Privacy Policy

Effective date: September 11, 2026

This Privacy Policy explains how Deduxer S.R.L. (“Deduxer”, “we”, “us”, “our”) handles personal data when you visit deduxer.studio (the “Website”), get in touch with us, or work with us as a client. We process personal data in line with the EU General Data Protection Regulation (GDPR) and other applicable data protection law. For the data described here, Deduxer is the data controller.

Questions or requests about your data go to hi@deduxer.studio.

1. What we collect

When you contact us. If you email us, use our AI quote form, book an intro call or message us in the chat widget, we collect what you give us: your name, email address, company, role, and whatever you tell us about your project, timeline and budget.

When you become a client. We collect the details needed to run the engagement: billing details, contract information, the content, credentials and access you share for the work, and our correspondence with you.

When you browse the Website. Our analytics and chat tools collect technical and usage data automatically: IP address, approximate location, device and browser type, the pages you view, how you got to the Website, and performance metrics such as page load times.

We do not collect special categories of data (such as health or political opinions) and we ask you not to send them to us.

2. Why we use it and on what basis

  • To answer you and prepare a quote. Legal basis: steps taken at your request before a contract, and our legitimate interest in responding to enquiries.
  • To deliver the Services, including scheduling, communication, contracts and invoicing. Legal basis: performance of a contract with you.
  • To meet legal obligations such as accounting and tax record-keeping. Legal basis: legal obligation.
  • To understand and improve the Website through analytics and performance monitoring. Legal basis: your consent where the law requires it, and otherwise our legitimate interest in running a website that works.
  • To send you occasional updates about our work and offers, if you have asked for them. Legal basis: consent, which you can withdraw at any time via the unsubscribe link in any email or by writing to us.
  • To keep the Website and our systems secure and to establish or defend legal claims. Legal basis: legitimate interest.

3. Cookies, analytics and chat

The Website uses the following tools:

  • Google Analytics 4 (Google Ireland Ltd / Google LLC) to measure traffic and how the Website is used. It sets cookies and may process your IP address. You can opt out with the Google Analytics browser add-on or by blocking cookies in your browser.
  • Vercel Web Analytics and Speed Insights (Vercel Inc.) to count page views and measure performance. These are privacy-focused, do not use cookies and do not track you across sites.
  • Intercom (Intercom R&D Unlimited Company) to run the chat widget. It sets cookies so a conversation can continue between visits and stores the messages you send us.
  • A session flag stored in your browser’s session storage so the homepage intro animation only plays once per visit. It contains no personal data and is deleted when you close the tab.

You can control cookies through your browser settings. Blocking them will not stop the Website from working, although the chat widget may not remember you.

4. Who we share data with

We do not sell personal data, and we do not share it with third parties for their own marketing. We share it only with providers that help us run the Website and the Services, who act on our instructions and are bound by data protection agreements:

  • Vercel hosts the Website and provides analytics.
  • Accordio powers our quote form, booking page, contracts, invoices and client records. Data you enter in the quote form or the booking page is stored on Accordio’s servers.
  • Google provides analytics and, for some meetings, calendar and video-call tools.
  • Intercom runs the chat widget.
  • Stripe processes payments where we accept card payments. Stripe collects card and device data directly under its own privacy policy; we never see your full card details.
  • Content delivery networks (Bunny CDN and Webflow’s CDN) serve images and video and see the IP address of the device requesting them.
  • AI model providers such as Anthropic and OpenAI, which we use through business and API terms under which our inputs are not used to train their models. We only submit personal data to them when a project needs it and we have agreed that with you.
  • Professional advisers and authorities such as accountants, lawyers, courts or regulators, where the law requires it or to protect our rights.

If Deduxer is ever merged, acquired or sold, personal data may be transferred to the new owner under the same protections.

5. International transfers

Some of the providers above are based in the United States or store data there. Where data leaves the European Economic Area, we rely on the European Commission’s Standard Contractual Clauses, on the EU-US Data Privacy Framework where the provider is certified, or on another lawful transfer mechanism.

6. How long we keep data

  • Enquiries and chat messages that do not lead to a project: up to 24 months after our last contact, so we can pick the conversation back up.
  • Client and contract data: for the engagement and afterwards for as long as accounting, tax and limitation rules require, typically up to ten years for invoices and contracts.
  • Analytics data: per each provider’s retention settings, currently up to 14 months in Google Analytics.
  • Marketing consent: until you withdraw it.

When data is no longer needed, we delete or anonymise it.

7. Your rights

Under the GDPR you can ask us to:

  • give you access to the personal data we hold about you;
  • correct data that is inaccurate or incomplete;
  • delete your data, where we no longer have a reason to keep it;
  • restrict how we use it while a question about it is resolved;
  • hand over the data you gave us in a portable, machine-readable format;
  • stop processing based on legitimate interest, including for direct marketing, which we will always honour;
  • withdraw consent at any time, without affecting what was done before you withdrew it.

To exercise any of these rights, email hi@deduxer.studio. We will reply within one month. We may need to verify your identity first. You also have the right to lodge a complaint with the data protection authority in the EU country where you live or work.

8. Security

We protect personal data with technical and organisational measures appropriate to the risk: encrypted connections, access limited to the people who need it, two-factor authentication on our accounts, and providers chosen for their security practices. No system is completely secure, so if you think your data has been compromised, please tell us straight away.

9. Children

The Website and the Services are for businesses and for adults. We do not knowingly collect personal data from anyone under 18. If you believe a minor has given us data, contact us and we will delete it.

10. Links to other websites

The Website links to client projects, partners and social networks. Their privacy practices are their own, so please check their policies before sharing data with them.

11. Changes to this Policy

We may update this Policy as the Website and our tools evolve. The current version, with its effective date, is always published here. If a change materially affects how we use your data, we will let existing clients know by email.

12. Contact

Deduxer S.R.L.
hi@deduxer.studio

Our Terms of Service describe the rules that apply to the Website and to our weekly bundles.