This policy explains how Metaplaxio Inc. ("Metaplaxio", "we", "us") handles personal data when you visit our website, request a proposal, subscribe to our newsletter, apply for a role, or engage us as a client.

We keep the policy close to how we actually operate. If a practice is not described here, we do not rely on it as a default. Where we process data on behalf of a client, the terms of the applicable data processing agreement take precedence over this page.

Overview

We collect three broad categories of data: information you give us, information collected automatically when you use the site, and information we receive from clients or partners in the course of an engagement. We use it to respond to enquiries, deliver services, improve the site, and meet legal obligations.

We do not sell personal data. We do not share contact details with advertisers for their own marketing. We do use processors — hosting, analytics, email, CRM, and ad platforms — under contracts that limit their use of the data to the service they provide.

Data we collect

Information you provide

  • Enquiry details: name, work email, company, role, website, budget range, and the message you submit.
  • Newsletter subscription: email address and subscription preferences.
  • Careers applications: name, contact details, portfolio links, CV, and any information you choose to include.
  • Client engagement data: business contact details, billing information, project communications, and access credentials where required to deliver the work.

Information collected automatically

  • IP address, browser type, device type, operating system, and approximate location derived from IP.
  • Pages visited, referring URL, campaign parameters, and interaction events.
  • Technical logs needed to operate, secure, and debug the site.

Information from third parties

  • Business contact data from professional networks or data providers, where permitted by law.
  • Analytics and advertising platform data, including aggregated campaign performance.
  • References and background information you authorise us to contact during a hiring process.

How we use data

  • To respond to enquiries, arrange calls, and prepare proposals.
  • To deliver contracted services, manage projects, and process payments.
  • To send the newsletter and other communications you have requested.
  • To analyse site performance, improve content, and diagnose technical issues.
  • To measure the effectiveness of our own marketing, including attribution and conversion reporting.
  • To protect the site against fraud, abuse, and security incidents.
  • To comply with legal, tax, and accounting obligations.
  • To evaluate job applications and communicate about hiring.

We do not use your data to make automated decisions that produce legal or similarly significant effects. Our AI visibility tools analyse public web content and do not profile individual visitors.

Where the GDPR or UK GDPR applies, we rely on the following bases:

  • Contract: to deliver services you or your organisation have engaged us for.
  • Legitimate interests: to respond to business enquiries, secure the site, improve our services, and conduct limited B2B marketing, balanced against your rights.
  • Consent: for newsletter subscriptions and non-essential cookies, where consent is required.
  • Legal obligation: to keep records required by tax, corporate, and regulatory law.

Where India's Digital Personal Data Protection Act applies, we process personal data on the basis of the notice and consent you provide, or another ground permitted by the Act. You can withdraw consent at any time; withdrawal does not affect processing that already occurred.

Cookies and analytics

We use essential cookies to operate the site and, where consent is given, analytics and advertising cookies to understand how visitors find us and which pages lead to enquiries.

  • Essential: session integrity, security, and consent preferences. These cannot be disabled without breaking the site.
  • Analytics: aggregated page views, traffic sources, and interaction events. We configure retention to the shortest period that supports reporting.
  • Advertising: conversion measurement for our own campaigns. We do not use these cookies to build cross-site profiles for sale.

You can block or delete cookies in your browser settings. Blocking essential cookies may prevent forms from working. Where a consent banner is shown, you can change your choices at any time through the cookie preferences link in the footer.

How we share data

We share personal data only where there is a clear reason and an appropriate safeguard:

  • Service providers: hosting, content delivery, email, CRM, analytics, project management, and payment processors, each under a data processing agreement.
  • Advertising platforms: hashed or aggregated conversion data for our own campaigns, configured to minimise identifying information.
  • Professional advisers: lawyers, accountants, and auditors where necessary.
  • Authorities: where required by law, a valid legal request, or to protect rights and safety.
  • Business transfers: in connection with a merger, acquisition, or sale of assets, subject to continued protection of the data.

We do not sell personal data, and we do not authorise processors to use client data for their own marketing.

International transfers

We are based in India and work with clients and providers in other countries. Where personal data is transferred outside its country of origin, we use appropriate safeguards: standard contractual clauses, equivalent contractual commitments, and where required, supplementary technical measures such as encryption and access controls.

You can request more detail about the safeguards used for a specific transfer by contacting us.

Retention

We keep personal data only as long as needed for the purpose it was collected, or as required by law.

  • Enquiries: up to 24 months from the last meaningful contact, unless a client relationship begins.
  • Client records: for the duration of the engagement and the period required for tax, accounting, and contract limitation purposes.
  • Newsletter: until you unsubscribe, plus a short suppression record to honour the request.
  • Careers: up to 12 months, unless you ask us to keep your application longer.
  • Server logs: typically 30 to 90 days, unless needed for security investigation.

Security

We use encryption in transit, access controls, least-privilege permissions, logging, and vendor review to protect personal data. Access to client data is limited to team members who need it to deliver the engagement.

No system is perfectly secure. If a breach affects your personal data and poses a risk to your rights, we will notify affected parties and the relevant authority as required by applicable law. Our security overview describes the controls in more detail.

Your rights

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Request deletion, subject to legal retention obligations.
  • Object to or restrict certain processing, including direct marketing.
  • Withdraw consent where processing is based on consent.
  • Request portability of data you provided to us.
  • Lodge a complaint with your local data protection authority.

To exercise a right, email hello@metaplaxio.com with enough detail for us to identify you and the data at issue. We respond within the timeframe required by applicable law, usually within 30 days. We may ask for verification to avoid disclosing data to the wrong person.

Children

Our services are intended for businesses and are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided data to us, contact us and we will delete it.

Changes to this policy

We may update this policy to reflect changes in our practices, technology, or legal requirements. The "last updated" date at the top of the page shows when it changed. Material changes that affect your rights will be communicated by email or a prominent notice on the site where appropriate.

Contact

For privacy questions, data requests, or concerns about how we handle personal data:

If you are a client with a signed data processing agreement, please use the contact route specified in that agreement for instructions and notices.