Global Compliance • GDPR • CCPA • DPDP 2023 • UAE DECREE 45

Privacy Policy & Data Protection

This Privacy Policy explains how TerraX Studio (also known as Teraxstudio) collects, processes, manages, and protects your personal data, client project intellectual property, and proprietary software assets with end-to-end 256-bit encryption and strict zero-compromise confidentiality standards.

Effective Date: January 1, 2026 • Regional Operations: Kolkata (India), Dubai (UAE) & Global

1. Information Collection & Processing Practices

TerraX Studio collects and processes specific customer and technical information required to deliver custom software engineering, web design, mobile applications, and enterprise database systems:

Direct Contact Data: Name, business email address, WhatsApp and direct phone numbers, and company specifications submitted via consultation inquiry forms, project calculators, and instant quote requests.
Telemetry & Access Diagnostics: Anonymized IP addresses, device specifications, browser environment types, network latency metrics, and regional access analytics used solely to optimize website load speeds and regional CDN routing.
Proprietary Project Assets: Source code repositories, UI wireframes, software architecture specifications, database schemas, and business rules shared under mutually executed bilateral Non-Disclosure Agreements (NDAs).
Financial Billing Information: Bank transaction identifiers, milestone clearance records, and GST/VAT invoice details necessary for statutory accounting compliance. We do not store raw credit card numbers or banking passwords on our local servers.

2. Permitted Business Purposes & Secure Data Utilization

Our utilization of customer and corporate data is strictly restricted to authorized development milestones, project communications, and infrastructure security:

Contract Engineering Delivery Designing, coding, testing, and deploying custom websites, mobile apps, ERPs, and POS billing software per project milestones.

Zero Data Selling Policy We never sell, rent, monetize, or trade your contact or project information with third-party brokers, advertisers, or lead farms.

256-Bit SSL/TLS Encryption All data transmitted between your browser and our cloud servers is protected using enterprise-grade TLS 1.3 encryption.

Automated Security Audits Continuous code scanning, parameterized SQL queries, and vulnerability mitigations across our cloud hosting infrastructure.

We do not use automated decision-making or profiling algorithms that produce legal effects or adversely impact our clients and website visitors.

3. Cookie Governance & User Consent Framework

TerraX Studio utilizes cookies and local storage tokens strictly to maintain session stability, remember user interface language preferences, and monitor high-performance CDN edge caching:

Strictly Necessary Cookies: Essential for website routing, multi-language switching (English, Bengali, Hindi, Arabic), and security token validation. These cookies do not track cross-site activity.
Performance & Analytics Cookies: Aggregated, privacy-anonymized metrics that assist our engineering team in identifying slow page loads and optimizing Core Web Vitals.
Granular Consent Control: Visitors retain full rights to accept, customize, or revoke non-essential cookie permissions at any time via our persistent Cookie Settings dashboard or browser settings.

4. International Data Privacy Frameworks (GDPR, CCPA, DPDP 2023)

TerraX Studio adheres to statutory global data protection standards and international privacy regulations across all active markets:

General Data Protection Regulation (GDPR - European Union): Full support for the Right to Access, Right to Rectification, Right to Data Portability, and the Right to Erasure ("Right to be Forgotten"). Data transfers outside the EEA are governed by Standard Contractual Clauses (SCCs).
California Consumer Privacy Act (CCPA / CPRA - United States): The right to know what personal data is collected, the right to delete personal information, and the explicit right to opt-out without experiencing discriminatory service tiers.
Digital Personal Data Protection Act (DPDP Act 2023 - India): Processing personal data based on explicit consent with clear purpose specification and rapid grievance redressal mechanisms within statutory timelines.
UAE Federal Decree-Law No. 45/2021 (UAE Data Protection): Rigorous protection of electronic personal data, confidential processing, and secure cross-border transfer compliance across our Dubai and GCC operational hubs.

5. Data Retention & Storage Archival Lifecycles

Personal and project data is retained only for as long as necessary to fulfill the operational purposes for which it was collected, or to comply with statutory legal, tax, and auditing requirements:

Consultation Inquiries: Unconverted sales inquiries are securely purged after 180 days unless ongoing project discussions remain active.
Active Project Data: Source code repositories, client assets, and staging environments are retained throughout the active development lifecycle plus a 60-day post-launch warranty window.
Accounting & Invoices: Financial transaction records and tax invoices are retained for the statutory period mandated by Indian and UAE corporate tax regulations.

6. Data Protection Desk, Legal Inquiries & Contacts

To exercise your statutory privacy rights, request a copy of stored personal records, or submit data protection inquiries, contact our Data Protection Desk:

TerraX Studio Legal & Governance Desk
Corporate Entity: TerraX Studio (Teraxstudio)
Direct Email: [email protected]
Direct Phone / WhatsApp: +91 98301 92015
Registered Operating Hubs: Salt Lake Sector V, Kolkata 700091, WB, India • Business Bay, Dubai, United Arab Emirates

View Master Terms & Conditions of Service →