Skip to content

Legal

Privacy Policy

Short version: we collect the minimum we need, we never sell your data, and you can ask us to delete anything at any time.

1. What we collect

When you fill out our contact form, we collect your name, email, company (optional), project type, and the project brief you send. When you visit the site we receive standard server logs — IP address, browser, referrer — for basic analytics and security.

2. How we use it

We use your contact information to respond to your inquiry and, if you become a client, to communicate about your project. We don't use it for marketing drips, we don't sell it, and we don't share it with anyone outside our team.

3. How long we keep it

Contact form submissions are retained for 12 months, then automatically deleted unless you become a client. Active client data is retained for the duration of the engagement plus 2 years for legal and tax purposes.

4. Your rights

You can request a copy of the data we hold about you, ask us to correct it, or ask us to delete it entirely. Email privacy@gelabs.dev and we'll respond within 7 days.

5. Third-party services

We use Vercel for hosting, Supabase for database, and Resend for transactional email. These vendors are bound by their own privacy policies and do not receive any more data than is necessary to deliver their services.

This page is a plain-language summary, not a legal document. If you need a formal DPA or GDPR addendum, email legal@gelabs.dev.

Last updated: 2026-04-09