Initializing Session
Legal Framework
Privacy Policy &
Data Processing
Stratify Studio (SMC-Pvt) Ltd. — Effective Date: April 26, 2026.
Agreement & Scope
This Comprehensive Privacy Policy ("Policy") governs the data collection, processing, storage, and protection practices of Stratify Studio (SMC-Pvt) Ltd. ("Stratify Studio", "we", "our", or "us"). By engaging our services, submitting forms on our website, or creating an account within our proprietary Client Portal, you ("Client", "User", or "you") explicitly consent to the terms outlined in this legally binding document.
Limitation of Liability & Indemnification
To the maximum extent permitted by applicable law, Stratify Studio assumes no liability for indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, or business opportunities arising from unauthorized access, use, or alteration of your transmissions or data. Clients agree to indemnify and hold harmless Stratify Studio against any claims arising from the Client's failure to secure their own credentials or data post-handover.
1. Information We Collect
To architect, develop, and manage your digital ecosystem and brand identity effectively, Stratify Studio requires specific categories of information. We classify this into two main data types:
1.1.Personal Identification Information (PII)
For the execution of legal documents, service agreements, and financial processing, we collect explicit personal identifiers. This includes, but is not limited to, your full legal name, active email addresses, primary contact phone numbers, and physical operational or billing addresses. The Client warrants that all provided PII is accurate and legally obtained.
1.2.Commercial and Project Information
To fulfill our service obligations, we collect detailed commercial intelligence regarding your enterprise. Depending on the scope of the Service Agreement, this may include your brand name, trade secrets shared under separate Non-Disclosure Agreements, target audience demographics, geographic service areas, founding date, employee headcount, corporate hierarchy, and the identities of key decision-makers and owners.
2. How We Collect Information
Our data collection methodology is designed to respect the privacy of casual visitors while ensuring the maximum security of authenticated users.
2.1.Active Collection (Client Submissions)
The vast majority of data is collected actively when you voluntarily submit information through our consultation request forms, execute a Service Agreement, or manually input data into your Client Portal profile.
2.2.Passive Collection (Security & Auditing)
We do not deploy aggressive technical tracking algorithms on unauthenticated users browsing our public portfolio or service pages. However, upon authentication (logging into the Client Portal), we immediately collect your IP address, browser footprint, and session timestamps. This passive collection is strictly enforced for security logging and audit purposes.
Transparency in Security Logging
Unlike standard industry practices that hide security data from the user, Stratify Studio provides you with direct access to these security logs within your Client Dashboard. You are empowered, and fundamentally responsible, to monitor your own account activity. We only review these logs in the event of a reported or detected severe security breach.
3. How We Use Your Information
Stratify Studio strictly limits the use of your data to business operations, service enhancement, and communications.
Service Execution: To deliver website development, brand engineering, UI/UX design, and consulting services as outlined in your contract.
Financial Processing: To generate invoices, track milestone completions, and process payments.
Marketing & Communications: We utilize non-sensitive commercial data to deliver targeted advertisements, email marketing campaigns, and technical newsletters to keep you informed of ecosystem updates.
Artificial Intelligence Training: To optimize our internal workflows and improve client outcomes, we may utilize anonymized, non-sensitive project data and metadata to train our internal Artificial Intelligence (AI) algorithms. Sensitive personal data, financial data, and proprietary trade secrets are strictly excluded from AI training sets.
4. Data Sharing and Third-Party Disclosures
Stratify Studio operates under a strict "No Sale of Personal Data" mandate. We do not sell, rent, or lease your data to data brokers. However, to operate our agency efficiently, we share necessary information with verified third-party infrastructure partners:
Payment Gateways: Data is shared with secure, regulated financial institutions (including Payoneer and associated gateways) specifically to process your milestone payments and retain financial compliance.
Analytics Providers: We utilize Google Analytics and Microsoft Clarity to map user journeys and optimize website performance. This data is generally anonymized.
Transactional Communications: We utilize Resend and similar secure SMTP protocols to deliver critical portal notifications, invoices, and password resets directly to your inbox.
Legal Disclaimer: Stratify Studio bears no liability for the data breaches, downtime, or policy violations of these independent third-party processors. By using our services, you agree to the respective privacy policies of these third-party vendors.
5. Data Storage, Security, and Compartmentalization
As a highly technical agency, we prioritize self-managed and self-hosted infrastructure to mitigate the risks associated with multi-tenant cloud vulnerabilities.
5.1.End-to-End Access Controls
We enforce rigorous internal access policies. Your project files, credentials, and sensitive data are strictly compartmentalized. No single team member, developer, or designer has access to the entirety of your project storage at one time. Access is granted on a strict "need-to-know" basis for the execution of specific tasks.
5.2.Executive Privilege
Complete, unredacted access to the Client Portal database and project ecosystem is restricted solely to Executive Leadership (Director, CEO, and CTO) for administrative, legal, and emergency oversight.
Security Acknowledgment
While we implement enterprise-grade security protocols, no internet-transmitted data or digital storage system is 100% secure. Stratify Studio cannot guarantee absolute security and shall not be held liable for unauthorized access resulting from force majeure events, advanced persistent threats (APTs), or Client-side negligence (e.g., compromised passwords).
6. Cookies and Tracking Technologies
Our digital platforms utilize localized storage and cookies to distinguish you from other users. We categorize these into two types:
Essential Cookies (Strictly Necessary): These are required for the operation of the Next.js application and the Client Portal. They govern user authentication, session management, and security protocols. Disabling these will render the Client Portal inaccessible.
Marketing & Analytics Cookies: Used to track the performance of our marketing campaigns and understand user interaction with our public site. These are managed separately and utilized to refine our service offerings.
7. International Data Transfers and Global Hosting
Due to the global nature of our client base (including operations in Australia, the UK, the USA, and Pakistan) and the requirement for robust digital infrastructure, your project data will be transferred across international borders.
We utilize globally recognized hosting providers, including but not limited to AWS, Interserver, Bluehost, and Ultahost, depending on the architectural requirements of your specific build. By executing a contract with Stratify Studio, you explicitly consent to the transfer, processing, and storage of your data across these international virtual private servers (VPS) and shared hosting environments.
8. User Rights and Account Management Restrictions
We provide you with tools to manage your data, subject to strict legal and operational boundaries.
8.1.Active Project Lock
To ensure project continuity and prevent accidental deletion of critical infrastructure, Clients are strictly prohibited from deleting their accounts or core data while a Service Agreement or project is active. Account deletion is programmatically locked during ongoing project phases.
8.2.Post-Project Deletion
Once all projects are marked complete, finalized, and all financial obligations are cleared, you may access your profile settings to initiate an account deletion. However, this deletion is not absolute. Stratify Studio reserves the legal right to retain generated invoices, brief project summaries, contracts, and necessary files required for tax compliance, legal defense, and SECP (Securities and Exchange Commission of Pakistan) regulations.
9. Data Retention Policy and Handover Liability
Stratify Studio is an engineering and branding agency, not a permanent data warehousing facility. Our data retention policy is aggressive by design to protect both parties.
Upon final delivery, the Client assumes 100% responsibility for data backup, server maintenance, and data integrity. Stratify Studio is legally absolved of any liability for data loss, server corruption, or business interruption occurring after the final handover.
The 3-Month Purge Rule
Following the completion of a project and the expiration of any agreed-upon maintenance timelines, Stratify Studio will hold your project data locally for a maximum of three (3) months. In specific circumstances, we reserve the right to securely erase all local copies of your code, assets, and databases much sooner.
10. Governing Law and Dispute Resolution
This Privacy Policy, and any disputes arising from the collection or processing of data, shall be governed by and construed in accordance with the laws of the Islamic Republic of Pakistan, without regard to its conflict of law provisions. Any legal action or proceeding related to this Policy shall be brought exclusively in the competent courts located in Islamabad Capital Territory, Pakistan.
11. Contact Information and Legal Inquiries
Stratify Studio (SMC-Pvt) Ltd. is committed to transparent communication. For formal requests regarding your data, privacy concerns, or security logs, you must contact our executive or support teams directly.
Stratify Studio (SMC-Pvt) Ltd.
Islamabad Terminal (Sector F-7)
Islamabad Capital Territory, Pakistan
Official Contact Channels:
Phone & WhatsApp: +92 318 3454509 / +92 348 0201226
Email Routing:
Legal & Executive: director@stratifystudio.com
Technical Support & Data Logs: support@stratifystudio.com
Operations: samar@stratifystudio.com
Stratify Studio reserves the right to modify this Privacy Policy at any time. Changes will be communicated via the Client Portal or via email. Continued use of the services post-modification constitutes legal acceptance of the revised terms.
Have a project in mind?
Reach out to discuss your setup. We read every message and get back within a few hours.
Review our user agreements
Read the specific definitions guiding platform access metrics.
Read our knowledge hub
We write simple guides on technical scaling, modern design workflows, and better software practices.