Privacy Policy

This notice describes processing through the public JT AI Digital Studio website and contact form. JT AI Digital Studio is responsible for processing through this website from its published operating location in Riyadh. The complete legal contracting entity is identified in the signed engagement agreement when a service relationship is formed.

For privacy questions and rights requests, contact studio@jtaidigital.com. Reading this notice is not treated as consent for processing that requires a separate choice.

When you submit the contact form: • Name and email address • Phone number and company name, if you provide them • Requested service and a budget range, if selected • Message text and language

When you use the site: • The server temporarily processes the network address for abuse prevention and rate limiting; it is not added to the inquiry record • A short-lived request-protection cookie • Consent and theme choices in local browser storage • Cookie-free Vercel analytics in production, only after analytics consent

Do not submit health, financial, or other sensitive personal information through the contact form.

We use inquiry data to respond, assess the request, protect the form from abuse, and create a follow-up record after successful delivery.

The applicable legal basis depends on context and law: your consent for optional analytics; pre-contract steps or contract performance when you request a service; and legitimate interests or legal obligations where the law permits. You can withdraw analytics consent from the site notice without affecting prior lawful processing.

Data may be processed by the hosting and database providers. When notification channels are configured, an inquiry summary may be sent to the studio email or an operational Slack channel. Vercel analytics runs only with your choice and in a supported production environment.

Processing locations depend on the provider and actual configuration. International-transfer requirements and appropriate safeguards must be reviewed before a provider is enabled for a specific deployment or engagement. Contact-form data is not used to sell marketing lists.

The application code includes input validation, CSRF protection, request rate limiting, minimization of data stored with an inquiry, and redaction of sensitive fields in structured logs.

Transport encryption, edge infrastructure, backups, and provider access depend on the actual deployment environment. This notice does not claim an unverified external penetration test or security certification. No transmission or storage method is risk-free.

Depending on the applicable law and processing context, your rights may include notice, access, a readable copy, correction or completion, deletion, and withdrawal of consent.

Send a request to studio@jtaidigital.com. We may request limited information to verify identity and protect other people’s data. We respond within applicable legal timelines; Saudi implementing regulations specify 30 days for rights requests and allow a limited extension when its conditions and notice requirements are met.

An inquiry record is retained while needed to respond, follow up, or form an engagement, then reviewed for deletion when that purpose ends unless a legal obligation or active dispute requires longer retention. We do not publish a numeric period that is not operationally enforced.

Browser storage for consent and theme remains until cleared or the policy version changes. The request-protection cookie lasts one hour. Analytics retention follows the actual analytics-provider configuration.

Privacy email: studio@jtaidigital.com Public location: Riyadh, Saudi Arabia

You may contact us first to address the request. You may also complain to the competent supervisory authority where applicable law provides that right.