Privacy Notice

This notice describes how Ninjutsu Studios (“we”, “us”, “our”) handles information collected through this website, including the Website Project Estimator, the Website Opportunity Audit checkout and intake, the chat assistant, and any contact or application form.

We are the party responsible for this information. We operate from Oklahoma, United States.

Website Project Estimator. The answers you submit — industry, current website situation and URL, goals, page count, pages and features under consideration, branding, content and photography readiness, timeline, budget range — together with your name, business name, email address, optional telephone number and optional city or service area, and whether you asked for a call.

Website Opportunity Audit. Your intake answers and the contact and billing details required to complete the purchase.

Chat assistant. The messages you type and the replies you receive. See section 5.

Applications and contact forms. The details you choose to enter.

Please do not send us passwords, payment card numbers, government identifiers, health information, or another person’s sensitive personal information through any form or through the chat.

When you visit the site we may record standard access data — pages viewed, the page you arrived from, general device and browser information, approximate region derived from your IP address, and campaign parameters (utm_source, utm_medium, utm_campaign, utm_content) present in the URL.

To protect our forms from abuse we store a one-way hash of the IP address a submission came from, together with the time it was submitted, so that rate limits can be enforced. The hash is salted and cannot be reversed back into the original address. We also record how long a form took to complete, which is used only to detect automated submissions.

Analytics events sent from this site never include names, email addresses, telephone numbers, form text or private business requirements.

Essential cookies and browser storage keep forms, checkout and security features working. These are required for the site to function.

Advertising and analytics tracking loads only after you agree through the on-site preferences panel. You can change or withdraw that choice at any time using the preferences link in the footer.

We use an error-monitoring service that can record a diagnostic replay of a browsing session in order to reproduce faults. It is configured to mask all text and all form inputs and to block media, so it captures the shape of an interaction — clicks, navigation, layout — and not what you typed or read.

The chat assistant is automated software, not a person. To answer you, the content of your message and recent conversation context are sent to a third-party AI provider (Google, Gemini) for processing.

Chat conversations are recorded and stored in our database — the messages you send, the replies generated, and a salted one-way hash of the originating IP address for abuse prevention. We keep them so we can follow up on enquiries, understand what visitors ask, and improve our answers. They may be reviewed by us.

Do not enter sensitive information into the chat. If you would prefer to speak to a person instead, contact us using the details in section 13.

Purchases are processed by Stripe. Payment card details are entered directly into Stripe’s hosted fields and are never stored on our servers. We receive confirmation of a payment, the amount, the payment method type and the associated contact details — not your full card number.

If you use a third-party pay-over-time option offered at checkout, that provider collects and processes your information under its own privacy policy, and any credit assessment is performed by it rather than by us.

We use the information described above in order to:

• calculate and return a preliminary project range;
• contact you about your enquiry and prepare a written scope;
• deliver services you purchased, including the audit;
• process payments and keep transaction records;
• answer questions through the chat assistant;
• protect the site against spam, abuse and fraudulent submissions;
• diagnose errors and improve how the site and our answers work; and
• meet legal, tax and accounting obligations.

We do not sell personal information, and we do not share it with third parties for their own independent marketing.

We share information only with the service providers needed to operate this site and deliver our services. Each acts on our instructions:

• Stripe — payment processing and transaction records
• Supabase — database and storage for submissions, intake and chat transcripts
• Resend — sending notification and outreach email
• Google (Gemini) — generating chat assistant replies from your messages
• Sentry — error monitoring and masked session diagnostics
• Google Analytics 4 and Meta Pixel — traffic and campaign measurement — loaded only with your consent

We may also disclose information where we are legally required to, where necessary to protect our rights, or in connection with a business transfer. If our processors change, this section is updated.

Estimator and audit intake submissions are retained while a project is active or under consideration and for a reasonable period afterwards for follow-up and record-keeping.

Chat transcripts are retained so we can follow up on an enquiry and review the quality of answers.

Rate-limit records — hashed IP addresses and timestamps — are short-lived and used only to enforce submission limits.

Payment and transaction records are retained as long as required for tax, accounting and dispute-resolution purposes.

You can ask us to delete information sooner, as described in section 11.

Submissions are transmitted over encrypted connections and stored in a database with row-level access restrictions, so that records are reachable only by the studio and not by other visitors. Administrative areas require authentication. Payment card data never reaches our servers.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affecting your information occurs, we will act on it and notify you where the law requires.

You can ask us to:

• provide a copy of the information you submitted;
• correct information that is inaccurate;
• delete information we no longer need to keep;
• stop contacting you; or
• explain how a particular piece of information is used.

To make a request, contact us using the details in section 13. We will respond within the time your local law requires, and we will not treat you differently for exercising a right. We may need to confirm your identity before releasing or deleting information.

Depending on where you live, state or national privacy law may give you additional rights, including the right to opt out of targeted advertising or of the sale or sharing of personal information. We do not sell personal information. Advertising and analytics tracking on this site is off until you consent to it, and you may withdraw consent at any time through the preferences link in the footer.

This site is intended for business enquiries from adults. It is not directed at children, and we do not knowingly collect information from anyone under 13. If you believe a child has submitted information, contact us and we will delete it.

Our services are operated from the United States. If you contact us from elsewhere, the information you submit will be transferred to and processed in the United States, where privacy laws may differ from those in your own country.

We may update this notice to reflect changes in the site, our services, our processors or applicable law. The current version is always posted on this page with its effective date.

To reach us about this notice, or to make a privacy request:

• Ninjutsu Studios
• Email: kvanmeter@ninjutsuetm.net
• Telephone: 405-252-0998

We aim to respond within one business day. See our Terms of Service for the terms that apply to using this site and our services.