01
Information We Collect
When you use our site, we may collect the following:
- Name and email address when you submit the contact form or book a meeting
- The message you write in the contact form
- Booking details you provide to Cal.com, such as your time zone, selected time, phone number, and answers to booking questions
- IP address, browser user agent, request URL, and related request metadata processed by our host and abuse-prevention tools
- Your cookie-consent choice and, after acceptance, analytics and advertising identifiers
- After cookie acceptance, browser-based page-view and contact-form conversion events such as the page URL, page title, and successful form submission
02
How We Use Your Information
- Responding to contact-form submissions and requested follow-ups
- Scheduling and managing meetings
- Preventing spam, abuse, and excessive contact-form submissions
- Analyzing site use and improving the experience after you accept analytics cookies
- Measuring browser-based advertising and contact-form conversions after you accept cookies
- Sending a server-side completed-booking conversion to Meta when that integration is configured. The browser cookie setting does not suppress this event, but Meta attribution identifiers are attached only after cookie acceptance
Legal bases
- Taking steps you request before a possible contract, such as replying to a project inquiry or arranging a meeting
- Our legitimate interests in operating and securing the site, preventing abuse, responding to inquiries, and measuring completed bookings
- Your consent for browser-based analytics and advertising storage, which you can withdraw through Cookie settings
- Compliance with legal obligations and the establishment, exercise, or defense of legal claims when applicable
03
Third-Party Services
The providers below process data on our behalf or receive it for the scheduling, delivery, security, analytics, and advertising functions described here.
Resend
Receives your name, email address, and full contact message so the site can deliver your submission to Garni Labs. We do not currently send an automated confirmation.
Cal.com
Provides the embedded scheduler. It processes technical request data when the scheduler loads and receives the name, email, time zone, meeting time, phone number, and booking-question answers that you choose to provide.
Upstash
Receives your IP address as a rate-limit identifier when you submit the contact form. It stores rate-limit counters and allow or block analytics to prevent abuse.
Google Analytics
After you accept cookies, receives page URLs, page titles, referral and campaign information, and browser or device metadata for site measurement.
Google Ads
After you accept cookies, receives page-view and contact-form conversion signals together with advertising attribution and browser or device metadata.
Meta / Facebook
After you accept cookies, Meta Pixel receives page-view and contact-form conversion data. A successful contact form may include a hashed email address, IP address, browser user agent, and available Meta attribution identifiers. A completed Cal.com booking also creates a server-side Schedule event when our Meta integration is configured. That booking event includes hashed email, name, and phone data when available; Meta attribution identifiers are attached only after cookie acceptance.
Vercel
Hosts the site and processes request metadata needed to serve and secure it, including IP addresses, user agents, request paths, status codes, and function logs. Booking-contact values sent to Meta are not intentionally written to those logs.
International processing
Some providers may process data outside your country. Where applicable law requires a transfer safeguard, we rely on the provider terms and transfer mechanisms available for the service. Contact us if you need more information about a specific transfer.
05
Data Retention
- Contact-form submissions and related email correspondence are kept only as long as needed to respond, maintain project records, and meet legal or business obligations. Resend and our email provider retain their copies under their service terms and account settings.
- Booking records remain in our Cal.com and connected calendar accounts until they are no longer needed or are deleted under those account settings.
- Google and Meta retain analytics and advertising data under our account settings and their published policies. Declining cookies prevents their browser tags from loading on this site.
- Contact-form rate-limit counters expire shortly after the one-hour rate-limit window. Upstash rate-limit analytics may retain the IP identifier and allow or block result for up to 90 days.
- Vercel retains runtime request logs according to our hosting and observability plan settings.
06
Security
We use technical and organizational safeguards appropriate to this site and the data it handles. No internet transmission or storage system can be guaranteed completely secure.
- HTTPS protects data while it travels between your browser and the site
- Signed webhook verification limits Cal.com booking processing to requests that pass the configured signature check
- Rate limiting and access controls reduce abuse and restrict operational access
- Service providers are limited to the functions described in this policy
07
Your Rights
Your rights depend on where you live and why the data is processed. Subject to applicable law and its exceptions, you may be able to:
- Ask whether we process your personal data and request access to it
- Ask us to correct inaccurate or incomplete personal data
- Ask us to delete personal data when the applicable conditions are met
- Ask us to restrict processing or object to certain processing when applicable
- Request a portable copy of eligible data when applicable
- Withdraw consent for future browser analytics and advertising processing at any time
Send requests to hello@garnilabs.com. We may ask for information needed to verify your identity. We will respond without undue delay and within the period required by applicable law. GDPR requests are normally answered within one month.
If GDPR applies to you, you may also complain to the data protection authority where you live, where you work, or where you believe an infringement occurred.
08
Contact
If you have questions about this privacy policy or how we handle your data, reach out to us:
hello@garnilabs.com