Privacy Policy

This Privacy Policy explains how erictorii.com (the “Site”), the personal portfolio and studio site of Eric Torii, handles information when you visit or interact with it. I operate the Site as a sole individual and aim to collect as little personal information as possible.

You can browse the Site without giving any personal information. You share information with me only when you choose to, for example when you:

• join the design-work waitlist or subscribe to the newsletter — this is primarily your email address, and any name or details you add;
• request a free downloadable resource — again, your email address so I can deliver it and follow up as you agreed;
• book a paid session — booking and payment details you enter with the third-party scheduling and payment tools; and
• email me or send a message — the contents of your message and your contact details.

Like most websites, the Site’s hosting provider (Vercel) processes standard technical information as part of serving pages and keeping the Site secure — for example your IP address, browser and device type, referring page, and timestamps in server logs. I may review aggregate, privacy-respecting analytics to understand overall traffic. The Site does not set advertising cookies or build an advertising profile of you.

The Site stores your theme (light or dark) and languagepreferences in your browser’s localStorage. This is strictly functional — it stays on your own device so the Site remembers how you like it, and it is not used to track you.

I use the information described above to:

• reply to you and discuss potential work;
• send the waitlist updates, newsletter, or free resource you signed up for;
• schedule, deliver, and follow up on paid sessions;
• operate, secure, maintain, and improve the Site.

I do not use your information for automated decisions that produce legal or similarly significant effects about you.

Where data-protection laws such as the GDPR apply, I rely on your consent for sending marketing emails and delivering resources you request (which you can withdraw at any time), on the need to perform a service you asked for such as a booked session, and on my legitimate interest in operating, securing, and improving the Site. Where required, I ask for consent before collecting your information.

I do not sell or rent your personal information, and I do not share it for cross-context behavioral advertising. I share it only with service providers that help me run the Site, and only as needed for them to perform their function on my behalf. These include:

• Vercel — website hosting and server infrastructure;
• an email delivery provider (for example Resend) — to send and manage the emails you signed up for;
• a scheduling tool and a payment processor — to book and charge for paid sessions.

I may also disclose information if required by law, or to protect the rights, safety, or security of the Site, its users, or me.

I keep your information only as long as needed for the purpose you gave it — for as long as you remain subscribed, for as long as needed to provide and record a session, or as the law requires. When it is no longer needed, I delete it or remove your identifying details. You can ask me to delete your information sooner at any time.

Every marketing email includes an unsubscribe link, and you can opt out at any time. Depending on where you live, you may also have rights under laws such as the California Consumer Privacy Act (CCPA/CPRA) and the GDPR, including the right to:

• access the personal information I hold about you;
• correct or update it;
• request its deletion;
• opt out of marketing, and object to or limit certain uses; and
• be free from discrimination for exercising these rights.

To make a request, email me at the address below. I will respond as required by applicable law and may need to verify your identity first. I do not sell your personal information, so there is no sale to opt out of.

The Site is not directed to children, and I do not knowingly collect personal information from anyone under 13, or under 16 where a higher age of digital consent applies. If you believe a child has provided information, please contact me and I will delete it.

The Site links out to third-party platforms such as Instagram, TikTok, LinkedIn, and GitHub, and to rikai.cloud — a separate product with its own privacy policy. This Policy does not cover those sites; once you leave the Site, the destination’s own privacy policy applies, and I encourage you to review it.

I take reasonable measures to protect the information I collect and work with reputable providers. No method of transmission or storage is completely secure, however, so I cannot guarantee absolute security. If a breach affecting your information occurs, I will act as required by applicable law.

I may update this Policy from time to time. The effective date above reflects the current version, and material changes will be posted here. Your continued use of the Site after changes are posted constitutes acceptance of the updated Policy.

Questions about this Policy, or requests regarding your information, can be sent to etorii@andrew.cmu.edu.