Privacy Policy

Scope

This Privacy Policy explains how Hustle Labs collects, uses, shares, and protects personal information when you visit our website, contact us, or use our services. It works together with our Terms of Service. If there's a conflict about how we handle personal data, this Privacy Policy controls our collection, use, and sharing of personal information.

What We Collect

From you: name, email, phone, business name, project details, files you upload, billing/payment info (processed by third-party payment providers).

Automatically: device/browser info, IP address, general location, and analytics.

Cookies & similar tech: for site functionality and analytics. You can control these via browser settings.

How We Use Information

We use personal data to: provide and improve services, communicate with you, process payments, set up hosting and integrations, prevent fraud, and meet legal obligations. We do not sell personal data or share it for third-party marketing.

Consent for Specific Uses

We will only use your information in ads, directory listings, or portfolio items if you give explicit, written consent (for example, including your business phone number in an ad). We will ask before sharing anything beyond service delivery and permitted operational use.

Sharing & Third Parties

We share personal data only as needed: with service providers who work for us (payment processors, hosting, analytics), when required by law, or in connection with a business sale. All service providers are contractually bound to protect the data. We do not sell personal data.

NDAs & Portfolio

We sign an NDA or confidentiality agreement on every project. We will not publish your work in our portfolio, case studies, or marketing without your explicit written permission.

Data Retention

We keep data only as long as needed to provide services, comply with legal obligations, resolve disputes, and for legitimate business purposes. When no longer needed we will securely delete or anonymize it.

Security

We take the security of your personal data seriously and implement strong technical and organizational safeguards, including:

• Encryption at rest: Personal data submitted through our forms (name, email, phone, and message) is encrypted using AES-256-GCM before being stored.
• Encryption in transit: All data transmitted between your browser and our servers is protected by HTTPS/TLS.
• Restricted decryption: Encrypted data is only decrypted by authorized personnel on a need-to-know basis.
• Bot protection: Public-facing forms are protected by Cloudflare Turnstile verification and rate limiting to prevent abuse.
• Access controls: API endpoints are restricted by origin, and administrative access is authenticated and role-based.
• Minimal logging: No personal information is stored in server logs.
• Ongoing reviews: We conduct routine security reviews and updates to maintain and improve our safeguards.

No system is perfect. If a security incident affects your personal data, we will follow applicable legal requirements and notify you as required.

Your Rights & Choices

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, or to object to certain processing. To exercise rights, contact us (see below). We will verify requests to protect privacy.

Cookies & Tracking

We use cookies for site functionality and analytics. You may control or delete cookies in your browser; blocking some cookies may affect site features.

Third-Party Links & Components

Our site or deliverables may include third-party tools, open-source code, or links. Those tools have their own policies; we aren't responsible for their practices.

Children

Our services are not for children under 18. We do not knowingly collect data from minors. If we learn we have collected such data, we will delete it.

International Transfers

If data is transferred outside your country (for example, to a hosting provider), we take reasonable steps to protect it and comply with applicable laws.

Changes to This Policy

We may update this policy. We'll post the revised policy with a new "Last updated" date. Significant changes affecting existing clients will be communicated when feasible.

Contact & Exercising Rights

To ask questions, exercise rights, request a Data Processing Agreement (DPA) for enterprise needs, or report concerns, contact us below: