Privacy Policy

a. Information you give us voluntarily. If you email us, fill in a contact form, or reach out through a messaging channel linked on the Site, we receive the information you choose to send — typically your name, email address, company name and the content of your message.

b. Technical information collected automatically. Like most websites, our hosting provider records standard server logs when a page is requested: IP address, browser type and version, operating system, referring URL, pages viewed, and the date and time of the request. These logs are used for security, abuse prevention and diagnosing errors.

c. Aggregated analytics. We may measure aggregate traffic patterns (for example, how many people visited a page) using privacy-respecting analytics. This data is aggregated and is not used to identify you personally.

What we do not collect. The Site does not require an account, does not process payments, and does not ask for government identifiers, precise geolocation, biometric data, health data, or financial account details.

We use the information described above only for the following purposes:

• to respond to your enquiry and continue a business conversation you started;
• to operate, maintain, secure and improve the Site;
• to detect, investigate and prevent fraud, abuse, spam or technical attacks;
• to understand, in aggregate, which content is useful so we can improve it;
• to comply with a legal obligation or to establish, exercise or defend legal claims.

We do not use your personal information for automated decision-making that produces legal effects, and we do not build advertising profiles about you.

If you are located in the European Economic Area, the United Kingdom or Switzerland, we process personal data on the following legal bases under the GDPR:

• Legitimate interests — running a secure website, replying to business enquiries, and protecting the Site against abuse;
• Consent — where consent is required, for example for non-essential cookies or if you subscribe to updates. You may withdraw consent at any time;
• Contract — where processing is necessary to negotiate or perform an agreement with you or your organisation;
• Legal obligation — where we must retain or disclose information to comply with applicable law.

The Site is built to run with a minimal cookie footprint. We use strictly necessary cookies and equivalent local storage only where they are required for the Site to function correctly — for example, to remember your interface preferences or to protect a form against automated abuse.

We do not use third-party advertising cookies and we do not participate in cross-site behavioural advertising networks. Fonts and static assets may be served from a content delivery network, which receives your IP address as a technical necessity of delivering the file.

You can block or delete cookies in your browser settings at any time. Blocking strictly necessary cookies may cause parts of the Site to stop working as intended.

We do not sell or rent your personal information. We share information only in these limited situations:

• Service providers (processors) — hosting, content delivery, email delivery, error monitoring and analytics vendors who process data on our behalf under contractual confidentiality and security obligations;
• Legal and safety — where disclosure is required by law, court order or a valid request from a public authority, or where it is necessary to protect the rights, property or safety of MonoX Studio, our users or the public;
• Business transfers — if MonoX Studio is involved in a merger, acquisition, financing or sale of assets, information may be transferred as part of that transaction, subject to this policy;
• With your direction — when you explicitly ask us to share information with a third party.

MonoX Studio operates as a remote-first studio and our service providers may process information in countries other than your own, including the United States. Where personal data from the EEA, the UK or Switzerland is transferred to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, together with technical measures including encryption in transit.

We keep personal information only as long as necessary for the purpose it was collected for. In practice:

• business correspondence — retained for up to 24 months after our last exchange, unless an ongoing relationship requires longer;
• server and security logs — typically retained for up to 90 days;
• aggregated analytics — retained in non-identifying form.

When information is no longer needed, we delete it or irreversibly anonymise it.

We protect information with encryption in transit (HTTPS/TLS across the entire Site), least-privilege access controls, hardened and regularly updated infrastructure, and vendor review before onboarding a new processor. No method of transmission or storage is completely secure, so we cannot guarantee absolute security; if we become aware of a breach affecting your personal data, we will notify you and the relevant supervisory authority where required by law.

Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to delete it, to restrict or object to certain processing, to receive a portable copy, and to withdraw consent you previously gave.

If you are a California resident, the CCPA/CPRA additionally gives you the right to know what personal information we collect and disclose, the right to delete it, the right to correct it, and the right not to be discriminated against for exercising these rights. We do not sell personal information and we do not share it for cross-context behavioural advertising.

To exercise any right, email privacy@monoxstudio.com. We respond within 30 days and may need to verify your identity before acting on a request. You also have the right to lodge a complaint with your local data protection authority.

The Site is intended for a general business audience and is not directed to children under 13 (or under 16 where local law sets a higher age). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it promptly.

The Site links to third-party destinations such as the Apple App Store, Google Play, partner download pages and social networks. Those services are operated independently and have their own privacy policies and data practices. We are not responsible for the content or privacy practices of any third-party service, and we encourage you to read their policies before providing information.

We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. When we do, we will revise the “Last updated” date at the top of this page. If a change is material, we will provide a more prominent notice on the Site. Continued use of the Site after an update means you accept the revised policy.

Questions, requests or concerns about this Privacy Policy or how we handle your information are welcome:

• General: hello@monoxstudio.com
• Privacy and data requests: privacy@monoxstudio.com
• MonoX Studio — remote-first, worldwide