Privacy policy

Bitflake Studio (SIA Bitflake, Reg. Nr. 40203353166), based in Latvia, is the controller of personal data processed through this website. You can reach us at [email protected].

We collect information that you provide and a limited set of technical data when you visit the site:

• Your name and email address (when you start the chat intake)
• Chat conversation content and project requirements
• Technical data: IP address, user-agent, language, referring URL
• Analytics and advertising identifiers (only with your consent)

We use the information we collect to:

• Respond to your project inquiries and prepare a quote
• Send a confirmation email after the chat completes
• Operate, secure, and improve the website (rate limiting, abuse prevention)
• Measure how the site is used and how marketing channels perform — only if you accept analytics or marketing cookies

We rely on the following legal bases under the GDPR:

• Consent (Art. 6(1)(a)) — for analytics and marketing cookies, including Google Analytics, Meta Pixel and the Meta Conversions API
• Pre-contractual measures (Art. 6(1)(b)) — for handling your project intake and replying with a quote
• Legitimate interests (Art. 6(1)(f)) — for keeping the site secure, preventing abuse, and basic server logs

We use a small set of cookies and similar technologies. You can review them in detail in our Cookie Policy and change your choice at any time from the cookie preferences link in the footer.

We share data only with processors that help us run the service:

• OpenAI — processes chat messages to generate replies (data is not used for model training)
• Resend — delivers the project inquiry and confirmation emails
• Cloudflare Turnstile — bot protection on the intake form
• Google (Analytics) and Meta (Pixel + Conversions API) — only when you consent to analytics/marketing cookies. The Meta Pixel uses Automatic Advanced Matching: form fields you fill in on this site (currently: email) are hashed in your browser before being sent to Meta to improve attribution match quality
• Supabase / hosting providers in the EU — database and infrastructure

Some of the providers above (Google, Meta, OpenAI) are based in the United States. We rely on the EU-U.S. Data Privacy Framework and the European Commission's Standard Contractual Clauses where required.

• Chat conversations and inquiry emails — up to 24 months, then deleted or anonymized
• Analytics data — up to 14 months (GA4 default)
• Server / abuse logs — up to 90 days

You have the right to access, rectify, erase, restrict or object to the processing of your personal data, and to data portability. You can also lodge a complaint with the Data State Inspectorate (Datu valsts inspekcija) in Latvia.

If you have any questions about this privacy policy or want to exercise your rights, contact us at: [email protected]