Applied by Fahmid

Privacy, plainly.

Applied by Fahmid is operated by XXCORP INC. in Canada. This notice covers fahmid.com, the Applied studio pages, and the project-call flow.

Last updated: September 20, 2026.

Your privacy choices

We use cookieless website analytics and a temporary Studio replay trial to understand visits and enquiries. These run by default unless you opt out below or through Privacy choices in the footer. Google Ads measurement is separate. For visitors identified as being in the United States, it runs by default with restricted data processing and can be turned off in Privacy choices. Elsewhere, or when location is unavailable, it stays off unless you enable it. We use our hosting provider’s country estimate for this decision. When website analytics runs, we also record its approximate city, region and country estimate. Your existing choices and browser privacy signals take priority.

We save a privacy preference only when you make a choice, for up to 180 days. Global Privacy Control and Do Not Track keep both categories off. Existing unexpired opt-outs are respected. You can browse and request a call with all optional measurement turned off.

Limited website analytics

PostHog measures page visits, public campaign labels, active attention and scroll thresholds, sections and calls to action that remain in view, interactions with services and pricing, film playback milestones, calendar handoffs, anonymous booking-calendar engagement, performance signals, repeated-click friction, and submitted booking requests. A random identifier connects events within one browser tab. It is kept in session storage so a reload or internal page change does not split one short journey into several visitors. It expires after 30 minutes without activity and is cleared when the tab closes or analytics is turned off. We do not use cookies, local storage, a browser fingerprint, or identity across tabs, days, devices, or browsers for website analytics.

Public campaign labels may accompany internal links so we can compare campaign activity. These labels describe the campaign, not an individual. Our funnel events exclude names, email addresses, written answers, full URL query strings, meeting links, booking identifiers, and advertising click identifiers. Automatic form capture and personal profiles are not used. Technical connection information, such as your IP address, is necessarily processed when a request reaches a provider. PostHog is configured to discard client IP data. We attach only the hosting provider’s approximate city, first-level region code and country code to analytics events; we do not attach an IP address, postal code, latitude or longitude. IP-based location can be inaccurate, especially when a VPN, proxy or mobile network is used.

At page exit we send an anonymous summary such as active seconds, deepest section, maximum scroll, calls to action seen or used, and the strongest funnel step reached. We use these events to compare traffic quality and find friction in short navigation paths, not to build a history across days or devices. Vercel Web Analytics is not loaded by this version of the site. See PostHog’s privacy policy.

Temporary session replay

Through September 20, 2026, Toronto time, PostHog may reconstruct activity on our Studio landing and booking pages: page layout, pointer movement, clicks, scrolling, and timing. This helps us spot navigation difficulties. It is not a recording of your screen outside these pages, camera, or microphone.

Public page text and on-page selections may be visible in replay so we can understand the experience. Password, one-time-code and payment fields are excluded, along with embedded calendars, videos, privacy controls and elements marked private. Text entered into other fields on these two pages may be recorded; do not enter sensitive information outside the booking provider’s form. URL queries and fragments are removed. Console logs, network request and response contents, and canvas recording are disabled. We cannot see what you enter or select inside Cal.com. Replay uses the same anonymous tab visit described above while the trial is active.

The website analytics control also turns replay off, and browser privacy signals keep it off. Recordings use PostHog’s US service with a 30-day retention setting. The trial stops collecting new recordings after September 20; that does not immediately delete recordings already received.

Ad measurement

Google Ads measurement helps us understand whether an ad led to a submitted call request. The Google tag loads under the US measurement default described above, or after you enable ad measurement. It stays blocked when you opt out. It may use first-party advertising cookies, including Google click identifiers, to attribute a request to an ad. These cookies are configured for up to 30 days to match our conversion window. A request is measured with a hashed booking identifier to reduce duplicate counts; it is not treated as an attended meeting, a sale, or collected revenue.

We do not send your name, email, project answers, or customer lists to Google Ads. Google restricted data processing is enabled. Personalized advertising, remarketing, and enhanced conversions using contact information are not enabled. Website analytics and ad measurement are separate choices. See Google’s advertising technology notice.

Changing your mind

Turning off website analytics stops new events and recording, and clears the tab-scoped attribution identifier and campaign labels. This version also removes any persistent analytics identifier saved by an earlier version. Turning off ad measurement blocks new conversion events, updates Google’s consent state if its tag has already loaded, and clears accessible first-party Google advertising cookies. Google may receive a final consent-state update. Your choice does not automatically erase information already received by a provider. If you need help with existing data, use the contact details below.

Enquiries and scheduling

If you send a written project brief, Formspree processes your email address, optional name, selected service, and project outline so Fahmid can respond. The brief form is excluded from session replay. We record only whether the form was opened, accepted by the provider, or could not confirm delivery; its contents are not sent to analytics or advertising providers. Sending a brief does not book a meeting or subscribe you to marketing. See Formspree’s privacy policy.

When you request a call, Cal.com collects your name, email, preferred time, and the project details you choose to share. Fahmid uses this information to assess fit, respond, and arrange the conversation. The selected service category helps prepare for the call. If website analytics is enabled, public campaign labels may also accompany the separate-calendar link. Submitting an enquiry does not subscribe you to marketing.

The booking page connects to Cal.com to display availability and handle scheduling. Booking information is processed by Cal.com and the connected Google Calendar. These services have their own privacy practices and may use storage needed to provide the calendar. See Cal.com’s privacy policy and Google’s privacy policy. Declining our optional measurement does not prevent scheduling.

Hosting, providers, and retention

Vercel hosts the website and processes technical request data for delivery and security, independently of optional analytics. Providers may process information outside your country, including in the United States. Our PostHog project uses its US service. Resetting the page identifier does not delete historical provider records; analytics retention also depends on provider settings.

Enquiry and business records are retained as needed to respond, manage an engagement, and meet applicable recordkeeping obligations. We do not sell enquiry contact lists. We review access, correction, withdrawal, and deletion requests subject to applicable rights and obligations.

Keep sensitive information out of the form

A short project outline is enough. Do not submit passwords, access tokens, private customer records, or confidential documents. Never put personal information in campaign labels or URLs. Access needed for project work is agreed separately.

Questions or deletion requests

Fahmid handles privacy enquiries on behalf of XXCORP INC. Use the project-call request flow and identify your request as a privacy enquiry. Include only enough information to locate the enquiry; do not send identity documents. Scheduling providers may also retain information under their own policies.

For use of the website and project enquiries, see the website terms.