Service Privacy Policy
How Krepel Studio handles project requests and client data. This policy covers studio services; individual app policies are available in the Privacy Center.
What data do we collect?
The form collects your name, Telegram username, email, optional company or brand, chosen service, project description, service-specific answers, links, optional files and comments. Questions about Google Play Developer Account readiness appear only for the relevant services.
Krepel Studio collects only data needed to assess requests, communicate with clients and carry out projects.
Data that we do not collect without a real need
- residential address;
- passport data;
- bank details;
- password from a personal Google account;
- other excessive personal data.
The client should not upload passwords, private keys, seed phrases, bank details or other sensitive secrets to the form.
Data storage and retention
- a request that does not become an order is kept for no more than 90 days, then deleted;
- Data for a completed client project is kept for 12 months after completion to preserve the agreement history, fulfill warranty obligations and allow work to continue.
- for 6-Month App Care / 12-Month App Care data is stored for the entire active period of App Care + 12 months after completion;
- API keys, access tokens and other sensitive technical credentials are stored only as long as they are really needed for active work, after which they are deleted, unless otherwise separately agreed for ongoing support;
- requests and attachments are sent through FormSubmit to Krepelstudio@gmail.com and stored in the email system within the agreed retention period. No separate CRM, Notion request database, D1/R2 or studio-owned request storage is used;
What is the data used for?
The data is used only for:
- reviewing requests;
- communication with the client;
- project evaluations;
- clarification and approval of the order;
- development, Google Play publication, update or App Care;
- performance of warranty and support obligations;
- maintaining the necessary history of a specific client project during the agreed storage period.
Krepel Studio does not sell clients’ personal data or use request data for third-party advertising.
Transfer to third parties
FormSubmit receives and forwards your request and attachments to Krepelstudio@gmail.com. Google/Gmail receives and stores the emails and files. FormSubmit uses reCAPTCHA to prevent automated submissions; this step may be handled by Google.
FormSubmit keeps an archive of text submissions for 30 days. Uploaded files are not stored in that archive. This provider retention period is separate from the rules above for emails and attachments received by Krepel Studio.
Data and materials are transferred to other technically necessary services only for the operation of the form, transfer and storage of files, communication or execution of a specific agreed project.
The site does not save contact details, project descriptions or request files in localStorage or sessionStorage. Theme and language preferences are saved separately as site settings. Entered information stays in the form while the page is open; after closing or reloading it, you need to enter it again.
Data and file security
- Krepel Studio saves only the necessary data and files;
- only Krepel Studio and, if necessary, the technical services through which the materials are stored or transmitted have access;
- API keys, access tokens, signing secrets and credentials must not be published in public;
- signing secrets are not stored together with the main project archive;
- if the project requires an API key, token or other credential, send it through a separately agreed channel, rather than the general request form;
- Krepel Studio applies reasonable technical and organizational measures to protect data, but makes no claims about the absolute 100% security of any online system;
- if a material incident involving a particular customer's data is discovered, Krepel Studio will notify the customer as required by the circumstances or applicable law.
Deleting or correcting data
The customer can request the deletion or correction of their personal data earlier if they are no longer needed for an active order, warranty fulfillment or other mandatory purposes.
For this, the client:
- writes to the official email Krepel Studio;
- identify the relevant project or request;
- expressly requests the deletion or correction of the relevant data.
If there is no valid reason to retain the data for an active order, warranty or other mandatory purpose, Krepel Studio will delete the relevant personal data and related materials that are no longer required.
Customer consent and rights
Before submitting, read this Privacy Policy and the Service Terms, then personally select the required checkbox consenting to the processing of your data to review the request. A request is not a payment, final order or Official Project Start.
These rules apply within the limits of applicable law and do not limit the client's mandatory rights.
Manual template orders
Template purchases are arranged through Telegram or email. The website does not collect payment data or card/bank credentials and does not submit template orders through the project form.
Only the necessary buyer/contact, selected product, order date, payment confirmation or transaction reference if available, and actual ZIP delivery date are recorded to identify the license, deliver the product and handle the 14-day warranty.
Telegram/email and Binance or the compatible wallet provider you use are independent external services. They process communication or transfers under their own rules. Krepel Studio uses only the information needed for the manual order; no payment-provider integration or separate order database is added to the website.