Who is responsible
Ash Web & SaaS is a service of Raptor Manga LLC. Raptor Manga LLC is responsible for the business information described in this notice, and Arshia Shafei is the contact for privacy questions.
Information received through this website
When you submit the contact form, we receive the details you provide, such as your name, business, business country, email address, project type, budget range, and project description. The information is used to respond to your inquiry, discuss and document a possible project, prevent abuse, and keep an appropriate record of the conversation.
Logo introduction and direct contact links
The ash-home-intro-v3 session-storage marker remembers which version of the 3.8-second homepage introduction you finished or skipped in the current tab. Other pages do not set this marker. Returning to the homepage in the same tab does not replay the animated introduction. It contains only “full” or “reduced”, is not sent to the server, and is not used for tracking. You can skip the introduction. A reduced-motion preference shows a still-logo version. Choosing animations after a still preview shows the first animated reveal. Hidden tabs pause the introduction. The separate ash-home-motion-v1 session preference stores only “full” or “reduced” after you use Play animation, Enable animations or Reduce motion. It controls the studio presentation for that tab only. The preference is not transmitted to a server and is not used for tracking. Phones and touch screens always use a natural scrolling layout.
WhatsApp and social-profile links are ordinary outbound links, not embedded tracking widgets. They do not load those providers on an ordinary visit. If you choose a WhatsApp link, WhatsApp processes the phone number in the link and any message you decide to send under its privacy policy. A generic project message may be prefilled; form answers and enquiry details are never copied into it. With optional analytics consent, we measure the contact method clicked, not your phone number or message. Opening a chat does not count as a submitted enquiry or a confirmed lead.
Children and age limits
This website and its services are intended for business contacts who are at least 18 years old. They are not directed to children, and we do not knowingly collect personal information from anyone under 13. The project form requires the sender to confirm that they are at least 18 and authorized to make the business inquiry.
If we learn that information from a child under 13 was submitted, we will remove or de-identify it unless keeping a limited record is legally required to protect the child, respond to a valid request, or document the deletion. A parent or guardian can contact ash@ashwebsaas.com.
Permission-first referrals
A referrer should share another person’s business details only after that person agrees to the introduction. Referral information is used to confirm fit and respond to the introduction; it is not permission for repeated contact. A request not to continue is recorded and honored.
Regional pricing selector
The contact form asks for the business country so we can respond with relevant scope and communication details. The published website price is shown in U.S. dollars and does not change automatically based on device location or time zone.
Payments
Payments are processed on Stripe-hosted checkout pages for Raptor Manga LLC. When you open or use Stripe checkout, Stripe receives payment and transaction information under Stripe’s privacy policy. Depending on the checkout configuration, that can include your email, name, business name, billing address, payment-method information, currency, payment status, device and fraud-prevention data, and acceptance of applicable terms. We do not receive your full card number.
We use payment records to match a payment to a project, provide the service, issue or verify receipts, prevent fraud, handle disputes or refunds, maintain accounting records, and meet legal obligations. Payment and accounting records may be retained for the period required by tax, financial, contractual, and legal rules.
Hosted client sites
When a client selects managed hosting or care, hosting and infrastructure providers may process limited technical information needed to deliver and protect that site, such as IP addresses, request times, requested pages, device or browser information, security events, and operational logs. Retention depends on the provider, security need, care plan, and written project scope.
Each client remains responsible for the content, forms, cookies, analytics, notices, and customer information used on its own site. Any additional data collection, analytics, accounts, or custom software must be documented in that client’s scope and privacy materials.
Optional website analytics
This Ash Web & SaaS website uses a configured Google Analytics 4 property, but the Google tag loads only after the visitor chooses to allow optional analytics. Choosing “no thanks” keeps the tag off; the choice is stored in the browser so the question does not repeat on every page.
If allowed, Google Analytics may receive limited device, browser, approximate location, page, referral, and interaction information under Google’s privacy policy. Measurements can include page visits, scrolling, outbound-link or file interactions where present, clicks to call or email, successful project-enquiry submissions, and strictly formatted campaign source, medium, and campaign-name values when they are present in a referral link. Query strings are removed from the page and referring URLs sent by this implementation, suspicious campaign values are discarded, and consented campaign attribution ends with the current browser session. Analytics is used to understand and improve the site, not to guarantee or directly create search rankings. You can clear the site’s local and session storage to reset the choice.
Analytics is not used to infer whether a visitor is a child, build profiles about children, or target advertising to children. Names, email addresses, project descriptions, and other form answers are not intentionally sent to Google Analytics. If we obtain actual knowledge that information from a child under 13 was submitted, the deletion process described above applies.
The web server does not set a cookie during an ordinary visit. The site uses browser local storage only after an analytics choice is recorded. Session storage is used for consented campaign attribution and for a strictly necessary ash-project-note-sent confirmation marker after the server accepts an enquiry. That marker is only the value “yes,” contains no form details, is consumed when the thank-you state is shown, and otherwise ends with the browser-tab session. If Google Analytics is activated and allowed, Google may set first-party analytics cookies; this implementation requests a 90-day expiration and does not refresh that expiration on each page load. No advertising or retargeting tag is intentionally loaded by this site. See Cookie and analytics choices to review or change the setting, and see the accessibility statement for assistance.
No sale or targeted-advertising sharing
Ash Web & SaaS does not sell personal information and does not share personal information for cross-context behavioral advertising. This site does not intentionally load advertising, retargeting, or profiling tags. Necessary service providers may still process limited information for the specific purposes described in this notice, such as delivering an inquiry, processing a payment, protecting the site, or operating consented analytics.
The site recognizes an enabled Global Privacy Control signal as a request to keep optional analytics off. When that signal is detected, the site records analytics as not allowed, removes available first-party Google Analytics cookies for this domain, clears consented campaign attribution, and does not load the Google tag. See Cookie and analytics choices for the current browser state.
Domain setup and limited authorization
When a private client setup offers a provider authorization flow, the provider shows the requested access before the client approves it. Ash Web & SaaS may receive the domain or zone identifier, authorization status, verification records, and limited technical access needed to perform the approved DNS operation. Account passwords are not requested or received through this process.
Short-lived authorization credentials are used only for the approved connection and are revoked or discarded after the operation where the provider supports that workflow. If limited authorization is unavailable, the client can add supplied DNS records directly or grant appropriately limited access. Necessary verification and audit records may be retained with the project file.
Business-development research
Ash Web & SaaS may research limited business contact information that an organization has chosen to publish on its official website, official business social profile, public business directory, or public corporate record. This can include the business name, location, website, public business email, public business phone, named business contact, observed website condition, and the public source URL.
This information is used only for carefully limited business-development communications about a relevant website or software opportunity. A public business listing is not treated as unlimited permission to contact someone. International activity is enabled only after a market-specific review; where applicable rules require consent, registry screening, or another condition, the outreach remains on hold until that condition is met.
Source, minimization, and retention
Contact information is not guessed, pattern-generated, purchased, or taken from hidden sources. Research records are limited to what is needed to verify the business, avoid duplicate contact, personalize the message, monitor delivery, and honor objections. Prospect research that does not result in a conversation is reviewed and removed or minimized after a reasonable campaign period. Suppression records may be retained longer so that an opt-out, invalid address, or wrong-party result is not contacted again.
Website enquiries are retained while the request is evaluated and, if a project proceeds, for the project, accounting, support, dispute, and legal periods that apply. An enquiry that does not proceed is periodically reviewed and deleted or minimized when it is no longer needed. Security logs, delivery records, and provider records follow the shortest period that remains reasonably necessary for abuse prevention, troubleshooting, contractual records, and applicable law.
Service providers and security
Google Workspace is used for business email, Stripe for payment processing, and Resend for transactional website-form delivery. Hosting, DNS, Cloudflare security, infrastructure, and related providers may process limited technical or message data as needed to provide their services. Reasonable protections may include HTTPS, access controls, input validation, rate limiting, spam mitigation, and restricted operational access. No system can be guaranteed completely secure.
Your choices and rights
You may ask what contact information is held about you, request correction or deletion where applicable, or object to business-development use at any time. Reply “no thanks” to an outreach message or email ash@ashwebsaas.com. Objections and opt-outs are honored and recorded on a suppression list.
To protect another person’s information, a request may require reasonable identity or authority verification. A request can be limited where keeping information is required for accounting, security, legal claims, or another lawful obligation. Depending on where you are located, additional rights may apply.