Legal

Privacy policy

What we collect, why, and what we do not do with it. A skeleton policy, to be reviewed by counsel before launch.

Last updated: 2026-05-23

Who we are

Holdfast Studio LLC (“Holdfast”, “we”) operates this website and the services described on it. We are based in Chicago, USA and Bhubaneswar, India. For any privacy question, contact hello@holdfast.dev.

What we collect

We collect only what you give us and what we need to run the business:

Brief and contact submissions: your name, email, company, and the project details you choose to share.
Careers applications: your name, email, role of interest, links you provide, and any resume you upload.
Newsletter: your email address, if you subscribe.
Analytics: aggregate, cookieless usage data through Plausible. We do not track you across other websites.

How we use it

We use your information to reply to your enquiry, scope and deliver work, review job applications, and send the newsletter you asked for. We do not sell your data. We do not use it for advertising.

Where it is stored

Submissions are stored in Supabase (Postgres and Storage). Transactional email is sent through Resend. The site runs on a Hostinger VPS in the EU. Booking is handled by Cal.com. Each processor holds data only to provide its service to us.

Your rights

You can ask us to access, correct, or delete the personal information we hold about you. Email hello@holdfast.dev and we will action the request. We sign a Data Processing Agreement for any engagement that involves personal data.

Retention

We keep lead and application data only as long as it is useful for the purpose it was given, and delete it on request.