Last updated: July 19, 2026
At EchoTray ("we," "us," or "our"), we are committed to protecting the privacy, security, and integrity of the personal data of our visitors, clients, and partners. This Privacy Policy details our practices concerning the collection, use, disclosure, storage, and processing of your personal information when you access our website (https://echotray.com), utilize our digital applications, or engage our independent product studio services.
1. Scope of This Policy
This policy applies to all users who interact with our services, website, features, products, or digital studio offerings. It does not apply to any third-party websites, applications, services, or tools that are linked to from our platform, which maintain their own independent privacy notices. We advise you to read those notices carefully before engaging with third-party products.
2. Information We Collect
We collect personal information directly from you, automatically through your use of our site, and, in certain circumstances, from third-party sources. The categories of information we collect include:
A. Information You Direct Provide to Us
- Identity & Contact Details: Your name, business affiliation, telephone number, and email address (e.g., when contacting us via x@echotray.com).
- Project & Inquiry Data: Detailed information about your product design and software development requirements, budget specifications, and technical plans shared via email, contract forms, or virtual consults.
- Communication History: The contents of any correspondence, feedback, or support tickets you transmit to us.
B. Information Collected Automatically
- Device & Usage Information: We automatically record technical metrics, including internet protocol (IP) addresses, browser type, operating system, referencing/exit pages, timestamps, clickstream data, and navigation pathways.
- Tracking Technologies: We utilize cookies, pixels, and web beacons to coordinate session states and analyze audience interaction. For detailed configuration controls, please consult our Cookies Policy.
3. Legal Bases for Processing Data (GDPR Compliance)
If you reside in the European Economic Area (EEA) or the United Kingdom (UK), we process your personal data in compliance with the General Data Protection Regulation (GDPR) and UK Data Protection Act 2018 under the following legal bases:
- Contractual Obligations: To execute or prepare services agreements, proposals, and project delivery terms at your request.
- Consent: Where you have explicitly authorized processing for specific purposes (e.g., subscribing to notifications, cookie preferences). You may withdraw this consent at any time.
- Legitimate Interests: To secure, analyze, optimize, and maintain our digital products and website, and to manage our client relationship records, provided these interests are not overridden by your fundamental rights.
- Regulatory Compliance: To satisfy legal, tax, accounting, and security obligations, or to respond to legitimate administrative requests.
4. Retention of Data
We retain your personal information only for as long as is necessary to satisfy the purposes set out in this policy, including the fulfillment of service agreements, legal requirements, dispute resolution, and security auditing. When personal data is no longer required, it is securely deleted, aggregated, or anonymized.
5. Information Sharing and Disclosure
We do not sell, license, rent, or trade your personal information to third parties. We disclose data only in the following controlled scenarios:
- Service Providers: We may share data with vetted third-party vendors who provide IT hosting, communication systems, cloud storage, database support, and analytics tools. These providers are bound by strict data processing agreements (DPAs) to protect your information.
- Legal Enforcement: If required to do so by applicable statutory law, judicial order, subpoena, or to protect the safety, properties, and legal rights of EchoTray, our personnel, or our clients.
- Business Transfers: In connection with, or during negotiations of, any merger, sale of studio assets, consolidation, restructuring, or acquisition of all or a portion of our business.
6. International Data Transfers
EchoTray is based in the United States. Data we collect may be transferred to, and processed in, countries outside your jurisdiction of residence. Where international transfers occur, we implement appropriate security controls, including European Commission-approved Standard Contractual Clauses (SCCs), to guarantee your personal data remains subject to equivalent safeguards.
7. Your Data Protection Rights (GDPR & International Regulations)
Depending on your location, you may possess the following legal rights regarding your personal information:
- Right of Access: The right to request copies of the personal data we hold about you.
- Right to Rectification: The right to demand that we correct inaccurate or incomplete information.
- Right to Erasure ("Right to be Forgotten"): The right to request deletion of your personal data under specific conditions.
- Right to Restrict or Object to Processing: The right to limit how we use your data or object to legitimate interest processing.
- Right to Data Portability: The right to receive your data in a structured, machine-readable format.
8. U.S. State Privacy Rights (CCPA / CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you specific rights. EchoTray does not "sell" or "share" personal information as defined by California statutes. You have the right to request access to the categories and specific pieces of data collected, request deletion, correct inaccuracies, and opt-out of potential automated profiling, without discrimination.
9. Contact Us
If you have any questions, complaints, or exercise of your statutory rights regarding this policy, please reach out to our team at:
EchoTray
2261 Market Street
STE 46053
St. Louis, CA 94114 US
Email: x@echotray.com