Privacy Policy
We built this studio on trust. This page explains exactly what data we collect, why, and how you can control it.
Last updated: May 2025
Overview
brainiac/studio ("we", "us", "our") is a digital studio based in Karachi, Pakistan. We build software, AI products, and growth programs for global clients. This Privacy Policy explains what personal data we collect when you visit brainiac.studio, use our services, or contact us — and how we use, store, and protect it.
By using our website or services you agree to the practices described here. If you have questions at any point, email us at hello@brainiac.studio and we will respond within one business day.
Information we collect
Information you give us directly
When you fill in our contact form, start-project drawer, or reach out by email or WhatsApp, we collect your name, email address, company name, phone number, and the details of your message or project brief.
Usage and analytics data
We collect anonymised information about how visitors use our website — pages visited, time on page, referrer URL, browser type, device type, and general location (country/city level). This data does not identify you individually.
Cookies and similar technologies
We use essential cookies to keep the site functional and analytics cookies to understand how our content performs. We do not use advertising or tracking cookies. You can disable cookies in your browser settings; some site features may not work correctly if you do.
Information from third-party services
If you book a call via Calendly, or message us through WhatsApp, those platforms process data under their own privacy policies. We receive only the information you choose to share in that interaction.
How we use your information
Responding to enquiries
To reply to your messages, send proposals, and schedule calls.
Delivering services
To scope, build, and manage the work you've contracted us for.
Improving the website
To understand which pages are useful and where we can improve the experience.
Legal and security obligations
To comply with applicable laws and protect our systems and clients.
We do not sell, rent, or share your personal data with third parties for marketing purposes. Ever.
Legal basis for processing
Where the GDPR or similar legislation applies, we process your personal data on the following legal bases: (a) your consent, where explicitly given; (b) the performance of a contract, when we are scoping or delivering work for you; (c) our legitimate interests, such as improving our website and communicating with prospective clients; and (d) compliance with a legal obligation.
Data retention
We keep enquiry and contact data for up to 3 years after the last interaction so we can reference prior conversations if you return. Project-related data is kept for as long as the engagement is live plus 5 years thereafter for legal and audit purposes.
Analytics data is aggregated and anonymised — it is not linked to individuals and is retained indefinitely for trend analysis.
You can ask us to delete your personal data at any time by emailing hello@brainiac.studio. We will action your request within 30 days unless we are required by law to retain it.
Third-party services we use
Vercel
Website hosting and edge delivery. Data may be processed in the US and EU.
Google Analytics / Plausible
Anonymised website analytics. No cross-site tracking.
Calendly
Meeting scheduling. Subject to Calendly's own privacy policy.
WhatsApp (Meta)
Optional communication channel. Subject to Meta's privacy policy.
Notion / Linear
Internal project management — used to manage delivery, not for marketing.
We review our third-party providers regularly and only work with services that meet appropriate data-protection standards.
International data transfers
brainiac/studio is based in Pakistan. If you are located in the EU, UK, or another jurisdiction with data-transfer restrictions, be aware that your data may be processed in Pakistan and in the countries where our hosting and tooling providers operate (primarily the US and EU).
We take reasonable steps to ensure any such transfers are protected by appropriate safeguards, including standard contractual clauses where required.
Your rights
Depending on where you are based, you may have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data; object to or restrict how we process it; and receive your data in a portable format.
To exercise any of these rights, email hello@brainiac.studio with your request. We will respond within 30 days. If you believe we have handled your data unlawfully, you have the right to lodge a complaint with the relevant supervisory authority in your country.
Security
We use industry-standard technical and organisational measures to protect your personal data — including encrypted connections (HTTPS), access controls, and regular security reviews. No transmission over the internet is 100% secure, but we work hard to protect the data you share with us.
Children's privacy
Our website and services are intended for business professionals. We do not knowingly collect personal data from anyone under the age of 16. If you believe a minor has submitted data to us, contact us at hello@brainiac.studio and we will delete it promptly.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be flagged on the website homepage for 30 days. Continued use of our website after changes are posted constitutes your acceptance of the updated policy.
Contact us
If you have any questions about this Privacy Policy or how we handle your data, please reach out:
Questions about your data?
We respond to every privacy enquiry within one business day.