Privacy Policy

1. Information We Collect

We practice strict Data Minimization. We only gather information that is essential to scope, engineer, and support your custom software projects:

• Project Inquiry Details: When you complete our contact wizard or schedule a consultation, we collect your name, email address, company name, project type, estimated budget range, and project brief.
• Technical Project Assets: During discovery and active development, you may voluntarily share API credentials, schema diagrams, wireframes, and business logic documents under mutual non-disclosure protections.
• Direct Communications: Records of email exchanges, WhatsApp inquiries, and consultation transcripts required to maintain project roadmaps and scope clarity.
• Non-Identifying Telemetry: Standard browser headers, device viewport sizes, and response times used solely to ensure website accessibility, responsiveness, and DDoS protection.

2. How We Use Your Information

We use your data solely for transparent engineering and business operations:

• Architecture & Scoping: To evaluate technical feasibility, estimate delivery sprints, and provide concrete Statements of Work (SOW).
• Contract Fulfillment: To design, build, test, and deploy agreed custom software deliverables.
• Client Support & Billing: To dispatch milestone invoices, release technical documentation, and coordinate warranty hypercare.
• Platform Security: To protect our servers and APIs from automated spam, brute-force attacks, and abuse.

We do not use your proprietary business data or project briefs to train public AI models.

3. Client Code, Workflows & NDAs

We understand that the software we engineer represents your core competitive advantage. All proprietary algorithms, operational spreadsheets, internal databases, and business models shared with Molvern Labs are governed by strict confidentiality obligations.

Molvern Labs routinely signs mutual Non-Disclosure Agreements (NDAs) prior to architectural discovery sessions to guarantee full legal protection of your intellectual property.

4. Data Storage & Encryption Standards

We implement defense-in-depth security controls across all technical layers:

• In-Transit Encryption: All data transmitted to and from our website, APIs, and webhooks is encrypted using TLS 1.3 with modern HSTS cipher suites.
• At-Rest Encryption: Project databases and backup volumes are encrypted using industry-standard AES-256 encryption.
• Least-Privilege Access: Access to client staging repositories and server environments is restricted to authorized engineers under multi-factor authentication (MFA).

5. Third-Party Subprocessors

To run our high-performance infrastructure, we rely on trusted, SOC-2 / ISO-27001 certified technology partners:

• Cloud Infrastructure: Cloudflare & Google Cloud Platform (hosting, edge delivery, serverless compute).
• Transactional Communications: Meta WhatsApp Cloud API & Google Workspace (direct client alerts).
• Payment Processors: Stripe & Payoneer (secure PCI-DSS Level 1 compliant payment processing).

These subprocessors only process data strictly necessary to execute their respective services and are legally prohibited from utilizing client data for independent purposes.

6. Cookies & Tracking Policy

Molvern Labs does not utilize third-party advertising cookies or cross-site tracking pixels. We use only:

• Essential Functional Cookies / Local Storage: To store your dark/light UI theme preference (molvern-theme) and smooth page transition states.
• Zero Third-Party Ad Trackers: We do not run invasive surveillance scripts or marketing remarketing tags.

7. Your Global Data Rights (GDPR, UK GDPR & CCPA)

Regardless of your geographic location, Molvern Labs provides equal, transparent data rights:

• Right of Access & Portability: You may request a structured export of all personal data we hold associated with your account.
• Right to Rectification: You may correct or update any inaccurate contact details.
• Right to Erasure (“Right to be Forgotten”): You may request that we permanently delete your inquiry records and communication history, subject to statutory accounting retention laws.
• Right to Opt-Out: You may withdraw consent for any non-contractual communication at any time.

8. Data Retention & Disposal

Inquiry records from prospective clients are retained for 12 months to facilitate continuity during project planning phases, after which unengaged records are securely purged. Active client contract records and milestone invoices are retained in accordance with statutory accounting and tax compliance standards.

9. Contact & Privacy Requests

If you have any questions regarding this Privacy Policy or wish to exercise any of your data rights, please contact our team directly: