Privacy & Data Governance
Transparent, cookie-free, and client-first security standards designed for high-growth startups, design studios, and agency dev partners.
Zero Tracking Cookies
No invasive cookies, tracking pixels, or third-party marketing beacons.
Strict NDA & Confidentiality
Your proprietary codebases, Figma designs, and API keys are 100% confidential.
No Central DB Retention
Contact requests are routed directly to email without unmonitored server storage.
GDPR & Privacy First
Global compliance with international standards for data control and erasure.
1. Information Collection & Zero-Tracking Philosophy
At BuildWithAtiya, privacy is engineered into the application architecture by default. Unlike corporate websites that collect telemetry data, our portfolio operates on a minimal-data paradigm:
- Zero Tracking Cookies: We do not deploy advertising cookies, third-party analytics scripts (such as Google Analytics or Meta Pixel), or fingerprinting technologies.
- Voluntary Inquiries Only: The only personal information collected is what you voluntarily choose to provide when initiating contact (such as your name, work email, and project scope).
- Serverless Form Handling: When you submit our project inquiry form, it directly formats a transmission to
work@buildwithatiya.com. We do not store your message in an intermediary marketing database that could be compromised.
2. Client IP, Repositories & Non-Disclosure (NDA)
As a full-stack engineering partner for high-growth startups and creative design agencies, client IP confidentiality is of paramount importance:
Mutual NDA Compatibility
We routinely sign and respect standard bilateral non-disclosure agreements (NDAs) prior to examining private GitHub/GitLab repositories, Figma workspaces, design systems, or internal product roadmaps.
- No Public Showcasing Without Approval: Proprietary client codebases, internal architectures, or unreleased startup products are never showcased publicly on this portfolio without prior written consent.
- Secure Credential Management: Environment variables, API keys, and deployment credentials provided during active development are stored exclusively in encrypted password managers and deleted upon project handover.
3. Third-Party Integrations & External Links
This portfolio includes direct links to official business and communication profiles:
Please review the respective privacy policies of those independent providers when navigating to their domains.
4. Global Compliance, GDPR & Data Retention
Regardless of your geographic location—whether you are based in the United States, European Union, United Kingdom, Canada, or Australia—you retain the following data rights:
- Right of Access & Deletion: You may request complete deletion of past email correspondence, project notes, or communication history at any time.
- No Commercial Data Sharing: We never sell, lease, or monetize client contacts, project briefs, or business insights to third-party data brokers or marketing lists.
- Right to Rectification: If any contact details or billing records require updating, modifications are processed immediately upon written request.
5. Contact & Privacy Inquiries
If you have questions regarding this Privacy Policy, wish to execute a custom Non-Disclosure Agreement (NDA) before sharing documentation, or request data erasure, please connect directly:
Need a Signed NDA Before Sharing Assets?
We are always willing to sign your team's standard non-disclosure agreement prior to reviewing confidential repositories or PRDs.
Have Questions or Custom Security Specifications?
We frequently work with enterprise engineering teams, regulated platforms, and high-growth venture startups with specific compliance criteria.