Privacy Policy

Last updated: 7 June 2026

Badir Studio ("we", "us", "our") operates badir.studio. This policy explains what data we collect, how we use it, and your rights under the New Zealand Privacy Act 2020.

1. What we collect

• Waitlist & community signups: Email address (and name, if you provide it)
• Project discovery survey: Name, email, role, business name, website, project details, budget range, and referral source
• Assessments & scorecards (e.g. AI Reality Check, You & AI, Builder Readiness, Revert Journey, Marketing Health): your answers, your score and per-area breakdown, any optional free-text comment you write, an optional segment selection (e.g. business size or stage), and — if you choose to enter it on the results step — your name and email. The referral source of your visit (a ?src= tag in the link) may also be recorded.
• Analytics: Page views, referrer URL, browser type, and country — via Vercel Web Analytics and Humblytics, both of which are cookie-free and do not identify you personally

2. How we use your data

• To respond to your project inquiry within 48 hours
• To send a confirmation email when you join the waitlist, community, or submit an assessment
• To send you a short series of follow-up emails with tips and resources relevant to your results, where you have given your email and consented (you can unsubscribe from these at any time — see Section 6)
• To invite you to the Badir builder community
• If you contact us or opt in via WhatsApp, to follow up with you there
• For product and audience research — understanding, in aggregate, the challenges builders and small businesses face with AI so we can build better resources. Where we quote or share findings, we do so anonymously and in aggregate unless you have given specific permission to attribute a comment to you.
• To notify our team of new signups and submissions, and to understand which pages are visited and improve the site

We do not sell, rent, or share your personal data with third parties for their own marketing.

3. Third-party services

• Vercel (hosting, serverless functions, and Web Analytics) — Privacy Policy
• Vercel KV / Upstash (the database where we store assessment responses and email subscriptions) — Privacy Policy
• Resend (transactional and follow-up email) — Privacy Policy
• Humblytics (cookie-free website analytics) — Privacy Policy
• Google Fonts (font delivery) — Privacy Policy

4. Data storage, retention, and security

Assessment responses and email subscriptions are stored in a database (Vercel KV / Upstash Redis). Submission notifications are also sent to us by email via Resend, and brief request logs are kept in Vercel's function logs. We retain your assessment response and email until you unsubscribe or ask us to delete it, after which we remove it from our active records. Anonymous, aggregated research insights (with no personal identifiers) may be kept beyond that point.

All data is transmitted over HTTPS. We apply security headers (CSP, HSTS, X-Frame-Options) to protect the site.

5. Your rights (NZ Privacy Act 2020)

You have the right to:

• Access any personal data we hold about you
• Correct inaccurate data
• Request deletion of your data — we will remove your email subscription, your stored assessment response, and any free-text comment, and exclude your comment from any future research output

To exercise any of these rights, email hello@badir.studio.

6. Unsubscribe & opt-out

Every follow-up email includes an unsubscribe link that immediately stops further emails. To opt out of WhatsApp follow-ups, reply STOP or message us. You can withdraw consent at any time, and doing so will not affect any other use of the site.

7. Cookies

We do not use cookies. Both Vercel Web Analytics and Humblytics are cookie-free and do not track individual users.

8. Changes

We may update this policy. Changes will be posted on this page with an updated date.

9. Contact

Mustafa Kivanc Demirsoy
Badir Studio
Tauranga, New Zealand
hello@badir.studio