Privacy Policy

Last updated: April 25, 2026.

1. Who we are

Mind4Solutions is a web and mobile development studio based in Antananarivo (Madagascar). For any question about this policy, reach us at contact@mind4solutions.com.

2. Data we collect

We only collect the information you actively submit:

• Contact form: name, email, message.
• /project wizard: everything you enter in the brief (first name, email, project type, activity, budget, timeline, etc.).
• Technical cookies: a wizard session cookie (HMAC-signed, no personal data) to let you resume your brief.

3. Analytics

We use Plausible Analytics, a privacy-respecting service:

• No cookies set.
• No personal data collected.
• Aggregated metrics only (page views, country, referrers, devices).

No cookie banner is therefore required.

4. Data recipients

Your information is only shared with the following providers, strictly for site operations:

• Supabase self-hosted (VPS in Falkenstein, Germany) — brief and form storage.
• Resend (USA) — notification and confirmation emails.
• Cal.com (USA) — discovery call bookings.
• Cloudflare Turnstile (USA) — anti-bot form protection.

5. Retention

• Submitted briefs: 3 years after submission (longer if converted into a client project, per accounting obligations).
• Draft briefs: 30 days then auto-deleted.
• Contact messages: 1 year.

6. Your rights (GDPR)

Under GDPR, you have the right to access, rectify, erase, object, and port your data. Email contact@mind4solutions.com for any request.

7. Security

The site runs on HTTPS with strict CSP headers. Data is encrypted at rest (Postgres + Docker volumes). Admin access is protected by magic-link authentication and Row Level Security at the database layer.

8. Changes

This policy may evolve. The date at the top reflects the latest version.