Privacy Policy

Who we are

Write to us at 808B, DLF Prime Tower, Pocket F, Okhla Phase I, Okhla Industrial Estate, New Delhi, Delhi 110020, India, or at support@blackwarelabs.com. Our Dubai office is at IFZA Business Park, Building A2, Dubai Silicon Oasis, Dubai, UAE. For anything about your personal data, contact Nabeel Syed at nabeel@blackwarelabs.com or +91 74539 99988. We don't have a formal Data Protection Officer because the law doesn't require one for a studio our size.

What we collect, why, and our legal basis

Contact form and email: you give us your name, work email, company, your answers to the three questions and any note. We use them to reply and to scope work. Legal basis: taking the steps you asked for before a contract, and our legitimate interest in answering enquiries. You don't have to give them, but we can't reply without an email address.

Client work: contact and billing details for the people we work with. Legal basis: our contract with you, and our legal duty to keep financial records.

Server and security logs: your IP address, the page requested and your browser type, in our hosting provider's logs. The contact form holds your IP in memory for up to ten minutes to stop repeat submissions. Legal basis: our legitimate interest in keeping the site secure and working.

Analytics: only if you accept it on the banner. Legal basis: your consent. See Cookies and analytics below.

We don't make decisions about you by automated means alone, we don't sell your data, and we don't add you to a mailing list.

BW-01, our chat assistant

What you type into BW-01, plus the last few turns of the conversation, is sent to OpenRouter, which passes it to the model provider that generates the reply; if that fails it goes to OpenAI instead. Your IP address is not sent, only the text. We don't keep the conversation. Legal basis: our legitimate interest in answering your questions, and your choice to use the chat. Please don't enter personal or confidential details. BW-01 can be wrong, and its answers are not quotes or offers.

Cookies and analytics

We use Google Analytics 4 to see which pages get read and where visitors come from. It does not load at all until you click Accept on the banner. After that it sets _ga cookies, which last up to 13 months, and sends Google the pages you view, your referring source, your device and browser type, and your IP address, which Google uses to work out a rough location and then discards. Google acts on our instructions. Google Signals, advertising features and remarketing are off, nothing from this site is used to target ads at you, and Google keeps the analytics data for two months, or fourteen months for user-level data, which resets on each visit. Google's own terms are at policies.google.com/privacy.

Two small items are saved in your browser whatever you decide, neither of them a cookie: your answer to the banner, with the date you gave it, so we stop asking; and your light or dark theme, only if you use the toggle. Neither leaves your device. We ask for your answer again after twelve months.

You can change your mind whenever you like, and taking consent back is as easy as giving it: Cookie settings reopens the banner. Withdrawing doesn't affect anything collected before. You can also block or clear cookies in your browser.

Who we share it with

Amazon Web Services hosts the site in Stockholm, in the European Union. Resend delivers contact-form messages to our inbox at Google (Gmail). OpenRouter and OpenAI power BW-01. Google provides analytics, only if you accept. Each of them acts on our instructions under a data processing agreement. Our Dubai company, Blackware Labs - FZCO, works with us on engagements in the Gulf and receives client details for that purpose. We share data with anyone else only if the law requires it.

Where your data goes

The site itself is hosted in the European Union. Resend, OpenRouter, OpenAI and Google are in the United States, and our Dubai company is in the UAE. Where data about people in the EU or UK goes to the United States we rely on the EU–US Data Privacy Framework where the provider is certified and on the European Commission's Standard Contractual Clauses otherwise. Ask us for a copy.

How long we keep it

Enquiries that don't become work: twelve months from our last contact. Client records: eight years, because tax law says so. Server logs: thirty days. Analytics: two months for event data and fourteen for user-level data, at Google. Then we delete or anonymise it.

Your rights

You can ask to see, correct, delete, restrict or move your data, and object to how we use it. Where we rely on consent, you can withdraw it at any time. Email nabeel@blackwarelabs.com and we'll reply within thirty days. We won't charge you, and we may ask you to confirm who you are.

Where you live

EU and UK: you can complain to your local data protection authority, or in the UK to the ICO at ico.org.uk. India: our Grievance Officer is Nabeel Syed, nabeel@blackwarelabs.com, +91 74539 99988, at the address above. We resolve complaints within thirty days; if you are not satisfied you can approach the Data Protection Board of India. On request we'll provide this notice in any language listed in the Eighth Schedule to the Constitution. UAE: you can complain to the UAE Data Office.

Children

This site is not meant for anyone under 18, and we don't knowingly collect their data.

Security

We use reasonable technical and organizational measures to protect data in transit and at rest. No method of transmission or storage is completely secure, and we can't guarantee absolute security.

Changes

We'll update this page when our practices change and update the date above. Material changes will be flagged on the homepage.

Contact

Questions about this policy: support@blackwarelabs.com.