Legal
Privacy Policy
Last updated: October 8, 2026
1. Introduction
Twilight Motion Studio ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our client portal, or engage our design and development services. We adhere strictly to data protection regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
2. Information We Collect
We collect several types of information from and about users of our services, including:
- Identity & Contact Data: Name, email address, company name, and role when you submit an inquiry, book a call, or request a free website audit.
- Authentication Data: If you sign in via third-party providers (e.g., Google), we collect basic profile information such as your name, email address, and avatar to provision your account. We do not access your contacts, calendar, or files.
- Project & Commercial Data: Details provided through our "Start a Project" flow, including budgets, timelines, briefs, and proprietary assets required to deliver our services.
- Technical & Usage Data: IP addresses, browser types, operating systems, and page interaction data collected automatically to ensure the security and performance of our infrastructure.
3. How We Use Your Data
We process your personal data under the following legal bases and for the following purposes:
- Performance of a Contract: To provide you with proposals, execute design and development services, and manage your account.
- Legitimate Interests: To improve our website UX, monitor infrastructure health, and prevent fraudulent activity.
- Consent: To send you marketing communications or newsletters (which you can opt out of at any time).
4. Data Sharing and Third Parties
We never sell your personal data. We may share your information with trusted third-party service providers who assist us in operating our business, under strict confidentiality agreements. These include:
- Cloud hosting and database providers (e.g., Vercel, Supabase).
- Communication and client management tools.
- Analytics providers to monitor site performance.
We may also disclose your information if required to do so by law or in response to valid requests by public authorities.
5. Data Retention and Security
We retain personal data only for as long as necessary to fulfill the purposes we collected it for, including for satisfying any legal, accounting, or reporting requirements. Our infrastructure employs industry-standard security measures—including TLS encryption in transit and AES-256 encryption at rest—to protect against unauthorized access, alteration, disclosure, or destruction of your data.
6. Your Data Rights
Depending on your location (such as under GDPR or CCPA), you have the right to:
- Request access to your personal data.
- Request correction of incomplete or inaccurate data.
- Request erasure (the "right to be forgotten") of your personal data.
- Object to or restrict the processing of your data.
- Request the transfer of your data to another party (data portability).
To exercise any of these rights, please contact us using the details below. We aim to respond to all legitimate requests within 30 days.
7. International Data Transfers
As a globally collaborating studio, your information may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction. We ensure that appropriate safeguards, such as Standard Contractual Clauses, are in place for cross-border transfers.
8. Changes and Contact Info
We may update this policy periodically. The updated version will be indicated by an updated "Last updated" date. If you have any questions or wish to exercise your rights, please contact our Data Privacy team at: