Privacy Policy

YCN Labs ("we", "us", or "our") respects your privacy. This policy describes how we collect, use, and store information when you visit our website (ycnlabs.com) or submit details through our contact forms.

1. Information We Collect

We collect two kinds of information: details you explicitly submit to us, and a small fixed set of interaction events that record how the site is used. Information you submit includes:

• Contact Lead Form: Name, email address, project type, budget, timeline, and your message are required. Company name is optional, and leaving it blank does not affect our reply.
• Newsletter Form: Email address only.

Interaction events. We also record a small, fixed set of events describing how the site is used — for example that a call-to-action was clicked, that a contact form was started, submitted, or rejected by validation, that a newsletter signup succeeded or failed, or that the booking scheduler was opened. These events carry no personal data and no visitor identifier: no name, email address, phone number, message content, project details or database identifier is attached to them. The only descriptive values sent with an event are the position on the page where it occurred — for example hero or final_cta — and, for a failure, whether the cause was a rejected submission or a network error.

2. How We Use Your Information

We use your information solely to respond to your project inquiry, coordinate booking schedules, or send newsletter updates when we publish them. We never sell, rent, or distribute your email or project details to third-party advertisers.

3. Data Storage & Security

Your details are stored in an encrypted database managed by our cloud database provider. We enforce SSL/TLS encryption for all network traffic. We restrict database access to only authorized studio leads.

4. How Long We Keep Your Information

• Enquiries: we keep contact-form enquiries and related correspondence for 24 months from our last exchange with you, then delete them. If we begin working together, project records are retained under our engagement terms instead.
• Newsletter: we keep your email address until you unsubscribe, and for 30 days afterwards in order to honour the unsubscribe request itself.
• Operational logs: server and error logs are retained for 90 days. They record request metadata and error categories, not the contents of your messages.
• Abuse-prevention keys: rate-limiting and duplicate-detection keys expire automatically within minutes.

5. Who Processes Your Information

We use the following service providers. Each receives only what it needs to do its job, and none of them receives your information for advertising.

• Neon — database hosting. Stores your enquiry and newsletter records.
• Resend — transactional email. Receives your email address and message in order to deliver our reply and your acknowledgement.
• Vercel — website hosting and analytics. Receives request metadata and the interaction events described above. Analytics is configured cookie-free and creates no persistent visitor identifier.
• Sentry — error monitoring. Receives error diagnostics, and is configured not to attach IP addresses, cookies or request headers.
• Cal.com — discovery-call booking. Receives only what you enter into the booking form, and only if you choose to book.
• Upstash — abuse and rate-limit protection. Receives a SHA-256 hash derived from your IP address rather than the address itself.

6. Compliance (India DPDP & GDPR)

If you are residing in India or the European Union, you have the right to request deletion of your contact email or stored project details from our database. To exercise this right, please email us directly at hello@ycnlabs.com.