Privacy Policy

MXOVA (“Studio”, “we”, “us”, or “our”) is an independent digital product engineering and brand studio. We build high-performance web platforms, enterprise software, mobile applications, and digital identities.

This Privacy Policy explains our practices regarding the collection, use, disclosure, and protection of information when you visit mxova.com, submit an inquiry through our website, access our client project tracker (/p/[projectId]), or engage our design and engineering services.

By accessing our site or communicating with our studio, you acknowledge the terms outlined in this Privacy Policy.

We adhere to strict data minimization principles. We categorize the information we handle into three distinct areas:

• Information You Provide Directly: When you submit a project inquiry, booking request, or email, we collect your name, business email address, company name, project requirements, budget/timeline expectations, and any attached documentation you choose to provide.
• Client Workspace & Project Tracker Data: For clients with active engagements, we maintain authorized contact information (names, emails, company role), project milestones, deliverable progress, invoice status, and activity timeline feeds within our project tracker portal.
• Automated Technical & Diagnostic Data: When browsing our site, our servers and WebGL runtime collect non-identifying technical metadata (browser type, operating system, screen dimensions, GPU vendor strings, and frame rate stability) purely to render interactive 3D elements smoothly across varied hardware.

We process information solely for legitimate business operations and project delivery, specifically to:

• Review and respond to incoming project proposals, RFPs, and consultation requests.
• Prepare tailored Statements of Work (SOWs), engineering specifications, and commercial agreements.
• Deliver design and software development deliverables according to agreed contractual milestones.
• Send transactional notices regarding project status changes, completed deliverables, or invoice generation.
• Maintain site stability, prevent spam, and protect our infrastructure from malicious activity.
• Comply with statutory commercial accounting, taxation, and regulatory requirements.

We never sell, rent, monetize, or barter your personal information to marketing syndicates or data aggregators.

To maintain an enterprise-grade web application and communication flow, we rely on trusted, compliant technology partners:

Each sub-processor is bound by data processing agreements (DPAs) ensuring strict confidentiality, security, and compliance with modern privacy directives.

We do not deploy third-party advertising cookies, retargeting pixels, or behavioral cross-site trackers on mxova.com.

We use strictly necessary first-party cookies and local storage tokens solely to:

• Preserve user preferences (such as dark theme settings or audio muting).
• Facilitate cryptographic CSRF security tokens during form submissions.
• Authenticate authorized access tokens for client project tracker routes.

You may configure your browser to reject cookies, though certain security-critical functions (such as form submission) may require session state.

We retain personal data only for as long as necessary to fulfill the purposes for which it was gathered:

• General project inquiries that do not materialize into active engagements are securely removed or anonymized within 24 months.
• Active client accounts, contracts, deliverables, and invoicing archives are retained in accordance with statutory accounting and tax compliance laws (typically 7 years).

We implement rigorous technical and organizational controls including end-to-end TLS 1.3 transport encryption, role-based database authentication, tokenized API write access, and periodic security reviews of our production dependencies.

Regardless of your physical location, MXOVA provides you with comprehensive control over your personal data:

• Right of Access & Portability: You may request an export of all personal information we hold concerning you.
• Right to Rectification: You may request the correction of incomplete or outdated records.
• Right to Erasure (“Right to Be Forgotten”): You may request the permanent deletion of your inquiry data and contact records, subject to overriding legal or statutory accounting obligations.
• Right to Restrict or Object: You may object to any non-essential processing of your personal information.

To exercise any of these rights, email us directly at contact@mxova.com. We process all valid requests within thirty (30) days without charge.

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory enhancements. Any changes will be posted on this page with an updated “Last updated” timestamp.