Privacy Policy
Last updated: August 27, 2026
This is a plain explanation of what we collect, why, and what we do with it. Vilas Studio is a web design studio operating in the United States.
What we collect
When you fill out our intake form, we collect your business name, your name, your business email, your phone number if you give it, your business address or service area, the domain you want, and whatever else you tell us about your business. When you use our project lookup, we collect the reference code and email you enter.
If you email us, we keep the email.
Why we collect it
To answer you, to quote the work, to build your site, and to run your project. That’s it. We don’t sell it, rent it, or share it with anyone for advertising.
This policy covers vilas.studio only. Sites we build for clients are run by those clients and have their own policies.
Who else sees it
We use a small number of service providers to run the studio. Each one only sees what it needs to:
- Vercel, which hosts this site and keeps standard server logs
- Supabase, which stores intake submissions and project records
- Resend, which sends the emails our forms generate
- Stripe, which processes payments when you pay an invoice
We don’t share personal information with anyone for their own direct marketing.
Cold outreach
If we emailed you first, we found your business through public sources — Google Business Profile, your website, business directories, or a business contact data provider. We keep your business name, email, and public listing details so we don’t contact you twice. Reply “no thanks” or “unsubscribe” to any email from us and we stop contacting you and delete you from our list. No follow-up, no exceptions.
Do Not Track
We don’t track visitors across other websites, so there is nothing for a Do Not Track signal to turn off. We don’t allow third parties to track visitors across other sites through this one.
How long we keep it
Intake submissions and project records: for as long as you’re a client, and two years after. Cold outreach records: until you opt out, then only enough to keep you off the list. Ask us to delete anything sooner and we will, unless we’re required to keep it.
Security
We keep your information on password-protected, access-controlled services and only give access to people who need it to do the work. No system is perfect, but we take this seriously and we’d tell you promptly if something went wrong.
Children
This site is for business owners. We don’t knowingly collect personal information from anyone under 16.
Your choices
Email us and we’ll tell you what we have on you, correct it, or delete it. No form to fill out.
Changes
If we change this policy in a way that matters, we’ll update the date at the top and post the new version here before it takes effect.