Octopuss Studio ("we", "us", "our") operates octopuss.studio. This policy explains what personal data we collect, why, and what rights you have.

1. WHO WE ARE
Data controller: Octopuss Studio.
Contact: hello@octopuss.studio

2. WHAT DATA WE COLLECT
- Contact data you give us: name, email address, company, and the content of your message when you use the contact form or email us.
- Project materials: briefs, brand assets, product photos, logos, reference images or other files you send us to create AI content.
- Technical data: IP address, browser type, device, pages visited and approximate location, collected through cookies and analytics tools.
We do not intentionally collect sensitive personal data. Please do not send it to us.

3. WHY WE USE YOUR DATA
- To answer your inquiries and provide quotes.
- To deliver and manage projects you commissioned.
- To invoice and keep records as required by law.
- To improve and secure our website.
- To send updates about our services only if you agreed to them.

4. LEGAL BASIS (where GDPR or similar laws apply)
Consent, performance of a contract, legitimate interests (running and securing the site), and legal obligations.

5. AI-GENERATED CONTENT AND YOUR MATERIALS
We use third-party AI tools to create images and videos. Materials you send may be uploaded to these tools only as needed to produce your project. We do not use your confidential materials to publicly train AI models, and we do not publish them without your written permission. Our portfolio may include concept projects; those are labeled as AI-generated and not affiliated with any brand shown.

6. COOKIES AND ANALYTICS
We use cookies to make the site work and, with your consent where required, to measure traffic Google Analytics. You can block or delete cookies in your browser settings.

7. WHO WE SHARE DATA WITH
We do not sell your data. We share it only with service providers that help us run the site and projects: website hosting (Namecheap), email (Namecheap), analytics (Google Analytics), and AI generation tools. These providers may process data outside your country. We take reasonable steps to make sure your data is protected.

8. HOW LONG WE KEEP DATA
Inquiries: up to 24 months. Client project files: up to 12 months after the project ends, unless you ask us to delete them sooner. Invoices and accounting records: as long as the law requires.

9. YOUR RIGHTS
Depending on where you live, you may have the right to access, correct, delete or export your data, to object to or restrict processing, and to withdraw consent at any time. To use these rights, email hello@octopuss.studio. We will reply within 30 days. You may also complain to your local data protection authority.

10. SECURITY
We use reasonable technical and organizational measures to protect your data. No online method is 100% secure.

11. EXTERNAL LINKS
Our site may link to other websites. We are not responsible for their privacy practices.

12. CHANGES TO THIS POLICY
We may update this policy. The date at the top shows the latest version.

13. CONTACT
Questions? Email hello@octopuss.studio.