Effective Date: August 15, 2026
KRYLANE Studio Inc. (“KRYLANE Studio,” “we,” “us,” or “our”) operates the website krylane.com (the “Site”) and provides search engine optimization, website development, logo and branding design, AI automation, and chatbot services (collectively, the “Services”).
This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, and the choices you have. It applies to visitors to the Site, prospective clients, and clients of KRYLANE Studio.
By using the Site or engaging our Services, you agree to the practices described in this Privacy Policy.
Our legal name is KRYLANE Studio Inc., and we trade as KRYLANE Studio. Our registered address is 5 Queens Wreath Way, Irvine, CA 92612, United States. You can reach us by email at [email protected] or by phone at (949) 284-5707, and our website is krylane.com.
KRYLANE Studio Inc. is the party responsible for the personal information collected through the Site (the “data controller,” where that term applies).
Contact and Quote Forms: When you submit a contact form, request a quote, book a call, or otherwise reach out, we collect the details you provide. These typically include your full name, email address, phone number, company or business name, website URL, budget range, timeline, project or service details, and anything else you choose to include in a free-text field.
Chatbot Conversations: If you interact with an AI chatbot on the Site, we collect and store the messages you send, our responses, timestamps, the page you were on, and any contact details you share in the conversation. Section 5 explains how AI providers are involved.
Email and Marketing Signups: If you subscribe to our newsletter, download a resource, or opt in to updates, we collect your name, email address, and your subscription preferences.
Client Onboarding Information: If you become a client, we collect the information needed to deliver the Services. This may include billing details, business documentation, brand assets, content, and, where required for the project, credentials or delegated access to your website, hosting, domain registrar, analytics, advertising accounts, CRM, social profiles, or other third-party platforms.
Correspondence: We keep records of emails, messages, call notes, proposals, contracts, and support requests exchanged with you.
Information We Collect Automatically: When you visit the Site, we and our analytics and advertising partners may automatically collect your IP address and the approximate location derived from it (typically at city or region level), your browser type, version, and language, your operating system and device type, the referring URL and exit pages, the pages you viewed along with time on page, scroll depth, clicks, and navigation paths, the date and time of your visit, and cookie or similar device identifiers. This information is collected through cookies, pixels, tags, and similar technologies. Our Cookies Policy describes these technologies in detail and explains how to control them.
Information From Third Parties: We may receive information about you from advertising and analytics platforms in the form of aggregated campaign and audience data, from referral partners and clients who introduce you to us, from publicly available business sources such as company websites, business directories, and professional networking platforms when we research a prospective client, and from payment processors, which confirm transaction status to us.
Information We do not Intentionally Collect: We do not seek out or ask for sensitive categories of personal information such as government identification numbers, health data, biometric data, racial or ethnic origin, religious beliefs, or political opinions. Please do not submit this kind of information through our forms or chatbot. We also do not store full payment card numbers. Card details are entered directly with our payment processor and are never held on our systems.
Responding to enquiries: We use your information to reply to form submissions, chatbot messages, emails, and calls, and to prepare proposals and quotes for you.
Delivering the Services. We use your information to build websites, run SEO campaigns, produce brand and logo assets, configure AI automations and chatbots, and provide support and maintenance.
Billing and Administration: We use your information to issue invoices, collect payment, and keep accounting and tax records.
Site Operation and Security: We use your information to keep the Site available, diagnose errors, detect fraud and abuse, and protect against spam.
Analytics and Improvement: We use your information to understand how visitors use the Site, measure which pages and campaigns perform, and improve our content and user experience.
Advertising and Remarketing. We use your information to measure ad performance and, where you have consented, to show you relevant ads on third-party platforms.
Marketing Communications: We use your information to send newsletters, service updates, case studies, and offers to people who have opted in or are existing clients.
Legal Compliance: We use your information to meet our tax, accounting, and regulatory obligations, and to respond to lawful requests.
Establishing and defending claims: We retain contracts and correspondence in case of a dispute.
We do not sell your personal information, and we do not share it with third parties for their own independent marketing purposes.
Where data protection law requires us to identify a legal basis (for example, for visitors in the European Economic Area or the United Kingdom), we rely on the following.
We rely on contract to provide the Services you have engaged us for, and to take steps at your request before entering a contract, such as preparing a quote. We rely on consent for non-essential cookies, advertising and analytics tracking, and marketing emails to prospects, and you may withdraw that consent at any time. We rely on legitimate interests to operate and secure the Site, respond to business enquiries, keep records, improve our Services, and market to existing clients, where those interests are not overridden by your rights. We rely on legal obligation to keep financial records and comply with applicable law.
Our GDPR page contains further detail for EU and UK visitors.
KRYLANE Studio builds and operates AI automation and chatbot systems, including a chatbot on the Site.
Conversations with our chatbot are recorded and stored so that we can respond to your enquiry, improve the assistant, and maintain a record of what was discussed. Chatbot messages may be transmitted to third-party AI model providers, such as OpenAI, Anthropic, or Google, for processing in order to generate a response. These providers act as our service providers and are contractually restricted in how they may use the data. We do not permit our AI providers to use your conversation content to train their public models where a no-training option is available to us, and we configure our accounts accordingly.
Please do not enter passwords, payment card details, government identifiers, health information, or other sensitive data into the chatbot. AI-generated responses may be inaccurate or incomplete, as explained in our Disclaimer.
Where we build a chatbot or automation for a client, the client is the controller of the end-user data flowing through that system, and KRYLANE Studio acts as a service provider or processor under the terms of the client agreement.
The Site uses cookies and similar technologies. These include strictly necessary cookies required for the Site to function, analytics cookies such as Google Analytics (GA4) to understand traffic and usage, advertising and remarketing tags such as Google Ads, Meta (Facebook and Instagram) Pixel, and LinkedIn Insight Tag to measure campaigns and show relevant ads, and functional cookies that remember preferences such as your cookie consent choices.
Full details, including how to accept, reject, or delete cookies, are in our Cookies Policy.
You can also opt out of interest-based advertising through Google Ads Settings at adssettings.google.com, Meta Ad Preferences at facebook.com/adpreferences, the Digital Advertising Alliance at optout.aboutads.info, and the Network Advertising Initiative at optout.networkadvertising.org.
We store lead and client records in a customer relationship management (CRM) system and send email through an email service provider. Marketing emails are sent to people who have opted in, and to existing clients about services related to those they have already purchased. Every marketing email includes an unsubscribe link, and unsubscribing takes effect promptly and applies to marketing messages only.
Transactional and service messages invoices, project updates, scheduling, support replies, and legal notices are not marketing and will continue while your engagement is active.
Our emails may include tracking pixels that tell us whether a message was opened and which links were clicked. You can prevent this by disabling remote image loading in your email client.
We comply with the CAN-SPAM Act. We do not send unsolicited bulk commercial email, and we do not sell or rent our mailing list.
We share personal information only as described in this section.
Service providers. We use trusted vendors to run our business, and we share only what each vendor needs. We rely on website hosting and content delivery network providers to serve and secure the Site, and on analytics providers for traffic and usage measurement. Advertising platforms handle campaign measurement and remarketing, while email service providers send our newsletters and transactional email. Our CRM and project management tools help us manage leads, projects, and client communication, and AI model providers generate chatbot and automation responses. Payment processors take payment and issue receipts, accounting and bookkeeping providers handle invoicing, tax, and financial records, and cloud storage and file transfer services hold project files and deliverables. Finally, we engage contractors and subcontractors for specialist work performed on our behalf, always under confidentiality obligations.
Professional advisers. We may share information with lawyers, accountants, insurers, and auditors, where reasonably necessary.
Legal and safety. We may disclose information where required by law, court order, subpoena, or governmental request, or where we believe disclosure is reasonably necessary to protect our rights, enforce our agreements, investigate fraud, or protect the safety of any person.
Business transfers. If KRYLANE Studio Inc. is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction. We will take reasonable steps to ensure it remains protected.
With your direction. We may share information where you ask us to, for example when contacting your hosting provider or domain registrar on your behalf.
We do not sell personal information, and we do not share it for cross-context behavioral advertising in exchange for money.
When you grant us access to your website, hosting, domain, advertising, analytics, or other accounts, we use that access solely to perform the agreed Services. We ask for delegated or role-based access rather than shared passwords wherever the platform supports it. Credentials are stored in an access-controlled password manager and are limited to team members who need them.
We will remove or return access at your written request, and we ask that you revoke our access at the end of an engagement. If you do not, we may retain dormant access records until you do. You remain responsible for maintaining your own backups and for the security of accounts under your control.
We keep personal information only as long as we need it.
Enquiries that do not become client engagements are kept for up to 24 months from our last contact with you, and chatbot transcripts are kept for up to 12 months unless they form part of an active enquiry or engagement. Client project files and deliverables are held for the duration of the engagement plus a further 3 years. Contracts and signed agreements are kept for 7 years from the end of the engagement, and invoices and financial records are kept for 7 years as required for tax and accounting purposes.
Marketing subscriber records are kept until you unsubscribe, after which we retain a minimal suppression record so that we do not contact you again by mistake. Website analytics data is retained as configured in the analytics platform, typically between 14 and 26 months. Backups are overwritten on a rolling cycle, typically within 90 days.
Where we no longer need information, we delete it or irreversibly anonymize it.
We take reasonable and appropriate technical and organizational measures to protect personal information. These include TLS/HTTPS encryption in transit across the Site, access controls, role-based permissions, and the principle of least privilege, multi-factor authentication on business-critical accounts, password manager use for all shared credentials, vendor selection with attention to security posture, confidentiality obligations for employees and contractors, and periodic review of accounts, permissions, and stored data.
No method of transmission or storage is completely secure. While we work hard to protect your information, we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and any relevant authority where required by law.
Depending on where you live, you may have some or all of the following rights: access, to request a copy of the personal information we hold about you; correction, to ask us to fix inaccurate or incomplete information; deletion, to ask us to delete your personal information; portability, to receive your information in a portable, machine-readable format; restriction, to ask us to limit how we process your information; objection, to object to processing based on legitimate interests, including direct marketing; withdrawal of consent, at any time and without affecting processing already carried out; and the right to opt out of marketing at any time. We will not treat you differently for exercising any of these rights.
To exercise your rights, email [email protected] with the subject line “Privacy Request,” or call (949) 284-5707. Tell us which right you wish to exercise and provide enough detail for us to locate your records.
We will respond within 45 days for California requests, extendable by a further 45 days where reasonably necessary, and within 30 days for GDPR requests, extendable by two further months for complex requests. We may need to verify your identity before acting, and we will only ask for information necessary to do so. An authorized agent may submit a request on your behalf with written proof of authorization.
If you are a California resident, you have specific rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act.
In the past 12 months, we have collected identifiers, such as your name, email address, phone number, IP address, and cookie identifiers. We have collected customer records, such as your business name, billing address, and contact details, and commercial information, such as the services you purchased and the quotes you requested. We have collected internet or network activity information, such as the pages you viewed, your referring source, and your session behavior, along with approximate geolocation data, meaning the city or region inferred from your IP address. We have collected audio, electronic, and visual information in the form of chatbot transcripts, call notes, and email correspondence, as well as professional or employment information such as your job title, company, and industry. We have drawn limited inferences, such as which service you appear interested in and how well qualified an enquiry is.
We have not collected sensitive personal information, biometric information, or education information. We do not intentionally collect any of these categories, and we ask that you do not send them to us.
The sources, purposes, and disclosures relating to this information are described in Sections 2, 3, and 8 of this policy.
KRYLANE Studio Inc. does not sell personal information for money. Some advertising and analytics cookies may constitute “sharing” for cross-context behavioral advertising under California law. You can opt out at any time by rejecting non-essential cookies in our cookie banner, by using your browser’s Global Privacy Control (GPC) signal, which we honor, or by emailing [email protected] with the subject line “Do Not Sell or Share My Personal Information.” We do not knowingly sell or share the personal information of consumers under 16 years of age.
California Civil Code section 1798.83, known as the “Shine the Light” law, permits California residents to request information about disclosure of personal information to third parties for direct marketing purposes. We do not make such disclosures, and you may confirm this by emailing [email protected].
KRYLANE Studio Inc. is based in Irvine, California, United States, and our Services are directed primarily to clients in the United States. Our servers and service providers are located in the United States and other countries.
If you access the Site from outside the United States, your information will be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your country. Where we transfer personal information from the European Economic Area or the United Kingdom, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum.
See our GDPR page for more information.
The Site and Services are intended for businesses and adults. We do not knowingly collect personal information from anyone under 16 years of age. If you believe a child has provided us with personal information, contact [email protected] and we will delete it promptly.
The Site contains links to third-party websites, tools, and resources that we do not control. This Privacy Policy does not apply to them. We encourage you to read the privacy policy of any third-party site you visit. We are not responsible for the content or privacy practices of third parties. See our Disclaimer.
Some browsers offer a “Do Not Track” (DNT) setting. There is currently no industry-agreed standard for how websites should respond to DNT signals, and the Site does not respond to them. However, we do honor the Global Privacy Control (GPC) signal as an opt-out of sale and sharing for California residents.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The “Last Updated” date at the top shows when the most recent changes took effect. Material changes will be announced by a notice on the Site or by email where we hold your address and the change materially affects you. Continued use of the Site after an update constitutes acceptance of the revised policy.
If you have any questions about this Privacy Policy or how we handle your data, please reach out to us:
KRYLANE Studio Inc.
5 Queens Wreath Way, Irvine, CA 92612, United States
Email: [email protected]
Phone: (949) 284-5707
Website: https://krylane.com
KRYLANE Studio Inc. is registered in the State of South Dakota and maintains its operating office in the State of California.
