Privacy Policy & Data Protection.
We value your trust and are committed to complete transparency regarding how your data is collected, processed, and secured when engaging with our studio and digital products.
100% Code Ownership
All bespoke code, schemas, and design files produced for clients transfer 100% upon delivery with zero lock-in.
Zero Data Brokering
We never sell, monetize, or license your contact details, project specifications, or behavioral telemetry to data brokers.
Strict NDA Compliance
Proprietary ideas, roadmap features, API keys, and unreleased designs are treated under bank-grade confidentiality.
Cookie Control
You retain granular control over non-essential cookies with instant preference toggling at any time.
01.Scope & Studio Overview
This Privacy Policy applies to all services, websites, client staging environments, and digital applications operated by Krew / Mesh (“Studio”, “we”, “us”, or “our”), accessible via krewmesh.agency and associated subdomains.
As an independent creative technology and web engineering studio, we partner with startups, growing businesses, and enterprises globally. We treat your personal data in strict compliance with applicable data protection laws, including the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and the Digital Personal Data Protection (DPDP) Act.
02.Information We Collect
We only gather information necessary to provide top-tier design, software development, consultative services, and ensure the security and uptime of our digital assets.
A. Voluntary Client & Inquiry Information
When you submit our project contact form, request a custom quote, apply for careers, or subscribe to studio insights, we collect your name, business email, organization name, phone or WhatsApp number, estimated budget range, and project briefs.
B. Client Project Deliverables & Credentials
During active design and engineering contracts, you may provide brand assets, vector artwork, third-party API credentials, domain DNS settings, or staging database connection strings. These are stored strictly within encrypted environment vaults and deleted or rotated upon delivery.
C. Automated Technical Telemetry
Standard server logs record IP addresses (anonymized for analytics), browser type, referring URLs, screen resolution, and error stack traces to detect security anomalies, DDoS attacks, and cross-browser rendering flaws.
03.How We Use Your Information
We process collected data exclusively under legitimate business bases and client agreements:
- Project Delivery: To architect, design, program, test, and deploy agreed-upon digital deliverables.
- Communication & Support: Responding to client sprint inquiries, scheduling strategy sessions, and sharing production builds.
- Invoicing & Compliance: Issuing tax invoices, milestone receipts, and complying with statutory business accounting requirements.
- Studio Improvement: Enhancing our web performance, Core Web Vitals, and interactive UX through aggregated telemetry.
04.Client Confidentiality & 100% IP Ownership
Our Guarantee to Founders and Enterprise Clients:
1. Full Intellectual Property Assignment: Upon receipt of full project payment, all bespoke source code, Next.js applications, Figma design libraries, vector icons, custom shaders, and branding artifacts created for your project become 100% your exclusive intellectual property.
2. No LLM Training on Client Codebases: We never submit client proprietary code, secret algorithms, or confidential datasets to public machine learning training pools.
3. Non-Disclosure Agreements (NDAs): We routinely execute mutual NDAs prior to reviewing proprietary pitch decks, technical specifications, or business workflows.
06.Third-Party Infrastructure
To host high-availability web applications and process client inquiries securely, we partner with leading cloud infrastructure providers vetted for international security compliance (ISO 27001, SOC 2 Type II):
- • Cloud Hosting & Edge CDN: Vercel Inc. and Amazon Web Services (AWS) for edge server rendering.
- • Version Control: GitHub Enterprise (Microsoft) for encrypted, private git code repositories.
- • Design Collaboration: Figma Inc. for secure visual design and client prototype reviews.
- • Communication: Google Workspace & WhatsApp Business for direct client correspondence.
07.Security & Data Retention
All data in transit is encrypted using Modern TLS 1.3 cryptographic protocols with HSTS preloading. Internal access to customer records is restricted under the principle of least privilege (PoLP) and requires hardware-backed two-factor authentication (2FA).
We retain contact inquiries for as long as active communication continues or up to 24 months thereafter for contractual reference, unless an earlier erasure request is filed.
08.Your Rights & Data Subject Requests
Under international privacy regulations, you are entitled to exercise the following rights free of charge:
To submit a Data Subject Request, please contact our team at +91 920 983 9142 or message us via our contact portal. We acknowledge and fulfill verified requests within thirty (30) days.
09.Policy Updates & Contact
We may periodically revise this policy to reflect evolutions in our technology offerings, cloud architecture, or statutory requirements. All revisions will be posted to this page with an updated “Last Updated” date.
Krew / Mesh Creative Technology Studio
Regional Studio Hubs:
Pune, Maharashtra • Indore, Madhya Pradesh
India (Serving Clients Worldwide)