio's owner opens them; the keys and connections are stored encrypted, are only used for the calls to your accounts and are never shown. The documents and the keys are not included in the backup.
• Testimonial: at the end of a project we may ask you for one. If you give it, we keep the text, the rating, the name, role and company you write — and the permissions you give (publishing it with your name, showing the project in our portfolio). Without them, it stays with us.
• Technical data: for the request limits (to stop abuse), we keep in the database a code worked out from your IP address with a secret key kept outside it (an HMAC) — never the IP itself (except in the proof of a signature, under "Contracts and signature"). Each record only counts for an hour at most and is deleted in the next daily clean-up. The country you open the site from (which Vercel works out from the IP) is only used to pick the language and currency of your first visit.

We don't collect data for advertising, we don't build profiles and we don't use analytics tools that follow you — the visit statistics are anonymous and cookieless (see "Anonymous statistics").

What for

Only to reply to you and work with you: send you the estimate, prepare the written scope, the proposal and the contract, book the call, invoice, take payments and meet our accounting obligations. The proof of a contract signature is kept to perform the contract and to be able to prove it in a dispute (GDPR, Article 6(1)(b) and (f)). We don't sell your data, and we only share it with the providers and the accountant listed under "Where it's kept", for exactly this. And we only write to you about your request or project.

The anonymous statistics (under "Anonymous statistics") are only used to understand what works on the site and improve it.

Where it's kept

We use a few providers, each only for what it does:

• Vercel — hosting for the site and the API, and the anonymous visit statistics (Vercel Web Analytics).
• Supabase — the database (requests, proposals, bookings, invoices).
• Resend — sending emails.
• Stripe — card payments.
• Apple (APNs) — back-office notifications on the team's iPhones, with the client's name and company (or the email, without them) and, for a message written in the Client area, its opening words.
• Anthropic (United States) — only when the team uses the back-office AI features: the estimator answers, the estimate, the request message and the company name (never the email or phone), to prepare a draft proposal that the team reviews before sending; and photos or PDFs of the studio's expense receipts, to suggest the expense. Under Anthropic's commercial terms, this data is not used to train models.

These providers may process data outside the UAE (for example in the European Union or the United States), each under its own security and privacy safeguards.

Once a week, a backup of the database is emailed (through Resend) to the studio's mailbox.

Once a month, the previous month's invoices and expenses (with the name, company and email of each invoiced client) are emailed (through Resend) to the studio's accountant, to meet our accounting obligations.

How long

Requests, proposals and bookings are kept for as long as they're useful to reply to you and follow the project. Requests that don't go ahead are deleted when you ask.

Invoices and payment records are kept for as long as UAE accounting law requires (at least five years).

Signed contracts and the proof of signature are kept while the contract is in force and, after it, for as long as a dispute about it is still possible (up to 20 years).

Company documents (and the signatory's identity document) are deleted 30 days after Apple and Google approve the accounts — or earlier, at the end of the project. The keys and connections to your accounts are deleted when the studio leaves them, at the end of the project (with maintenance, when it ends). The brief, the files, the demo account and support requests stay with your request while they're useful for the project and the maintenance; you can delete the demo account yourself in the client area.

See, correct or delete

You can ask at any time for a copy of what we hold about you, or for it to be corrected or deleted. Write to us from the email you used; we reply as soon as we can and within 30 days at most.

We delete the request, the notes, the messages, the bookings and the testimonial. Invoices stay for the legal period, and signed contracts and the proof of signature for the period under "How long".

Write to: business@goncalossoares.com

Cookies and what stays in your browser

No advertising, analytics or tracking cookies. Only these:

• ds_lang — the language you chose (one year).
• ds_ccy — the currency you chose or, on your first visit, your country's (one year).
• ds_portal — your Client area session, after you sign in with your code: just a random code (we keep only its fingerprint), which lasts 30 days from your last visit and ends when you sign out, when we send you a new code or when we revoke access. Visitors who only browse the site never get it.
• ds_session — the session of whoever works in the backoffice; site visitors never get it.
• ds_device — also backoffice only, after signing in: a code for this device, so that someone guessing the password from elsewhere can't lock you out (one year).

Your browser's own storage (not cookies, and it never leaves your device) keeps your estimator answers and the point of the journey you were at.

Anonymous statistics

To see which pages get visited and where people stop along the way (how many start the estimate, finish it, ask for the scope or book the call), we count visits with Vercel Web Analytics — with no cookies and nothing stored in your browser.

• What's counted on each visit: the page (without anything after ? or # and without the code in personal proposal, meeting and testimonial links), the site you came from, your approximate location (country and city), and your device type, system and browser.
• And six moments, only with the language and, where it applies, the estimate's type and level or how many answers the description filled in: starting the estimate, finishing it, using the project description, asking for the written scope, booking the call and accepting a proposal. Never your email, name, phone, anything you write or your personal links.
• It doesn't identify you: Vercel tells visits apart with a code worked out from the request and thrown away after 24 hours; the numbers aren't linked to your IP address, don't cross sites and don't build profiles.

With Do Not Track or Global Privacy Control switched on in your browser, the script doesn't even load and nothing is counted.

Payments

Card payments are made on Stripe's secure page (Stripe Checkout). We only receive the payment confirmation — never the card number. Stripe's privacy policy also applies.

For bank transfers, the amount and the date are recorded.

Changes

If this page changes, the date at the top changes with it.