Privacy policy

PRIVACY POLICY Effective September 24, 2026 Who operates this website Nazem Jaafar operates Sunrise Web Studio in Florida, United States. For privacy questions and requests to access, correct, obtain a copy of, or delete personal information, email contact.sunrisewebstudio@gmail.com. General service and website-handover inquiries may be sent to ssevcnstock@proton.me. Information collected We collect account names, email addresses, securely hashed passwords, verification status, project briefs and asset links, support requests, messages, subscription and credit balances, billing references, and service timestamps. Our hosting infrastructure may record IP addresses and technical request information. The application uses hashed identifiers derived from IP addresses and account information to limit abusive requests. How information is used We use information to create and secure accounts, verify email addresses, reset passwords, design and manage websites, communicate about projects, process orders, manage subscriptions and credits, prevent abuse, and maintain necessary business records. Where applicable law requires a legal basis, these activities rely on performing our agreement, meeting legal obligations, and legitimate interests in operating and securing the service, subject to your applicable rights. Payments and service providers Payments are entered on Stripe-hosted pages. This website does not store full card numbers or card security codes. Stripe processes payment information and maintains its own records under its applicable privacy terms. We receive billing identifiers, payment status, and subscription information needed to provide services. 20i provides website hosting, database storage, and server email services. Messages sent to our published contact addresses are handled by the corresponding email providers, including Google and Proton. Providers receive information needed to deliver their services. Information may also be disclosed where necessary to comply with legal obligations, address fraud or security incidents, or establish or defend legal claims. We do not sell personal information or use this website's account data for targeted advertising. Cookies and security The website uses an essential session cookie for sign-in and form protection. The current application does not include advertising trackers or marketing analytics. We use HTTPS, password hashing, access controls, and request protections. No system can guarantee absolute security. Avoid including unnecessary sensitive information in briefs, messages, or linked files. Retention and the seven-day handover window We retain account and project information while providing services. After hosting ends, customers have seven calendar days to request website files or an export of account and project information. Contact the service email for website files and domain handover, or the privacy email for personal-data requests. A request received during that period remains valid while it is being processed. After that window, project files, briefs, and messages are eligible for removal as part of our manual cleanup process; continued availability is not guaranteed. This is not a promise that every record or backup is automatically erased on day eight. Accounts still supporting other active projects or unused purchased credits may remain available. We retain the limited records necessary to honor non-expiring credits. Invoices, transaction and consent records, and information needed for tax obligations, disputes, fraud prevention, or other legal obligations may be kept longer for those purposes. Hosting logs and backups may remain until the relevant provider's retention or backup cycle removes them. Expired application rate-limit records are periodically cleared. Third-party providers may retain their own records under their policies and legal obligations. Your requests Email contact.sunrisewebstudio@gmail.com to request access, correction, an export, or deletion. We may ask for information reasonably necessary to verify your identity and authority. We respond as required by applicable law and explain any records we must retain. The seven-day file-handover window does not limit statutory privacy rights; you may submit a privacy request later, although some project files may already have been removed. Depending on where you live, you may also have rights to object, restrict processing, or complain to an appropriate regulator. International processing We operate in the United States, and our providers may process information in other countries where they operate. Privacy laws may differ between locations. We use applicable contractual and legal safeguards where required for such processing. Policy changes We will update the effective date when this policy changes and provide additional notice of material changes where required. Contact contact.sunrisewebstudio@gmail.com with privacy questions.