Privacy Policy

1. Who we are

Align Studio is a two-person design and development studio based in Indonesia, run by Stevani and Gerald. In this policy, "we" and "us" means the two of us. This policy explains what personal information reaches us through this website and our conversations, what we do with it, and the choices you have.

2. The short version

• This website has no user accounts and no advertising trackers. We measure visits with Umami, Google Analytics and PostHog (see section 4).
• We only receive the information you choose to send us, by WhatsApp or email.
• We use it to reply to you and, if we work together, to run your project.
• We never sell your information or use it for advertising.
• You can ask us to show, correct or delete what we hold about you at any time.

3. What we collect

When you contact us

The contact form and the chat prompts on this site do not send anything to a server of ours. When you press send, they open WhatsApp with your message already written out. Nothing reaches us until you send that message in WhatsApp yourself. The form asks for your name and message, and optionally your company and a budget range. Our email address and WhatsApp number are also listed on the site if you prefer to write to us directly.

When you message or email us, we receive what you write plus the details those services show us, such as your name, WhatsApp number or email address.

When we work together

During a project you may share things like brand files, written content, product details, contact details of your team, invoicing details and, where needed, access to tools or accounts so we can build and launch your work. We only ask for what the project needs.

What this site stores in your browser

A few small items are saved in your own browser's storage. They stay on your device and are never sent to us:

• vv-lang: the language you picked, so the site remembers it on your next visit.
• vv-pt: a short-lived flag that plays the page transition animation. It is cleared when you close the tab.
• cx-draft: a draft of the contact form (name, company and message) so you do not lose your text if WhatsApp fails to open. It stays until you clear your browser's site data.

What other services may see

Some of our case study pages load fonts from Google Fonts to show a client's typography. When that happens, your browser connects to Google, which receives your IP address and basic browser information, as with any website request. The company that hosts this website may also keep standard server logs (IP address, browser type, the page requested and the time) to deliver the site and protect it from abuse. We do not use these logs to identify you.

4. Cookies and analytics

We do not use advertising pixels. To see which pages people read, we use three analytics services. Umami Cloud records the page you visit, the site that sent you, your browser, device type and country, without cookies and without storing your IP address. Google Analytics records similar visit information and sets its own cookies (named _ga) to tell repeat visits apart; Google processes this data under its own privacy policy. PostHog records similar visit information plus how pages are used, such as which links and buttons are clicked, and stores its own identifier in cookies and browser storage (named ph_); PostHog processes this data in the United States under its own privacy policy. We only look at the totals, never at individual visitors. Google Analytics and PostHog only load after you choose Accept in the cookie banner. You can change your choice at any time with the Cookies link in the footer, which also removes the _ga and ph_ cookies if you decline. If this ever changes, we will update this policy first and ask for your consent where the law requires it.

5. Why we use your information

We use your personal data only to:

• reply to your message and talk through your project;
• prepare a proposal or quote you asked for;
• carry out and support a project we have agreed on, including invoices and project updates;
• keep the records we are required to keep by law, such as tax and accounting records.

Under Indonesia's Personal Data Protection Law (Law No. 27 of 2022, UU PDP), we rely on these legal bases: your consent when you choose to contact us, the steps needed to prepare or carry out an agreement with you, our legal obligations, and our legitimate interest in running a small business responsibly. These follow the same principles as the GDPR, so they also make sense if you are a client outside Indonesia. You can withdraw your consent at any time. That does not affect anything we did before you withdrew it.

6. Who we share it with

We do not sell, rent or trade your personal data. We share it only in these cases:

• Communication tools: messages you send reach us through WhatsApp (Meta) or our email provider (Google Gmail). These services handle your data under their own privacy policies.
• Project tools: if we work together, we may store project files and messages in the design, development and file sharing tools we use for that project. We will tell you which ones on request.
• The law: if we are legally required to share information with a government authority.

Some of these providers store data on servers outside Indonesia. We only use well-established services that apply recognised data protection safeguards.

7. How long we keep it

• Enquiries that do not turn into a project: we delete the conversation within 12 months of our last contact, or sooner if you ask.
• Client projects: we keep project communication and files for as long as the project and any agreed support last, and then only what we need for our portfolio (with your permission) and for our records.
• Invoices and payment records: for as long as Indonesian tax and accounting rules require.

8. How we protect it

Your information is handled only by the two of us. We keep it in password-protected accounts with two-step verification where available, and we only share access to project files with people who need it for your project. No method of sending or storing data online is completely secure, but we take reasonable care to protect what you share.

9. Your rights

You have the right to:

• know what personal data we hold about you and why;
• get a copy of it;
• correct it if it is wrong or incomplete;
• ask us to delete it;
• withdraw your consent to us using it;
• ask us to pause or limit how we use it.

To use any of these rights, contact us at hi@alignstudio.id or on WhatsApp at +62 815-4977-7368. We may ask you to confirm who you are before we act. We will reply as soon as we can, and always within the time the law allows. If you are not happy with our answer, you can complain to the data protection authority in Indonesia or in your own country.

10. Children

This website and our services are meant for businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us their information, let us know and we will delete it.

11. Links to other websites

Our site links to other websites, such as WhatsApp, client websites and sources in our blog articles. Their privacy practices are their own, so please check their policies when you visit them.

12. Changes to this policy

If we change how we handle personal data, we will update this page and the date at the top. For significant changes that affect clients, we will also tell you directly.

13. Contact us

Questions about this policy or your data? Write to us any time: