Privacy Policy

Effective date: August 8, 2026·Last updated: August 8, 2026

This Privacy Policy describes how Femi Studio LC ("Femi Studio," "we," "us," or "our") collects, uses, and shares personal information when you visit https://femi.studio (the "Site") or use the Client Space service (the "Service").

If you do not agree with this policy, please do not use the Site or the Service.

1. Who we are

Femi Studio LC is a Maryland limited liability company.

We are the controller of the personal information described in this policy: information about visitors to the Site, people who contact us or book a call, and the clients who hold accounts in Client Space.

This policy covers the Site and Client Space. It does not replace the agreement under which we deliver client work. Where we handle material inside a client engagement, the signed services agreement or statement of work governs, and it prevails over this policy if the two ever conflict.

2. Information we collect

Information you provide to us:

  • Enquiry information: when you use a contact or booking form, the name, email address, company, and whatever you choose to write in the message.
  • Account information for Client Space: your name, business name, email address, and sign-in credentials.
  • Billing information: processed by our payment provider (Stripe). We do not store full card numbers.
  • Communications with us: support requests, emails, and feedback.

Material you put into Client Space:

  • Messages you send us and files you upload for a project.
  • Answers to project questionnaires, and your responses to proposals, deliverables, and invoices.
  • Credentials you choose to store in the vault, such as a domain registrar or hosting login. Vault entries are encrypted before they are stored, using a key held only on our server and never written to the database or sent to a browser. Only you and we can reveal them, and each reveal is an explicit action.

You decide what goes into Client Space. Please do not upload material you do not need us to have, and do not store a credential there when a scoped, revocable one would do.

Information collected automatically:

  • Usage data: pages visited, features used, and interactions with the Site and Service.
  • Device and log data: IP address, browser type, operating system, and error logs.
  • Analytics: we use privacy-respecting analytics configured to operate without advertising cookies. We do not use third-party advertising trackers on the Site.

3. How we use information

We use personal information to:

  • Provide, operate, maintain, and improve the Site and the Service;
  • Respond to enquiries, prepare proposals, and schedule and hold calls with you;
  • Deliver, manage, and invoice the custom software, AI integration, and web design work you engage us for;
  • Set up and manage accounts, process payments, and send transactional messages;
  • Provide customer support;
  • Monitor for security, prevent fraud and abuse, and enforce our terms;
  • Comply with legal obligations.

AI processing. We use AI tools to help deliver client work. Where we send client material to an AI provider, we use commercial API plans whose terms do not permit the provider to train its generally available models on submitted data. We do not put vault credentials into AI tools, and we do not use consumer chat products for confidential client material. AI output is reviewed by a person before it reaches you. We do not sell personal information.

4. How we share information

We share personal information only with:

  • Subprocessors and service providers that help us deliver the Service (hosting, databases and file storage, AI model providers, payments, email delivery, scheduling, analytics, error monitoring, and security). Each is bound by contractual obligations to protect the information and use it only to provide services to us. We will name the providers involved in your engagement on request.
  • Legal and safety recipients, where required by law, subpoena, or to protect rights, safety, or the integrity of the Service.
  • A successor entity in connection with a merger, acquisition, or sale of assets, subject to this policy.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

5. Data retention

We retain personal information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Enquiries that do not become engagements are kept for up to two years and then deleted. Project material in Client Space is kept for the life of the engagement and for 30 days after it ends, so you can export it, unless your services agreement sets a different period or we are required to keep records longer. You can ask us to delete a vault entry at any time and we will remove it immediately, and we ask you to rotate any credential you shared with us once a project closes.

6. Security

We use administrative, technical, and physical safeguards appropriate to the nature of the information, including encryption in transit, encrypted credential storage, access controls, and logging. Client Space is reachable only after you sign in, and each client account sees only its own project, files, and messages. Vault entries are sealed with authenticated encryption (AES-256-GCM) before they are written, using a key held in server configuration that is never stored in the database and never sent to a browser; a tampered entry fails to decrypt rather than returning wrong data. No system is perfectly secure, and we cannot guarantee absolute security.

7. Your rights and choices

Depending on where you live, you may have rights to:

  • Access the personal information we hold about you;
  • Correct inaccurate information;
  • Delete your information;
  • Receive a portable copy of your information;
  • Object to or restrict certain processing;
  • Opt out of the sale or sharing of personal information (we do not sell or share as those terms are defined under applicable US state laws);
  • Not be discriminated against for exercising these rights.

To exercise any of these rights, email hello@femi.studio. We will verify your request and respond within the timeframe required by applicable law. You may also authorize an agent to act on your behalf. If we deny your request, you may appeal by replying to our decision.

Residents of the EEA, UK, or Switzerland may also lodge a complaint with their local supervisory authority.

8. International transfers

We are based in the United States, and information is processed in the United States.

9. Children

The Site and the Service are intended for business use and are not directed to anyone under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided us personal information, contact us at hello@femi.studio and we will delete it.

10. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page with a revised "Last updated" date, and for material changes we will provide additional notice (such as email to account holders). Continued use of the Service after changes take effect constitutes acceptance.

11. Contact us

Femi Studio LC
Email: hello@femi.studio
Support: https://femi.studio/work-with-us
1190 Winterson Rd, Suite 200 PMB 1049, Linthicum Heights, MD 21090, United States