Privacy Policy

Metamoon ("Metamoon," "we," "us," or "our") operates the website metamoon.in and provides software development, web application, and digital product services to businesses and individuals worldwide. We are based in Bangalore, India.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you visit our website, contact us, book a meeting, or otherwise interact with us. By using our website or submitting information to us, you acknowledge that you have read and understood this policy.

If you do not agree with this Privacy Policy, please do not use our website or provide us with your personal information.

This Privacy Policy applies to:

• Visitors to metamoon.in and its subpages
• Prospective clients who submit inquiries through our contact forms, email, or WhatsApp
• Individuals who book discovery calls through our scheduling tools
• Current and former clients whose information we process in connection with agency services
• Recipients of marketing or outreach communications from Metamoon, where permitted by law

This policy does not apply to third-party websites, applications, or services linked from our site (such as Cal.com, WhatsApp, or social media platforms). Those services are governed by their own privacy policies.

Where we build software or websites for clients, the client's privacy policy — not this one — governs end-user data collected through those client products, unless we have agreed otherwise in writing.

We collect information in three broad ways: information you provide directly, information collected automatically when you use our website, and information we receive from third parties.

3.1 Information you provide directly

• Identity and contact details: name, email address, phone number, company name, job title, and location
• Project and inquiry information: messages, project descriptions, budget ranges, timelines, and any files or links you share
• Scheduling information: preferred meeting times and details submitted through our booking flow
• Communications: content of emails, WhatsApp messages, and other correspondence with us
• Billing and contractual information: business address, tax identifiers, and payment-related details when you become a client

3.2 Information collected automatically

• Device and browser data: IP address, browser type and version, operating system, device type, and language settings
• Usage data: pages viewed, time spent on pages, referral URLs, click paths, and general interaction patterns
• Approximate location derived from IP address
• Cookie and similar technology data as described in Section 8

3.3 Information from third parties

• Analytics and advertising partners, including Meta (Facebook) Pixel event data
• Scheduling providers when you book a call through embedded tools
• Publicly available business information used for legitimate outreach or research
• Referrals from partners, investors, or existing clients who introduce you to us

We use personal information for the following purposes:

• Responding to inquiries and evaluating whether we can help with your project
• Scheduling and conducting discovery calls, proposals, and client onboarding
• Delivering contracted software development, design, and consulting services
• Sending service-related communications, including project updates and administrative notices
• Sending marketing or outreach messages where you have consented or where permitted by applicable law
• Operating, maintaining, securing, and improving our website and internal systems
• Measuring website performance, campaign effectiveness, and user engagement through analytics
• Detecting, preventing, and addressing fraud, abuse, security incidents, and legal claims
• Complying with legal obligations, enforcing our agreements, and protecting our rights

We do not sell your personal information. We do not use your project inquiry data to train third-party artificial intelligence models unless you have explicitly agreed to that in a separate written agreement.

Depending on your location and the nature of our interaction, we process personal information on one or more of the following legal bases:

• Consent: when you submit a form, opt in to communications, or accept cookies where required
• Contractual necessity: when processing is needed to respond to your request, prepare a proposal, or perform a client agreement
• Legitimate interests: to operate and improve our business, secure our systems, and conduct proportionate B2B outreach, balanced against your rights
• Legal obligation: when we must retain or disclose information to comply with applicable law, regulation, court order, or tax requirements

For users in India, we also aim to comply with the Digital Personal Data Protection Act, 2023 (DPDP Act) and related guidance, including obtaining valid consent where required and honoring data principal rights.

We share personal information only when necessary and with appropriate safeguards. We may share information with:

• Service providers who help us operate our business, such as hosting (Vercel), email delivery (Resend), analytics (Meta), scheduling (Cal.com), and communication tools (WhatsApp/Meta platforms)
• Professional advisers including lawyers, accountants, and auditors, under confidentiality obligations
• Subcontractors or specialized partners involved in delivering your project, under contract and only to the extent needed
• Prospective buyers or investors in connection with a merger, acquisition, or restructuring, subject to confidentiality
• Law enforcement, regulators, courts, or other authorities when required by law or to protect rights, safety, and security

Our service providers may process data in India, the United States, the European Union, or other countries. Where required, we use appropriate contractual safeguards for cross-border transfers.

We retain personal information only for as long as necessary for the purposes described in this policy, unless a longer period is required or permitted by law.

• Website inquiry records: typically up to 24 months after last meaningful contact, unless a client relationship begins
• Client project records: for the duration of the engagement and up to 7 years thereafter for contractual, tax, and dispute-resolution purposes
• Marketing suppression lists: retained as long as needed to honor opt-out requests
• Analytics and server logs: generally 12–26 months, depending on the provider and configuration
• Legal hold data: retained until the relevant matter is resolved

When information is no longer needed, we delete it or anonymize it in a commercially reasonable manner.

We use cookies, pixels, local storage, and similar technologies to keep our website functioning, understand usage, and measure marketing performance.

• Essential cookies: required for basic site functionality and security
• Analytics and performance cookies: help us understand traffic patterns and improve content
• Marketing cookies and pixels: including Meta Pixel, which may collect identifiers and event data about your visit and interactions

You can control cookies through your browser settings and, where available, through platform-specific ad preference tools offered by Meta and other providers. Disabling certain cookies may affect site functionality or our ability to measure campaigns.

We do not currently respond to "Do Not Track" browser signals in a uniform way, as there is no industry standard for doing so.

We implement administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. These measures include access controls, encrypted transport (HTTPS), provider security reviews, and limiting internal access on a need-to-know basis.

No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security. If you believe your interaction with us is no longer secure, please contact us immediately.

Depending on your jurisdiction, you may have some or all of the following rights:

• Access: request a copy of personal information we hold about you
• Correction: request correction of inaccurate or incomplete information
• Deletion: request deletion of information, subject to legal and contractual exceptions
• Withdrawal of consent: where processing is based on consent, withdraw it at any time without affecting prior lawful processing
• Objection or restriction: object to certain processing or request temporary restriction
• Portability: receive certain information in a structured, commonly used format where applicable
• Opt out of marketing: unsubscribe from promotional emails or ask us to stop outreach
• Grievance redressal: lodge a complaint with us and, where applicable, with the Data Protection Board of India or your local supervisory authority

To exercise these rights, email hello@metamoon.in with the subject line "Privacy Request." We may need to verify your identity before fulfilling a request. We aim to respond within 30 days, or within the timeframe required by applicable law.

Our website and services are directed at businesses and adults. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, contact us and we will take steps to delete it.

Metamoon is operated from India and serves clients globally. If you access our website from outside India, your information may be transferred to, stored in, and processed in India and other countries where we or our providers operate. By using our website, you understand that your information may be handled under Indian law and the laws of those other jurisdictions.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or business operations. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, provide additional notice on our website or by email.

Your continued use of the website after an update constitutes acceptance of the revised policy, except where further consent is required by law.

For privacy-related questions, requests, or complaints, contact: