Privacy Policy

Privacy Policy

Effective date: 11 August 2026

This Privacy Policy explains how Goodspeed Studio (“Goodspeed Studio,” “we,” “us,” or “our”) collects, uses, and protects information when you visit goodspeed.studio, contact us, or engage us for design and development services.

1. Who we are

Goodspeed Studio is a design and development studio operating goodspeed.studio. We are the data controller for the personal information described in this policy. For privacy questions or to exercise your rights, contact us at harish@goodspeed.studio.

2. Information we collect

Information you provide directly: contact details you submit through forms, email, or scheduling tools (name, email, company, phone, message content); project information you share during scoping, onboarding, or active engagements (briefs, brand assets, credentials, content); billing details required to invoice your business (company name, billing address, tax identifiers); and anything you type into Grove, our website AI assistant, including your messages and any project details you choose to share (see section 13).

Information collected automatically: usage data such as pages viewed, referrer URLs, device type, browser, language, and approximate location derived from IP address; and cookies and similar technologies as described in our Cookie Policy.

Information from third parties: engagement data from our analytics provider (Google Analytics) and outreach platform (Lemlist), and submission data from scheduling or proposal tools when you book a call or sign through them.

3. How we use your information

We use the information to respond to enquiries and provide quotes, proposals, and project deliverables; deliver and manage active client engagements, including communication, scheduling, and handover; operate, maintain, and improve our website and services; send transactional messages, invoices, and project updates; send occasional B2B marketing communications, where you have opted in or where permitted by law (you can opt out any time); and comply with legal obligations, prevent fraud, and protect our rights.

4. Legal basis for processing (UK / EEA users)

Where UK GDPR or EU GDPR applies, we rely on the following legal bases:

Contract: to provide services you have requested or to take steps before entering a contract.

Legitimate interests: to run, improve, secure, and promote our business. Specifically, we rely on legitimate interests to operate and secure our website, respond to enquiries, conduct B2B outreach to relevant businesses, and improve our services through aggregated analytics. We balance these interests against your rights and freedoms.

Consent: for non-essential cookies and certain marketing communications, where required.

Legal obligation: to meet tax, accounting, and regulatory requirements.

5. Sharing your information

We do not sell your personal information. We share it only with:

Service providers who help us run the business, including our website host (Framer), analytics (Google Analytics), outreach and CRM (Lemlist, HubSpot), payment and invoicing platforms, communication tools (Slack, Google Workspace), and meeting and transcription tools. For Grove, our website AI assistant, we also use Railway (hosting), Supabase (database), Anthropic (generating replies) and OpenAI (search indexing). See section 13.

Clients and collaborators when necessary to deliver a project, for example sharing your contact details with a developer or designer staffed on your work.

Legal and regulatory authorities when required by law, court order, or to protect our rights.

Successors in the event of a merger, acquisition, or sale of assets, subject to equivalent protections.

6. International data transfers

We and our service providers may process information outside the UK and EEA, including in the United States. Where we transfer personal data internationally, we rely on appropriate safeguards: UK adequacy regulations where the destination country has been recognised as providing an equivalent standard of protection; the UK Extension to the EU-US Data Privacy Framework where the provider is certified under it; or the UK Addendum to the EU Standard Contractual Clauses, together with an assessment of the risks of that transfer. We keep a record of which applies to each provider, and you can request a copy at harish@goodspeed.studio.

7. Data retention

We retain personal information only for as long as needed:

Enquiries and prospects: up to 24 months from your last contact with us.

Client records and project files: for the duration of the engagement and up to 7 years afterwards to meet tax, accounting, and legal obligations.

Marketing contacts: until you unsubscribe or withdraw consent.

Grove chat records: 90 days from last activity where the conversation did not lead to an enquiry, or 12 months where it did. See section 13.

Website analytics: in line with the retention settings of our analytics provider (Google Analytics defaults to 14 months).

When information is no longer needed, we delete or anonymise it.

8. Your rights

Subject to your jurisdiction, you have the right to access the personal information we hold about you; request correction of inaccurate information; request deletion or restriction of your information; object to processing or withdraw consent at any time (withdrawal does not affect processing carried out before withdrawal); request portability of information you provided to us; and lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk if you are in the UK, or your local data protection authority if elsewhere in the EEA.

To exercise these rights, contact us at harish@goodspeed.studio. We may need to verify your identity before responding, and we will respond within one month.

9. Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you. This includes Grove, our website AI assistant. Nothing Grove records about your project changes whether you can contact us, book a call, or reach a human, and everything it notes is reviewed by a person before we act on it.

10. Security

We use reasonable technical and organisational measures to protect personal information, including encrypted storage, access controls, and reputable infrastructure providers with their own security certifications. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children’s privacy

Our website and services are not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with information, contact us so we can delete it.

12. Third-party links

Our website may link to third-party sites. We are not responsible for their content or privacy practices. Please review their policies separately.

13. Grove, our website AI assistant

Grove is the AI chat assistant on goodspeed.studio. It answers questions about our work, helps you describe a project, and can pass you to a human for a discovery call. Grove is an AI system, not a person. It can get things wrong, so please check anything important with us before relying on it.

What Grove collects

When you use the chat, we process the messages you send and Grove’s replies, along with a conversation identifier, the page you were on, where you arrived from, and timestamps.

If you ask us to follow up, Grove collects your name, email address and a summary of your project. You can also choose to tell us your company, website, timeline, budget range, the type of work you are after, what has prompted you to get in touch now, and similar background about your situation. Only your name, email and project summary are needed.

Alongside what you tell us, Grove keeps working notes from the conversation. These include which topics it has already covered with you, which examples of our work it has shown you, and its own rough read on whether your project looks like a fit for us. These notes are our opinion rather than fact, they are not always right, and you can ask to see or correct them.

We also process your IP address to apply rate limits and bot checks to the chat. We do not store it in our database.

Storage in your browser

Grove uses session storage, which your browser clears when you close the tab. It does not set cookies and does not use long-term storage.

Once you open the chat, Grove stores the conversation itself and a short-lived security token in your browser, so the chat survives a page refresh. If you dismiss or open the chat prompt, Grove stores a single flag so it does not keep reappearing at you. Nothing is written to your browser before you interact with Grove.

Why we use it

To answer your enquiry and run the chat, and to keep a short record of conversations for quality, disputes and improving how Grove works. Our lawful basis is legitimate interests.

To follow up on your enquiry and arrange a discovery call, where you have asked us to. Our lawful basis is taking steps at your request before entering into a contract.

To understand what people commonly ask us about. Where Grove could not answer a question, we convert the topic into anonymous monthly counts before deleting the original text. Our lawful basis is legitimate interests.

Using Grove, sharing your email with it, or booking a call is not treated as consent to marketing. We only send marketing where you have separately opted in.

AI providers

Grove uses Anthropic to generate its replies, so your messages are sent to Anthropic. It uses OpenAI to turn your question into a search against our own published website content, so your question is sent to OpenAI for that step.

Neither provider uses your conversations to train their models.

Anthropic does not store your messages once it has generated a reply. OpenAI keeps what we send it for up to 30 days so it can check for misuse of its service, and then deletes it. Both may keep content for longer where their safety systems flag it or where the law requires it.

Grove answers from a set of approved public Goodspeed content. It has no access to client work, internal systems, or anything covered by a confidentiality agreement.

Please do not share sensitive information

Grove is not the right place for sensitive personal information, such as details about health, religious or political beliefs, or criminal matters. We do not ask for it and we do not want it. Where a message appears to contain that kind of information, Grove stops it before it is saved or sent to our AI providers, and asks you to carry on without those details or to email us instead. That check looks for recognisable patterns, so it is a safeguard rather than a guarantee. Please do not rely on it.

How long we keep chat records

If your conversation did not lead to an enquiry we are following up, we delete the transcript and the related conversation record 90 days after your last activity.

If your conversation is linked to an enquiry, we delete the transcript 12 months after your last activity. Your enquiry record is kept under the retention periods in section 7.

Once information is deleted from our live systems, copies can remain in our daily encrypted database backups until those backups age out. We keep backups for 7 days.

Booking a call

If Grove offers you a call, nothing is sent to HubSpot until you choose to book. The booking form does not load and no data leaves the page before that point. When you do book, we pass HubSpot the details you have already given Grove so you are not retyping them: your name, email address, website, a short description of what you want help with, the type of work, your budget range, timeline, and where you came to us from.

Your rights

The rights in section 8 apply to anything Grove holds about you. For chat records we normally need an email address we can match to your conversation. If you used Grove without giving us any contact details, we may not be able to identify your conversation, and we will not collect extra information about you purely to try.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the “Effective date” above. Material changes will be communicated where appropriate.

15. Contact us

Questions or requests about this policy? Email us at harish@goodspeed.studio.