Privacy Policy

This site (sevan.studio) is operated by Maria Asatryan (Individual contractor, operating as Sevan Studio), based in Yerevan, Armenia. Contact: maria.k.asatryan@gmail.com.

We collect the minimum information needed to respond to your inquiry and run a working business relationship:

• Lead form submissions:name, email, Shopify URL, Amazon storefront URL, and the free-text description of what you’re working on, when you submit the audit form.
• Client business data: if we begin a working relationship, we may also store contact information, store access credentials provided to us, retainer terms, and notes relevant to delivering the engagement.
• Functional cookies: a single httpOnly, signed authentication cookie is used to keep the operator signed into the private admin area. No tracking cookies are set on visitors to the public site.
• Server logs: the hosting provider (Vercel) may retain standard request logs (IP address, user agent, timestamps) for operational and security purposes.

• To respond to audit requests and run client work.
• To send invoices, contract documents, and reports.
• To improve the service offering based on patterns we see across engagements (in aggregated, non-identifying form).
• To comply with applicable tax, accounting, and legal requirements.

We do not sell your data, share it with marketers, or send unsolicited promotional emails.

The site uses Vercel Analytics and Vercel Speed Insights— privacy-preserving first-party analytics that count anonymous page views and measure page-load performance. No cookies are set for tracking purposes, no cross-site identifiers, no third-party ad pixels, and no session-replay tools. Visitor data is aggregated and cannot be linked back to an individual.

We will not introduce ad-network tracking, behavioral profiling, or session-replay tools. If the analytics stack changes materially, this policy will be updated.

Lead and client data is stored in a Supabase Postgres database hosted in the European Union. Static site assets are served through Vercel’s global edge network. Both providers maintain their own security and compliance documentation.

Lead submissions are kept until you ask us to delete them, or until they’re no longer useful for follow-up (typically up to 24 months). Client records, contracts, and invoices are retained for the duration of the engagement plus the period required by applicable tax law (typically up to 7 years from the close of the relevant tax year).

Depending on where you live, you may have rights under GDPR (EU/UK), CCPA (California), or similar laws — including the right to access, correct, port, or delete your personal data, and to object to certain processing. To exercise any of these, email maria.k.asatryan@gmail.com. We respond within 30 days.

We follow standard practices: data is transmitted over HTTPS; the admin area is protected by signed authentication cookies; the database is accessed only via a server-side service-role key that is never exposed to browsers; sensitive client credentials are stored only where necessary and removed at the end of the engagement.

The service is intended for businesses and is not directed at children under 16. We do not knowingly collect personal data from anyone under 16.

We may update this policy from time to time. Material changes will be noted at the top with an updated date. Continued use of the site after a change constitutes acceptance of the updated policy.

Questions about this policy, or to exercise your rights, contact maria.k.asatryan@gmail.com.