中文
Data Protection & Privacy PRIVACY POLICY · GLOBAL B2B STANDARDS

Privacy Policy & Data Protection

Effective Date: March 1, 2026 ｜ Entity: LYNXISTUDIO · Professional Web Engineering & AI Automation

01 Overview & Scope

LYNXISTUDIO ("we," "our," or "the Studio," accessible via lynxistudio.com) provides custom B2B web design, front-end engineering, technical search optimization (SEO/GEO), and AI workflow automation for professional service firms and growing software teams worldwide. We take information security and commercial confidentiality seriously.

This Privacy Policy explains how we collect, process, store, and safeguard business inquiries, technical specifications, and communications in accordance with global data protection standards, including the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).

02 Information We Collect & Purpose of Use

We operate on the principle of strict data minimization. We only collect information necessary to evaluate project feasibility, prepare formal proposals, and execute contracted engineering work:

  • Commercial Project Inquiries: When you submit our project inquiry form, email us, or message us via WhatsApp, we collect the contact details and project information you provide, such as your name, business email, website URL, phone number, goals, timeline, and requirements. We use this information to evaluate project fit, prepare scopes of work, and communicate with you.
  • Technical Infrastructure Logs: Our hosting and security providers may process IP addresses, browser details, request timestamps, and related technical signals to deliver the website, prevent abuse, investigate faults, and protect the service. We limit our use of this information to those operational purposes.
  • Form Security: We use Cloudflare Turnstile to distinguish genuine submissions from automated abuse. Cloudflare processes technical and security signals for this verification. Our inquiry database does not store your raw IP address; it stores a one-way keyed hash used to apply submission limits.
  • Direct Communications: Any operational communications conducted via email, Slack, Microsoft Teams, or video discovery calls (Google Meet/Zoom) are retained solely for the duration of the project lifecycle and administrative record-keeping.

✦ No Intrusive Tracking: We do not engage in behavioral advertising, third-party remarketing pixels, or invasive surveillance trackers. We do not require account registration or collect unnecessary personal information.

03 Confidentiality & Mutual Non-Disclosure

We treat all client business models, technical architectures, internal workflows, and product roadmaps with strict commercial confidentiality:

  • Standard Bilateral NDA: We regularly execute standard bilateral non-disclosure agreements before reviewing sensitive proprietary code, credentials, or product specifications.
  • Restricted Internal Access: Only senior engineers and practitioners directly assigned to your project have access to your requirements. All team members operate under binding confidentiality obligations.
  • No Sale of Data: We never sell, rent, monetize, or trade client information, contact details, or project data to third-party data brokers or marketing vendors.

04 Client Code Ownership & AI Data Isolation

As an independent engineering studio, we uphold strict standards regarding software ownership and data isolation:

  • 100% Client Code Ownership: Upon final milestone settlement, you receive 100% intellectual property ownership of all custom source code, Git repositories, design systems, and deployment configurations. We impose zero proprietary vendor lock-ins.
  • Zero Model Training: In our AI workflow automation engagements, we strictly deploy commercial enterprise API tiers without model training. Your proprietary business data, customer records, and operational briefs are never used to train public foundational AI models.

05 Data Security & Storage

We implement appropriate technical and administrative safeguards to protect your business information against unauthorized access, loss, or misuse:

  • All web traffic and form submissions are protected via standard HTTPS / TLS encryption in transit;
  • Project inquiries are stored in an access-controlled database and are available only through a protected administrative interface;
  • Code repositories and client workspaces are accessible only by authenticated, authorized studio practitioners;
  • Staging environments are hosted on private, access-controlled URLs prior to formal production launch.

06 Your Data Rights & Inquiry Requests

We respect the privacy rights of our global clients and prospective partners:

  • Access & Rectification: You may contact us at any time to review or update the business contact details you provided;
  • Information Deletion: You may request the deletion of your inquiry records and submitted project briefs. Verified requests will be handled promptly in the ordinary course of business;
  • Communication Preferences: You can opt out of any follow-up emails by replying directly to any message from our team.

07 Policy Revisions

We may periodically update this policy to reflect operational changes or applicable legal guidelines. The latest revision date will always appear at the top of this document.

08 Contact & Privacy Matters

For inquiries regarding data privacy, mutual NDA requests, or project confidentiality, please contact us directly: