Privacy Policy

1. Overview & Commitment

At Rajwaa Studio ("we", "us", or "our"), we respect your privacy and are committed to protecting any personal and business information you share with us. This Privacy Policy outlines our transparent practices regarding data collection, usage, and safeguarding when you visit our website (rajwaa.my.id) or engage our web development, design, and software engineering services.

2. Information We Collect

We collect information only to the extent necessary to deliver high-quality web engineering services and communicate effectively with our prospective and active clients:

• Project Inquiry Information: When you submit a project inquiry through our contact form, email, or WhatsApp, we collect your full name, work email address, company or organization name, project requirements, budget preferences, and desired timelines.
• Client Project Assets: During an active engagement, you may provide design assets, API keys, brand guidelines, or business copy necessary for developing your application.
• Technical & Telemetry Data: We may collect non-identifiable browser metadata, page visit durations, and referring URLs solely to monitor website performance, prevent denial-of-service attacks, and improve user experience.

3. How We Use Your Information

We use your information strictly for legitimate commercial and project delivery purposes:

• To evaluate project scope, formulate technical proposals, and provide fixed-price quotations.
• To execute contract deliverables, design interfaces, write code, and coordinate milestone staging reviews.
• To invoice services, process milestone payments, and provide handover documentation.
• To perform ongoing maintenance and technical monitoring under active Website Care Plans.
• Zero Data Sale Guarantee: We never sell, rent, monetize, or trade your personal or business data to third-party data brokers or marketing advertisers under any circumstances.

4. Client Confidentiality & Non-Disclosure

All proprietary business logic, unreleased product ideas, and technical requirements shared during consultations or active engagements are treated with strict confidentiality. If required, we routinely execute reciprocal Non-Disclosure Agreements (NDAs) before discovery discussions take place.

5. Third-Party Infrastructure Providers

To maintain production reliability, our digital services interface with industry-standard, security-certified cloud infrastructure providers:

• Vercel Inc.: High-availability edge hosting, serverless functions, and static content distribution.
• Supabase / PostgreSQL: Secure cloud database storage with encrypted transmission (TLS/SSL) and Row Level Security.
• Resend SDK: Transactional email delivery for form notifications and client communications.
• WhatsApp Business (Meta): Optional client messaging and inquiry communication channels.

6. Data Security & Retention

We implement industry-standard organizational and technical safeguards, including HTTPS transport encryption, encrypted local secret vaults for environment configurations, and access restrictions limited exclusively to lead engineering personnel. We retain project inquiry records only as long as necessary to maintain active business relationships or fulfill statutory accounting obligations.

7. Your Rights Regarding Your Data

You have the right to request access to the personal data we hold about you, request corrections to inaccurate records, or request complete deletion of your contact records from our inquiry archives. To exercise any of these rights, simply email us at pr@rajwaa.my.id.

8. Contact Us

If you have any questions or concerns regarding this Privacy Policy or our engineering privacy practices, please contact our studio: