Effective Date: November 1, 2025

1. Introduction

Welcome to Northway (operated by PROTOTYPES LLC, a Missouri limited liability company, d/b/a “Northway” (“Northway”, “we”, “us”, or “our”)).

Northway provides design-as-a-service subscriptions for businesses, delivering unlimited design requests starting at $4,995 per month through our platform at https://northway.agency (the “Service”).

This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit our website, subscribe to our services, submit design requests, or otherwise interact with us. We use your data to deliver high-quality design services, manage subscriptions, and improve your experience.

By using the Service, you consent to the practices described in this Privacy Policy. This Policy forms part of our Terms of Service (the “Terms”), which govern your use of the Service.

If you have questions, contact us at hello@northway.agency.

2. Definitions

• Service: The Northway website and design-as-a-service platform at https://northway.agency.

• Personal Data: Information that identifies you as an individual (e.g., name, email).

• Usage Data: Automatically collected data about your interactions with the Service (e.g., IP address, page views).

• Cookies: Small files stored on your device to enhance functionality.

• Data Controller: Northway, which decides how and why your Personal Data is processed.

• Data Processors (Service Providers): Third parties we use to process data (e.g., Stripe for payments).

• Data Subject/User: You, the individual using our Service.

3. Information We Collect

We collect data to provide design services, process subscriptions, communicate about projects, and improve the Service.

3.1 Personal Data

When you subscribe, submit a design request, or contact us, we collect:

• Contact Information: Name, email address, phone number.

• Business Information: Company name, billing address, job title.

• Subscription & Payment Data: Plan selection ($5K/month or custom), processed via Stripe (we do not store card details).

• Project Data: Design briefs, uploaded files/assets (e.g., logos, mockups, brand guidelines), feedback, and revision history.

• Communication Data: Messages, emails, and call notes related to your projects.

You provide this voluntarily. We only collect what’s necessary for service delivery.

3.2 Usage Data

Automatically collected via your browser/device:

• IP address, browser type/version, device info (e.g., mobile OS).

• Pages visited, time spent, referral sources.

• Mobile-specific: Device ID, OS, app interactions.

3.3 Cookies & Tracking

We use:

Essential/Session Operate the Service (e.g., login, forms). Session ID.

Preferences Remember settings (e.g., dashboard theme). User prefs.

Analytics Analyze usage (e.g., Google Analytics)._ga, _gid.

Marketing Personalized ads (e.g., Google Ads, Meta). Ads targeting.

Security Prevent fraud. CSRF tokens.

Manage Cookies: Use browser settings or our cookie banner. Disabling may limit functionality.

When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email. You may opt out of receiving this advertising by visiting https://app.retention.com/optout.

4. How We Use Your Data

We use data to:

1. Deliver design services (e.g., process requests, share mockups).

2. Manage subscriptions ($5K/month billing, renewals).

3. Communicate (e.g., project updates, invoices).

4. Provide support and gather feedback.

5. Analyze usage to improve designs and platform.

6. Prevent fraud/technical issues.

7. Send marketing (newsletters, offers) – opt-out anytime.

8. Comply with laws, enforce Terms, resolve disputes.

9. With consent: Other purposes disclosed at collection.

5. Data Sharing & Disclosure

We do not sell your Personal Data.

We share with:

1. Service Providers: Stripe (payments), Google Analytics (insights), cloud storage (e.g., AWS for files), email tools (e.g., Postmark). Bound by strict agreements.

2. Business Transfers: In mergers/acquisitions.

3. Legal: As required by law/authorities.

4. With Consent: Affiliates or partners (rare).

No sharing for unrelated ads.

6. Data Retention

• Personal/Project Data: As long as needed for services + 1 year post-termination (for disputes/audits).

• Usage Data: 26 months (analytics).

• Legal Holds: Longer if required by law.

We securely delete when no longer needed.

7. Data Transfers & Security

• US-Based: Data stored/processed in the US (secure servers).

• International Users: By using the Service, you consent to US transfers.

• Security: Encryption (TLS/HTTPS), access controls, regular audits. No system is 100% secure – report issues to us.

8. Your Rights

Global:

• Access/Delete/Update: Email hello@northway.agency.

• Opt-Out Marketing: Unsubscribe links.

• Withdraw Consent: Limits some features.

EU/EEA (GDPR):

• Rectify, object, restrict, portability.

• Complain to local authority.

California (CCPA/CPRA):

• Know: Categories collected/shared (up to 2x/year).

• Delete: From us + processors.

• Opt-Out Sale: We don’t sell – but confirm via email.

• No Discrimination.

Verify Identity: We may request proof.

9. Third-Party Links & Services

• Payments: Stripe .

• Analytics/Ads: Google .

• Opt-Out: Google Ads, YourAdChoices.

• External Links: Review their policies – we’re not responsible.

10. Children’s Privacy

Service for businesses 18+. No data from under 13. Contact us to remove.

11. Changes

We’ll notify via email/site notice. Review periodically.

12. Contact

hello@northway.agency Northway (PROTOTYPES LLC) Missouri, USA

Last Updated: November 1, 2025 This Policy complies with GDPR, CCPA, CalOPPA. Questions? We’re here.