PRIVACY POLICY

1. INTRODUCTION

Welcome to Short Stereo. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, process, and store your data when you visit our website, subscribe to our newsletter, submit queries, or interact with our digital channels.

2. WHAT DATA WE COLLECT & WHERE IT IS STORED

We do not run private database servers. To ensure the highest level of stability, speed, and privacy compliance, all data collection is delegated to industry-standard external processors:

• Newsletter Subscriptions (ConvertKit): When you subscribe to our "Short Newsletter" or opt in for detailed case studies, your Name and Email Address are securely transmitted to and stored on ConvertKit servers (United States).
• Contact & Business Inquiries (HubSpot): When you fill out our contact form, your Name, Email, Website, and Project Description are submitted directly to and stored on HubSpot Secure Servers (United States/EU regional endpoints).
• Visitor Analytics (Google Analytics): We use Google Analytics (Tag ID: G-EDT31MEW54) to record anonymous user navigation behavior. Your IP address is anonymized, and metrics are stored on Google Analytics Cloud Infrastructure (Global).
• Conversion Tracking (Meta Pixel): We utilize the Meta Pixel (Pixel ID: 2515071275559523) to track ad performance and understand site conversion events. Data is processed securely by Meta Platforms (United States).

3. HOW WE SECURE YOUR DATA

Short Stereo enforces stringent security standards on our frontend architecture to prevent data interception or injection:

• Strict Content Security Policy (CSP): Our meta security headers strictly control script executions, stylesheet sources, and frame connections. This prevents Cross-Site Scripting (XSS) and unauthorized code injections.
• Strict Direct Submit API Limits: By utilizing secure, direct cloud submit endpoints with HubSpot and ConvertKit, your form inputs skip local staging database risks and transmit securely over HTTPS.
• No Hardcoded Secret Keys: All backend operations are completely proxy-based or handled server-side directly within HubSpot/ConvertKit networks. No API private credentials are ever stored or exposed on the client frontend.

4. YOUR GDPR & PRIVACY RIGHTS

Under GDPR and international privacy statutes, you have complete control over your private data. You are entitled to:

• Access & Portability: Request a full breakdown of the information stored under your email address in our HubSpot or ConvertKit profiles.
• Correction & Erasure: Request immediate correction or total deletion of your contact records or subscriber details.
• Opt-Out: You can unsubscribe from our case studies and newsletters instantly by clicking the "Unsubscribe" link located at the bottom of every automated email.

To request data erasure or details on your inquiry data, contact our operations desk at privacy@shortstereo.com. We resolve all inquiries within 48 business hours.

5. CHANGES TO THIS PRIVACY POLICY

We may modify this policy periodically to reflect architectural changes or regulatory updates. Any changes will be published here with an updated "Last Updated" revision date.