Privacy Policy
Last updated: October 1, 2026
This policy explains how Updrafted Studio LLC, trading as Limelift Studio ("we," "us"), 613 Washington Blvd. #1393, Jersey City, NJ 07310, collects, uses and shares personal information. It covers our website (limelift.studio), our preview links, our emails and our services. We serve businesses. Most information we handle is business contact information, but we treat it with care either way.
1. Information we collect
Public business information, used to prepare previews and contact businesses. We find local businesses and evaluate their websites using publicly available sources, including the Google Places API and public business listings (name, address, phone, hours, category, rating, review count); the business's own public website (text, images, contact details, owner or staff names it publishes); and public reviews and photos. We use this to decide whom to contact, to build a private redesign preview, and to send a business email to the publicly listed or role-based business address.
Information you give us, such as your name, business name, email, phone and billing address; the content you send for your site; domain and registrar details; your messages to us; and referral details.
Payment information. Payments are handled by Stripe. We receive limited details (such as card brand, last four digits and payment status). We never receive or store your full card number.
Automatic information. When you visit our site or a preview, we collect IP address, browser and device type, pages viewed, approximate location (city level), timestamps, and preview events such as whether a PIN was entered or a tweak was requested.
Email engagement. We may record whether our emails were delivered, opened or clicked, so we can measure campaigns and honor opt-outs.
Visitors to client websites we host. When a visitor submits a contact form on a client's site, we process that message on behalf of our client, who decides how it is used. Their privacy notice governs it.
2. How we use information
We use information to identify businesses that may benefit from a redesign and prepare their previews; send business emails about our services; provide, host, support and bill for the services you buy; send service, billing and renewal notices; run the referral program; secure our systems and prevent fraud and abuse; improve our services, including measuring which designs and emails perform best; and comply with law and enforce our Terms.
AI tools. We use AI tools to help create drafts and imagery from business content. We do not use your private content to train our own AI models, and we choose providers whose terms restrict using customer inputs to train their models where that option is available.
3. Cookies and analytics
Our site uses essential cookies (for example, to keep a preview unlocked after you enter the PIN). We may use privacy-friendly analytics (such as Cloudflare Web Analytics) to understand visits in aggregate. We do not use advertising cookies or cross-site tracking, and we do not run targeted advertising based on your activity. If we ever do, we will update this policy, provide an opt-out, and honor browser opt-out signals such as Global Privacy Control.
4. How we share information
We do not sell personal information and do not share it for targeted advertising. We share it only with:
- Service providers that process it for us under contract, including Stripe (payments), Cloudflare (hosting, security, storage), Google Workspace (email), Notion (project and client records), GitHub (code hosting), AI image and text providers, and Google Maps Platform (business data).
- Your registrar or DNS provider, when we act on your instructions to connect your domain.
- Professional advisers (lawyers, accountants), under confidentiality.
- Authorities, when required by law or to protect rights and safety.
- A buyer or successor, if our business is sold or reorganized, subject to this policy.
5. How long we keep information
| Information | How long |
|---|---|
| Unpurchased previews | Deleted 14 days after we send them, or sooner on request |
| Prospect records (business name, website score, contact details, email history) | Up to 12 months from last contact |
| Unsubscribe / do-not-contact list | Kept indefinitely so we never contact you again (email address and business name only) |
| Client account and site content | While you are a client; backups deleted within 90 days after the account ends |
| Files Only download links | Expire after 30 days |
| Billing and tax records | As long as tax and accounting law requires (generally 7 years) |
6. Marketing emails and your choices
Every marketing email we send identifies us, includes our physical address, and includes a one-click unsubscribe link. We process opt-outs promptly, and always within 10 business days. You can also reply "unsubscribe," use our unsubscribe page, or email [email protected]. We do not send unsolicited text messages or make automated marketing calls. Even after you unsubscribe, we may still send messages about services you bought, such as receipts, renewal notices and security alerts.
7. Your privacy rights, including New Jersey residents
Under the New Jersey Data Privacy Act (effective January 15, 2025) and similar state laws, individuals may have the right to confirm whether we process their personal data and access it; correct inaccurate data; delete their data; obtain a portable copy; and opt out of the sale of personal data, targeted advertising and profiling for significant decisions. We do not do any of these, but you may still submit an opt-out, and we honor recognized universal opt-out signals. Some of these laws do not cover information about people acting in a business capacity. We extend these choices to everyone who asks, wherever they live.
How to make a request. Email [email protected] with the subject "Privacy Request," or write to our address. We may need to verify your identity. An authorized agent may submit a request with proof of authorization.
Our response and your right to appeal. We respond within 45 days, and may extend once by 45 more days if reasonably necessary (we will tell you if we do). If we decline, we will explain why, and you may appeal by replying with the subject "Privacy Appeal"; we will decide within 45 days. If you remain unsatisfied, you may contact the New Jersey Division of Consumer Affairs or your state attorney general. We will not discriminate against you for exercising your rights. California residents have similar rights under the CCPA, to the extent it applies to us, and may use the same process.
8. Security
We use reasonable safeguards, including encryption in transit, access controls, PIN-protected and non-indexed previews, and delegated registrar access (we never ask for passwords). No system is perfectly secure. If a breach affects your personal information, we will notify you as the law requires.
9. Children
Our services are for businesses and are not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe we have, contact us and we will delete it.
10. Where data is processed
We are based in the United States, and our providers may process data in the US and other countries, with appropriate safeguards.
11. Changes
If we change this policy, we will update the date above. If the change is material, we will notify clients by email before it takes effect.
12. Contact
Updrafted Studio LLC, trading as Limelift Studio · 613 Washington Blvd. #1393, Jersey City, NJ 07310 · [email protected]