Privacy Policy
Last updated: April 8, 2026
1. Introduction
Carbon Studio ("we," "us," or "our") operates the website located at carbonstudio.io (the "Site"). We are a digital marketing and demand generation agency headquartered at 9127 East Gary Lane, Mesa, Arizona 85207.
This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our Site, use our services, or submit an application through our platform. By accessing or using the Site, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the Site immediately.
2. Information We Collect
2.1 Information You Provide Directly
When you submit an application or otherwise interact with our Site, we may collect the following categories of information:
- Contact Information: Full name, first name, last name, email address, phone number
- Business Information: Business name, website URL/domain, industry, services offered, number of locations, years in practice, annual revenue range, monthly marketing investment
- Qualification Data: Agency history and experience, decision-maker status, business operations details
- Industry-Specific Information:
- Med Spa clients: Operational structure, top revenue-generating services, booking system used, promotions and membership programs, content/photo workflow details
- Law Firm clients: Practice areas, average case value, intake methods, lead response time, case management software, advertising channels and spend
- Referral Information: How you heard about us (e.g., Google, social media, referral, podcast, event, or advertisement)
2.2 Information Collected Automatically
When you visit our Site, we may automatically collect certain information, including:
- Device Information: Browser type, operating system, device type, screen resolution
- Usage Data: Pages visited, time spent on pages, click patterns, referring URL, exit pages
- Network Information: IP address, approximate geographic location, internet service provider
- Cookies and Similar Technologies: Session cookies, preference cookies, and analytics cookies (see Section 7 below)
2.3 Information from Third-Party Sources
We may supplement the information we collect with data from publicly available sources, including publicly accessible website data when you provide your business domain during our application process. This automated analysis may include detection of your business name, industry, services, unique selling points, and brand signals.
3. How We Use Your Information
We use the information we collect for the following purposes:
- Service Delivery: To evaluate your application, qualify your business for our services, and deliver customized marketing and demand generation campaigns
- Communication: To contact you regarding your application, schedule strategy sessions, send service-related updates, and respond to your inquiries
- Business Analysis: To analyze your website and business presence in order to tailor our marketing strategies to your specific needs
- Lead Qualification: To assess and score your application to determine the best service path for your business
- Improvement: To improve our Site, services, application process, and user experience
- Marketing: To send you relevant resources, newsletters, seasonal campaigns, and nurture content (with your consent or where permitted by law)
- Legal Compliance: To comply with applicable laws, regulations, and legal processes
- Security: To detect, prevent, and respond to fraud, abuse, security risks, and technical issues
4. How We Share Your Information
We do not sell your personal information. We may share your information in the following limited circumstances:
- Service Providers: We share information with trusted third-party vendors who assist us in operating our business, including email delivery services (e.g., Mailgun), hosting providers (e.g., Vercel), analytics platforms, and advertising platforms (e.g., Google Ads, Meta) used in executing campaigns on your behalf
- Advertising Partners: When managing paid advertising campaigns for clients, we may share limited business information with advertising platforms solely for campaign execution
- Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction
- Legal Requirements: We may disclose information when required by law, subpoena, court order, or government regulation, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others
- With Your Consent: We may share information for any other purpose with your explicit consent
5. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting obligations. Specifically:
- Active Client Data: Retained for the duration of our business relationship and for a reasonable period thereafter
- Application Data: Retained for up to 24 months after submission to facilitate re-engagement or re-application
- Marketing Data: Retained until you unsubscribe or request deletion
- Analytics Data: Retained in anonymized or aggregated form indefinitely
You may request deletion of your personal data at any time by contacting us at sales@carbonstudio.io.
6. Data Security
We implement commercially reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include:
- Encryption of data in transit using TLS/SSL
- Secure hosting infrastructure with Vercel
- Access controls limiting employee access to personal data on a need-to-know basis
- Regular security reviews of our systems and processes
However, no method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
7. Cookies and Tracking Technologies
Our Site may use the following types of cookies:
- Essential Cookies: Required for the Site to function properly, including session management and security
- Preference Cookies: Store your settings and preferences such as theme selection (dark/light mode)
- Analytics Cookies: Help us understand how visitors interact with our Site, which pages are most popular, and how users navigate through the application process
You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Site.
8. Your Rights and Choices
8.1 General Rights
Depending on your jurisdiction, you may have the right to:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete personal information
- Deletion: Request deletion of your personal information, subject to certain legal exceptions
- Portability: Request a portable copy of your data in a structured, machine-readable format
- Opt-Out: Opt out of marketing communications at any time by clicking the unsubscribe link in our emails or contacting us directly
- Restriction: Request restriction of processing of your personal information in certain circumstances
8.2 Arizona and U.S. State Privacy Rights
If you are a resident of a U.S. state with consumer privacy legislation (such as California under the CCPA/CPRA, Virginia, Colorado, Connecticut, or similar states), you may have additional rights, including:
- The right to know what personal information is being collected about you and whether it is being sold or shared
- The right to opt out of the sale or sharing of your personal information (note: we do not sell personal information)
- The right to non-discrimination for exercising your privacy rights
- The right to limit the use of sensitive personal information
To exercise any of these rights, please contact us at sales@carbonstudio.io. We will respond to verifiable requests within 45 days.
9. Third-Party Links and Services
Our Site may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party sites you visit. Third-party services we may integrate with include:
- Scheduling and booking platforms
- Advertising platforms (Google Ads, Meta Ads)
- AI-powered chatbot services
- Analytics services
10. Children's Privacy
Our Site and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe we have inadvertently collected information from a minor, please contact us at sales@carbonstudio.io.
11. International Users
Our Site is operated from the United States. If you access our Site from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence. By using our Site, you consent to the transfer of your information to the United States.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of the Site after any changes constitutes acceptance of the updated policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: