Privacy Policy

This policy explains what personal data we collect, why, and your rights. The data controller is Elias de Sena, trading as Newton Studios, Bützenstrasse 17, 8185 Winkel, Schweiz, reachable at hello@newton-studios.com. We process personal data under the Swiss Federal Act on Data Protection (revFADP) and, where it applies, the EU General Data Protection Regulation (GDPR).

1. What this covers

This policy covers Newton Studios and everything we run on newton-studios.com and its subdomains:

• The marketing site (newton-studios.com) — public pages and a contact form. No account needed.
• Our WhatsApp number — the way we reply to most enquiries. Write to us there, or leave your number on the contact page and open the chat from the link we show you. Section 1b explains how those conversations work.
• Our booking page — a few qualifying questions and a time slot for an introductory call. It is unlisted and reached by invitation, so it is not linked from this site. No account needed.
• The client portal (clients.newton-studios.com) — for people we already work with. Sign-in by emailed link or Google, and it holds their projects, files, agreements and invoices.
• The payment page (pay.newton-studios.com) — pays a specific invoice by card, TWINT or Swiss bank transfer. Card details go straight to Stripe; we never see or store them.

1a. Google user data — what we ask for and why

Two separate things use Google, and neither reads anything belonging to you beyond what is listed here. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

• Signing in to the client portal (optional — an emailed link does the same job). If you choose Google, we receive your name, email address and profile picture, and we use them for one purpose: to identify which client account you are. We do not read your Google contacts, files or mail, and we do not use this data for advertising.
• Booking an introductory call. This reads and writes our own studio calendar, never yours. It checks which of our times are already busy so the page can offer only free ones, and it creates the confirmed meeting with a Google Meet link and invites you. We only ever see whether our own slots are free or busy — not the contents of any calendar entry, ours or anyone else's.

We do not sell Google user data, we do not transfer it to third parties except the processors listed below that operate the service on our behalf, and we do not use it to train generalised AI models. If you want the Google connection to your portal account removed, email us and we will unlink it; you can also revoke access yourself at myaccount.google.com/permissions.

1b. WhatsApp and automated first replies

Our WhatsApp number runs on the WhatsApp Business Platform, operated by Meta. Messages between you and us travel through Meta's systems under WhatsApp's own end-to-end encryption and terms; what reaches us is the message you sent, your WhatsApp profile name, and your number.

The first replies may be written by an AI. To answer within minutes rather than hours, an assistant built on Claude, a model by Anthropic, drafts and sends the first replies in our name, working only from what you wrote and from the facts published on this site. It never quotes a price and it never promises a result. A person at the studio reads every conversation, takes over as soon as a question needs one — a legal or privacy matter, anything about an agreement or an invoice, a time to be agreed, or simply your request to speak to a person — and from then on the assistant stays quiet on your conversation. If you would rather not talk to an assistant at all, say so in the chat or email hello@newton-studios.com.

To draft a reply, the text of the conversation and your first name are sent to Anthropic. Your phone number is not. Anthropic processes them on our behalf and does not use them to train its models.

2. What we collect

• Contact form data: your WhatsApp number or email address and, if you provide them, your name, company, website, and message.
• WhatsApp conversations: your number, your WhatsApp profile name, the messages exchanged, and delivery receipts. Your number is stored encrypted, and our own records identify the conversation by an internal id rather than by the number.
• Technical and usage data: IP address, browser and device information, pages viewed, referrer, and marketing identifiers (such as UTM tags and a click ID) where advertising measurement is enabled.
• Consent choices: whether you allowed or declined advertising cookies (see section 6).

3. Why we use it and our legal basis

• To answer your enquiry when you write to us through the contact form, on WhatsApp or by email — including the automated first replies described in section 1b. Basis: taking steps at your request before entering into a contract, and our legitimate interest in answering quickly.
• To run and secure the website (hosting, delivery, rate limiting, spam protection). Basis: legitimate interest.
• To measure the website with Vercel Analytics, which counts page views without cookies or cross-site identifiers. Basis: legitimate interest.
• To measure advertising (the Meta pixel, only where it is configured). Basis: your consentif you are in the EEA, the UK or Switzerland — we ask before anything loads, nothing runs until you allow it, and you can withdraw at any time using the “Cookie choices” control at the bottom of this page. Elsewhere, our legitimate interest in understanding our marketing; a decline recorded via the same control is always honoured.

4. Who we share it with (processors)

We use a small number of providers to run the site. They process data on our behalf under contract:

• Vercel: website hosting, content delivery, and the cookie-less site analytics described above.
• Resend: when the contact form is connected to it, your submission is stored as a contact record and delivered to our inbox as an email.
• Meta Platforms: the WhatsApp Business Platform that carries our WhatsApp conversations, and advertising measurement via the Meta pixel, only where it is configured and, in consent regions, only after you allow it.
• Anthropic: drafts the automated first replies on WhatsApp from the text of the conversation, as described in section 1b.
• Cloudflare: bot and spam protection on the contact form (Turnstile), where enabled; it receives your visitor IP address.
• Supabase: the database and file storage behind the client portal — projects, files, agreements, invoices, the answers you give the booking page, and our record of WhatsApp conversations.
• Stripe: card and wallet payments on the payment page. Card details go to Stripe directly and never reach our servers.
• Google: sign-in for the client portal (optional), and the calendar and Meet link for a booked introductory call, as described in section 1a.

We do not sell your personal data.

5. International transfers

Some of these providers are based in the United States (Vercel, Resend, Meta, Cloudflare, Supabase, Stripe, Google, Anthropic). Where data is transferred internationally, we rely on appropriate safeguards such as adequacy decisions or the European Commission's Standard Contractual Clauses.

6. Cookies and similar technologies

This site sets very few cookies, and none until they are needed:

• consent (essential): records your answer to the advertising-cookies question, kept for up to a year so we do not have to ask again.
• consent_required (essential): records whether your region requires us to ask before advertising tools load. It contains a yes/no flag, not your location.
• Advertising: the Meta pixel sets its own identifiers — only where the pixel is configured and, in the EEA, the UK and Switzerland, only after you consent.

The “Cookie choices” control at the bottom of this page (and in the site footer) is the direct route: it clears your stored answer and asks again, so withdrawing consent is as easy as giving it. You can also control or block cookies through your browser settings, or email hello@newton-studios.com to object and we will act on it.

7. How long we keep it

Contact form submissions are kept while we still have a use for them — answering you, and keeping a record of the conversation — and until you ask us to delete them; we do not currently run an automatic purge, so if you want a submission removed, email us and we will delete it. WhatsApp conversations are kept on the same terms: while we are still talking, or while there is a working relationship to keep a record of, and deleted on request. Consent cookies expire on their own within a year.

8. Your rights

Subject to law, you can ask us to:

• access the personal data we hold about you, and get a copy;
• correct data that is wrong or incomplete;
• delete your data;
• restrict or object to certain processing, including direct marketing;
• receive your data in a portable format;
• withdraw consent at any time, without affecting processing already done.

To exercise any right, email hello@newton-studios.com. You also have the right to complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU, your local data protection authority.

9. Security

We take reasonable technical and organisational measures to protect your data, including transport encryption, access controls on the systems that hold contact submissions, and encryption at rest for the phone numbers of WhatsApp conversations. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Changes

We may update this policy. The current version is the one published here, dated above. Material changes will update that date.

11. Contact

Elias de Sena, trading as Newton Studios, Bützenstrasse 17, 8185 Winkel, Schweiz. Email hello@newton-studios.com.