Privacy policy

Who we are

Wireframe Studio ("we", "us") runs this website at wireframestudio.io. We're based in Pakistan and work with clients internationally. We decide how the personal information described in this policy is used, which makes us its controller. You can reach us about anything in this policy at build@wireframestudio.io.

What we collect

• Contact form: your name, email address and message, plus your company, phone number, the services you're interested in and your timeline if you give them.
• Voice agent demos: when you start a demo call in your browser, your microphone audio is streamed to our voice platform provider so the agent can respond. The call is recorded and transcribed by that provider. We don't ask for your name during a demo, and we ask you not to share sensitive information.
• Booking a call: if you book through the embedded calendar, the name, email address and any notes you enter are handled by Google Calendar's appointment scheduling.
• Technical data: like every website, our hosting provider processes your IP address, browser type and the pages you request, to serve the site and keep it secure.
• Usage data: Google Analytics records the pages you visit, how you arrived, your approximate location (country and city), device and browser type, and how you interact with pages. It does this using a randomly generated identifier stored in a cookie.

We don't ask for special category information, such as health details, and we ask you not to include it in messages or demo calls.

Do you have to give it to us

No. Everything is optional. On the contact form, we need your name, email address and a message so we can reply; the other fields are up to you. You can use the rest of the site, and read everything on it, without giving us any personal information.

How we use it, and our legal basis

Where UK or EU data protection law applies, each use needs a legal basis. These are ours:

• Replying to your enquiry and arranging a call you ask for: taking steps at your request before a possible contract, and our legitimate interest in answering people who contact us.
• Keeping a record of enquiries so none are lost: our legitimate interest in running the business.
• Running a voice agent demo you start: our legitimate interest in showing prospective clients how our agents work, which you trigger by starting the call.
• Keeping the website working and secure: our legitimate interest in operating a safe website.
• Analytics, to understand which pages are useful and improve the site: our legitimate interest in improving our website. You can object at any time, as described under Cookies.
• Meeting legal obligations, such as tax records if you become a client: legal obligation.

We don't send marketing emails unless you ask us to. We don't make decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects.

Who processes it for us

We use a small number of service providers to run this site. They process personal information on our behalf, under contract, and only for these purposes:

• Vercel: website hosting
• Supabase: database storage for contact enquiries and blog content
• Google Workspace: email and calendar booking
• Resend: delivery of contact form notifications, where enabled
• Retell AI: the voice platform behind our demo agents
• Google Analytics: website usage statistics

We may also disclose information if the law requires it, or to protect our rights, for example in a legal dispute. If the business is ever sold or restructured, information may pass to the new owner under this policy.

International transfers

We're based in Pakistan, and our providers process data in several countries, including the United States and the European Union. So your information may be processed outside the country you live in. Where UK or EU law applies, we rely on recognised safeguards for these transfers, such as the standard contractual clauses and the UK international data transfer addendum, or on adequacy decisions where they exist. You can ask us for more detail on the safeguards used.

Cookies

We use Google Analytics to understand how visitors use this site. When you visit, it sets cookies named _ga and _ga_ followed by an ID, which last up to two years.

To stop Google Analytics, you can block or delete cookies in your browser settings, or install Google's opt-out browser add-on (tools.google.com/dlpage/gaoptout). The site works normally either way.

We don't use advertising cookies, and we haven't enabled Google Analytics' advertising features or data sharing for ads personalisation. Embedded services, such as the Google Calendar booking frame, may set their own cookies when you use them, under their own policies.

How long we keep it

• Enquiries that don't lead to work: 24 months from our last contact with you, then deleted.
• Enquiries that lead to a project: for as long as the engagement lasts, then for as long as we need to meet legal, tax and accounting obligations.
• Voice demo recordings and transcripts: only as long as we need them to review and improve the demo agents, then deleted.
• Analytics data: Google Analytics deletes it automatically after 2 months.
• Hosting logs: kept by our hosting provider for a short period for security and troubleshooting, then deleted.

You can ask us to delete your information sooner, and we will unless the law requires us to keep it.

How we protect it

The site is served only over HTTPS. Enquiries are stored in a database that is locked to our server and can't be read from the website. Access to our systems and provider accounts is limited to the people who need it. No system is perfectly secure, but if a breach ever puts your information at risk we'll tell you and the relevant authorities where the law requires it.

Your rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you and get a copy of it
• have it corrected if it's wrong, or deleted
• object to, or ask us to restrict, how we use it
• receive it in a portable format
• object to analytics, using the options described under Cookies

To use any of these rights, email build@wireframestudio.io. We'll reply within one month and won't charge you. We may need to confirm your identity first.

If you're unhappy with how we've handled your information, please tell us so we can put it right. You can also complain to your data protection authority: in the UK that's the Information Commissioner's Office (ico.org.uk), and in the EU it's the authority in your country.

We don't sell personal information, and we don't share it for cross-context behavioural advertising.

Children

This website is for businesses and isn't directed at children. We don't knowingly collect information from anyone under 18. If you think a child has sent us information, email us and we'll delete it.

Changes to this policy

If we change how we handle personal information, we'll update this page and the date at the top of it. If a change is significant, we'll make that clear on the site.