Privacy Policy

We're a small crew, not an ad network. We collect what we need to talk to you, do the work you hired us for, run the site, and keep the lawyers happy. Nothing creepier than that.

01Who we are

DirtyJobs.studio is operated by Dirty Jobs Studio. When this policy says “we”, “us”, or “Dirty Jobs”, it means Dirty Jobs Studio. When it says “you”, it means the person visiting the site or engaging us for production oversight work.

02What we collect

Information you give us

• Contact details — name, email, company, and anything else you put in an audit booking, intake form, or email.
• Engagement details — what you want fixed, links to your repo, deploy targets, stack info, and any context you share to scope the work.
• Billing information — handled by our payment processor; we receive transaction metadata (amount, status, last four of the card), not full card numbers.
• Communications — the emails, Slack messages, Loom recordings, and call notes that come out of working together.

Information we collect automatically

• Site usage — pages viewed, referrer, approximate location (from IP), user agent, and timestamps.
• Device data — browser type, OS, screen size, and similar technical attributes needed to render the site.
• Embedded video — the homepage embeds a YouTube short. YouTube/Google may set its own cookies if you interact with that player. Their policy governs that.

03How we use it

• To respond to audit requests and quote work.
• To actually do the work — security hardening, LLM observability, Senior Engineer oversight, and the rest of the menu.
• To send invoices, receipts, and engagement-related email.
• To improve the site, our process, and our writeups (in aggregate, anonymized form).
• To meet legal, tax, and accounting obligations — same as any other US business.

We do not sell your personal information. We do not run behavioral advertising. We do not train third-party AI models on your code or communications.

04Who we share it with

We share information only with vendors that help us run the business, and only the slice they need to do their job. Today that includes:

• Hosting and infrastructure — for the marketing site and any internal tools.
• Email and scheduling — for replies, bookings, and reminders.
• Payments — for processing card and ACH transactions.
• Accounting and legal advisors — under confidentiality obligations.

We'll also disclose information if required by law, to enforce our Terms, or to protect the rights, safety, or property of DirtyJobs, our clients, or the public.

05Your code and repos

When you bring us into a codebase, that code is yours. We treat it as confidential by default. Specifically:

• We access only the repos and environments you grant us access to, for the duration of the engagement.
• We do not use your private code to train models, publish examples, or write case studies without your written permission.
• We may keep our own notes, diagrams, and audit findings derived from the engagement so we can support follow-up work, but we will not publish anything identifying you without consent.
• AI-assisted analysis. We use AI development tools (including LLM-based agents) to review code, generate reports, and produce recommendations as part of our service delivery. We take care not to share secrets, credentials, or identifying personal information with these tools. You are responsible for scrubbing sensitive data from any materials you share with us; the onboarding call will cover this.

06How long we keep it

We keep engagement records, invoices, and core communications for as long as we have an active relationship plus the period required by tax and contract law (generally seven years in the US). Marketing inquiries that never become engagements are pruned within roughly two years. You can ask us to delete earlier — see Section 07.

07Your rights

Depending on where you live (California, the EU, the UK, and others), you may have the right to access, correct, port, or delete the personal information we hold about you, and to object to or restrict certain uses of it. To exercise any of those rights, email hello@mail.dirtyjobs.studio. We'll respond within 30 days. We won't discriminate against you for exercising your rights.

08Cookies and analytics

The site uses a small number of cookies and similar technologies for aggregate analytics and site-performance measurement. We don't use third-party ad trackers. You can block or clear cookies in your browser without affecting site functionality.

09Security

We use industry-standard controls — SSO with MFA on internal tools, least-privilege access to client environments, encrypted transit and storage, hardware-backed keys for sensitive credentials, and short-lived tokens wherever possible. No system is perfectly safe; if we discover a breach that affects you, we'll notify you promptly with what we know and what we're doing about it.

10Contact

Questions, requests, or complaints about this policy go to hello@mail.dirtyjobs.studio. If we change this policy in a material way, we'll update the effective date at the top and, where appropriate, email you about it.