Privacy Policy
This Privacy Policy explains how metaprofix (operating at metaprofix.click) collects, uses, stores and discloses personal data in connection with our software development and consulting services. The policy sets out the categories of data processed, the purposes and legal bases for processing, data sharing practices and the rights available to users. We prepare these provisions to be clear and actionable for clients, prospective clients, users of our demo platforms and visitors to our online properties. If you have questions about any section, contact our data protection contact listed below.
Definitions
The following definitions clarify terms used throughout this policy to help you understand what types of data are involved and how we refer to them.
Data We Collect
metaprofix collects data that is necessary for delivering services, improving our offerings and managing client relationships. We limit collection to what is relevant and proportionate for the stated purposes and retain data only as long as required for operational, contractual and legal obligations.
Data You Provide
Information supplied directly by users in proposals, contracts, onboarding forms, support requests and during interactions with our team.
- Contact details (name, business email, business phone number, company name and job title).
- Business identifiers and registration details provided for contracting and invoicing.
- Project requirements, technical specifications and content necessary to deliver custom software.
- Support tickets, communications and feedback submitted via email, chat or project management systems.
- Payment and billing information required to process invoices and reconcile accounts (card details are processed via third-party payment processors and not stored on our servers unless explicitly agreed).
- User credentials and access permissions created for project-specific systems when required for implementation and testing.
Automatically Collected Data
When you visit metaprofix.click or use our web-based demos, we automatically collect technical and usage data needed for site operation, analytics and security monitoring.
- Device and browser information, including user agent string and screen resolution.
- IP address and inferred geolocation to help detect fraud and provide regional performance optimization.
- Usage data such as pages visited, time on page, and interaction events for product improvement and analytics.
- Performance and error logs from hosted applications to diagnose operational issues and improve reliability.
- Cookie identifiers and related session vouchers for authentication and session continuity.
- Timestamps and event identifiers generated by server logs for troubleshooting and security audits.
Third-Party Sources
We may receive personal data from third parties where it is necessary for provisioning services or where a user or client has provided consent for such sharing.
- Payment processors and invoicing platforms that provide transaction confirmations and billing records.
- Partner platforms and cloud infrastructure providers that supply operational logs and system-level identifiers needed to maintain software.
- Professional service providers engaged to deliver implementation work or legal and compliance services.
Purposes of Processing
We process personal data for specific, explicit and legitimate purposes. Processing is restricted to what is necessary for each purpose.
- Provisioning, deploying and maintaining custom software solutions for clients.
- Client relationship management, contract administration and billing.
- Troubleshooting, security monitoring and performance optimization of hosted services.
- Customer support, communications and managing requests related to service delivery.
- Improvement of products and services through aggregated, anonymized analytics and user feedback.
- Compliance with legal, regulatory and contractual obligations applicable to our operations.
- Protection of metaprofix systems and prevention of fraud, abuse or unauthorized access.
- Any additional purpose explicitly set out in a contract or consent notice provided to the individual.
Legal Bases for Processing
We rely on lawful bases under applicable data protection frameworks to process personal data. The appropriate basis depends on the specific processing activity and the context in which data is collected.
- Performance of a contract: processing necessary to provide software development and delivery as agreed with the client.
- Legal obligation: processing required to comply with statutory duties, tax or regulatory requirements.
- Consent: where we ask for explicit consent for a specific purpose, such as marketing communications, and you provide it voluntarily.
- Legitimate interests: processing to protect our systems, detect abuse and maintain service functionality, balanced against individual rights.
GDPR and International Data Subjects
Where individuals located in jurisdictions that apply the EU General Data Protection Regulation (GDPR) interact with metaprofix services, we implement measures aligned with GDPR principles such as data minimization, purpose limitation and security. We do not rely on this policy to create a contractual commitment where local law requires additional documentation.
- We process personal data only for legitimate, specified purposes and avoid collection of unnecessary information.
- We apply technical and organizational measures to protect personal data and periodically review controls relevant to our processing activities.
- Data subjects may exercise rights where applicable, including access, rectification, restriction and objection as described in this policy.
- When transfers of personal data occur across borders, we implement appropriate safeguards in accordance with applicable laws and contractual measures with our service providers.
- Data retention is limited to the time necessary for the purposes stated, after which records are securely deleted or anonymized.
- We document processing activities to support accountability and respond to inquiries from supervisory authorities where applicable.
Data Sharing and Recipients
We share personal data only with entities that require it to provide services, process payments, support operations or meet legal obligations. Where feasible, sharing is governed by contracts that restrict use and require security measures.
- Cloud infrastructure and hosting providers that run our development, staging and production environments.
- Payment processors and accounting platforms for invoicing and transaction reconciliation.
- Third-party service providers engaged for analytics, customer support tooling and integration connectors.
- Professional advisors, auditors or legal counsel when access to data is necessary for compliance or dispute resolution.
- Subprocessors engaged under contract when they perform processing on our behalf for specific operational tasks.
- Competent authorities where disclosure is required by applicable law or to respond to lawful requests.
International Transfers
Personal data may be transferred and processed in countries outside the data subject's residence, including locations where our cloud providers operate. Transfers are carried out in accordance with applicable law and with contractual safeguards where required, including standard contractual clauses or equivalent measures.
When transfers occur, we rely on legal mechanisms such as contractual clauses, data processing agreements and technical protections like encryption to mitigate risks associated with cross-border processing.
Data Retention
Retention periods are defined according to the purpose of processing, contractual requirements and legal obligations. We retain only the minimum information necessary and securely delete or anonymize data when retention is no longer required.
Account and client records are retained for the duration of the commercial relationship and for a period thereafter required by tax, accounting or contractual obligations, typically not less than six years for business records unless a longer period is legally required.
Support communications, project correspondence and related materials are retained for the period necessary to deliver support and to resolve disputes; non-essential records are archived or removed in line with retention schedules.
System logs and technical diagnostics are retained for operational and security purposes for a limited period, typically measured in months, and purged according to internal policies unless needed for contribute.
When personal data is no longer required, we delete or irreversibly anonymize it. Where deletion is not possible due to backups or legal holds, access to such retained data is restricted.
Security Measures
metaprofix applies a combination of administrative, technical and organizational controls proportionate to the risk presented by processing activities. Controls are selected to protect confidentiality, integrity and availability of personal data.
- Encryption of data in transit and at rest for systems handling sensitive information.
- Access controls, least-privilege principles and multi-factor authentication for administrative access to environments.
- Regular patching, vulnerability scanning and security reviews integrated into our development lifecycle.
User Rights
Depending on applicable law, users may have rights concerning their personal data. We provide mechanisms to exercise these rights and respond within applicable timeframes.
- Right of access: request confirmation of whether we process personal data and obtain a copy of that data.
- Right to rectification: request correction of inaccurate or incomplete personal data.
- Right to restriction or erasure: request limitation of processing or deletion when legal conditions are met.
- Right to object and data portability: where applicable, object to certain processing activities or request transfer of data in a commonly used format.
- Right to restriction or objection to processing: Users may request that metaprofix restrict or object to processing of their personal data where permitted by applicable law, for example when processing is based on legitimate interests or for direct marketing.
- Right to data portability: Where processing is based on consent or contract and carried out by automated means, users can request a copy of their personal data in a commonly used, machine-readable format to transfer to another provider.
- Right to withdraw consent: Where processing relies on consent, individuals may withdraw that consent at any time. Withdrawal affects future processing and does not retroactively invalidate prior processing carried out in reliance on consent.
- Right to lodge a complaint: If you consider that metaprofix has not handled your personal data appropriately, you may lodge a complaint with the relevant supervisory authority in Thailand or contact our privacy team to seek clarification and resolution.
How to Exercise Your Privacy Rights
To exercise any of the rights above, submit a written request to our privacy team by email at contact@metaprofix.click or by postal mail to our office address. Include your full name, Business ID if applicable, a clear description of the request, and any documents reasonably necessary to verify your identity. We may ask for additional information to process complex requests or to verify identity before taking action.
contact@metaprofix.click
We aim to acknowledge and respond to routine rights requests within 30 days of receipt. For complex requests that require coordination across systems or third parties, the response period may be extended; we will notify you if we require additional time, not exceeding a reasonable extension consistent with applicable law.
Marketing Communications
metaprofix may use contact information to send service updates, product offers, and industry insights relevant to software solutions for businesses. Marketing communications are based on consent or legitimate interest where permitted. Communications may include email newsletters, targeted promotions, and operational announcements tailored to your preferences and business context.
To stop receiving marketing communications, follow the unsubscribe link included in any marketing email, update your preferences in your metaprofix account settings, or send an unsubscribe request to contact@metaprofix.click. We will process unsubscribe requests promptly and you may still receive non-marketing service messages.
Children's Privacy
metaprofix services are designed for business users and professionals. We do not knowingly collect personal data from children under the age of 13. If we learn that we have collected personal data from a child under 13 without appropriate parental consent, we will take steps to delete that information as soon as practicable. If you believe we hold data about a child, contact our privacy team.
Links to Third-Party Sites
Our website and services may contain links or integrations with third-party websites and services. metaprofix is not responsible for the privacy practices, content, or availability of third-party sites. Before providing personal data to a third party, review that party's privacy policy and contact them directly with any questions.
Changes to This Policy
We review and update this privacy policy as our services evolve and in response to legal or regulatory changes. The latest revision date is 21-03-2026. Material changes will be communicated on our website and, when appropriate, via direct notice to users.