Plain-English Privacy Standards

Privacy Policy

We collect only the data needed to build your software, process payments, and run our free tools. We do not sell your personal information.

Last Updated: October 16, 2026·Effective Date: October 16, 2026

Summary in 30 Seconds

  • • No data selling: We never sell, rent, or trade your personal data or project details.
  • • Payment privacy: Payments are processed via Stripe. We do not store credit card numbers on our servers.
  • • Code & IP confidentiality: Your product ideas, proprietary business logic, and code repositories remain strictly confidential.
  • • Full control: You can request data export or deletion at any time by emailing contact@tessellatelabs.com.

1. Information We Collect

Tessellate Labs ("we," "us," or "our"), operated by Tudor Barbu, collects information to provide our software engineering services, operate our free founder tools, and communicate with clients.

A. Information You Provide Directly

  • Inquiries and Contact Forms: When you submit a project inquiry or contact request, we collect your name, email address, project requirements, budget, and timeline.
  • Sprint Collaboration Data: When working together on an MVP sprint, we collect technical specifications, brand assets, and feedback necessary to complete the build.
  • Interactive Tool Inputs: When using our free calculators and generators (such as the Mini PRD Generator or MVP Cost Estimator), you provide product descriptions and configuration inputs. When you choose to save a report, we store this data under a unique identifier in our secured database.
  • Purchases: When purchasing books or digital resources, payment processing is handled through Stripe. Stripe collects billing details in accordance with their privacy policy. We retain record of the transaction ID, purchase date, and email address.

B. Information Collected Automatically

  • Analytics Data: We collect aggregate traffic and page interaction metrics through privacy-focused analytics (DataFast) and Google Tag Manager. This helps us identify popular articles and optimize tool performance.
  • Technical Logs: Our web servers and content delivery networks (Netlify) record standard HTTP request data, including IP addresses, browser user agents, and referral URLs, used solely for diagnostic security and availability monitoring.

2. How We Use Your Information

We use collected information solely for genuine business purposes:

  • To evaluate project scope, prepare engineering sprint agreements, and deliver custom software builds.
  • To communicate sprint updates, deploy preview builds, and provide ongoing technical collaboration.
  • To generate and deliver exportable reports from our interactive calculators and PRD tools.
  • To process billing, invoices, and payment receipts.
  • To safeguard against automated abuse, denial-of-service attempts, and unauthorized system access.

3. Third-Party Service Providers

We partner only with vetted infrastructure and software providers who maintain strict data protection standards:

Hosting & CDN

Netlify (SOC 2 Type II certified edge hosting and serverless functions).

Database & Storage

Supabase (PostgreSQL with Row-Level Security and encryption at rest).

Payment Processing

Stripe (PCI-DSS Level 1 certified payment infrastructure).

Consent & Analytics

Cookiebot (GDPR consent compliance) and DataFast (cookieless analytics).

4. Data Security and Confidentiality

Client confidentiality is central to our engineering studio. All proprietary code, database credentials, and business logic shared during an engineering engagement are treated as confidential information under mutual non-disclosure obligations.

We use HTTPS encryption for all browser traffic, enforce strict PostgreSQL Row-Level Security (RLS) policies on application databases, and manage repository permissions through multi-factor authenticated developer accounts.

5. Cookies and Tracking Technologies

We use cookies to maintain website sessions and evaluate site performance. You can manage your preferences or decline non-essential cookies at any time via the consent banner managed by Cookiebot. Your browser also provides settings to reject or delete cookies directly.

6. Your Rights (GDPR & CCPA)

Regardless of your location, we honor standard privacy rights:

  • Access: You can request a summary and copy of personal data we maintain about you.
  • Correction: You can ask us to correct inaccurate or incomplete contact records.
  • Erasure: You can request complete deletion of your personal data and project history, subject to statutory tax and bookkeeping requirements.
  • Opt-Out: You can opt out of any email communications with one click or by contacting us.

To exercise any of these rights, email us directly at contact@tessellatelabs.com. We respond to verified requests within 30 days.

7. Contact Us

If you have questions about this Privacy Policy or how your data is handled, please get in touch:

Tessellate LabsLead Engineer: Tudor Barbu contact@tessellatelabs.com
Contact Studio →