Privacy Policy & Data Protection Framework

01 The Sovereign Privacy Creed & Zero Data Sale

Nivansware Studios operates on an absolute principle: We are an engineering studio, not a data broker.

• We never sell, rent, monetize, or trade your personal information, corporate details, or source code to data aggregators, advertising brokers, or unauthorized third parties.
• We never train AI models on private customer code, PR diffs, or confidential business proposals.
• Zero Code Retention: Pull request diffs and source files inspected through our platforms (such as Garnet Gate) stream strictly through ephemeral, volatile RAM buffers and are instantaneously purged upon check completion.

02 International Statutory Compliance Framework

Nivansware Studios adheres to premier international data privacy frameworks across key operational markets:

03 Categories of Information Collected

We collect only the bare minimum telemetry required to deliver precision engineering services:

• Cockpit & Contact Telemetry: When you transmit an inquiry via our Cockpit form (Name, Organization, Corporate Email, Engine Selection, and Repository Scope), we record this data solely to provide technical proposals, NDA drafts, and contract estimates.
• Edge Security Telemetry: Through our Cloudflare Global Anycast Edge, we temporarily log standard technical metadata (IP address, user agent, TLS cipher suite, request timestamps) to defend against DDoS attacks, botnet scrapers, and malicious intrusion.
• Commercial Billing Information: Payments for online software subscriptions (such as Garnet Gate) and bespoke agency milestone retainers are processed via Lemon Squeezy, Inc. and Stripe, Inc. as Merchant of Record / payment infrastructure, certified PCI-DSS Level 1 compliant. Nivansware never receives or stores raw payment card numbers.

04 Edge Infrastructure & Trusted Sub-Processors

To ensure global ultra-low latency and sovereign security, we partner with industry-standard infrastructure providers:

• Cloudflare, Inc. (Global Edge & DNS): Provides Anycast edge delivery, TLS 1.3 cryptographic termination, and WAF DDoS mitigation.
• Fly.io & Bare-Metal Linux Clusters (Frankfurt / Singapore): Sovereign application compute nodes running ephemeral containerized runtimes with non-root security principles.
• Lemon Squeezy, Inc. & Stripe, Inc. (Merchant of Record & Global Payment Infrastructure): Handles automated billing, global sales tax/VAT compliance, and encrypted payment tokenization.

05 Your Sovereign Rights Under Law

Regardless of your geographic location, you retain full sovereign rights regarding your data:

• Right to Access: You may request a complete export of any personal or corporate information held in our records.
• Right to Rectification: You may correct inaccurate or incomplete contact records at any time.
• Right to Erasure ("Right to Be Forgotten"): You may request permanent deletion of your contact records, project briefs, and communications within 48 business hours.
• Right to Restrict Processing: You may limit how we process your information during ongoing commercial evaluations.

06 Local Storage & Cookie Policy

Nivansware Studios rejects the use of third-party invasive tracking pixels, surveillance cookies, and retargeting beacons.

• Zero Marketing Cookies: We do not load Google Analytics, Meta Pixel, or LinkedIn Insight tags on our landing page.
• Local Storage Key: We utilize a single lightweight browser local storage key (nivansware_lang) solely to remember your chosen regional language (English, Indonesia, Japanese, German) across visits.

07 Data Protection Officer (DPO) & Privacy Contact

To exercise your data privacy rights, execute a Data Protection Agreement (DPA), or request data erasure, contact our Sovereign Privacy Desk directly: