Privacy Policy

This policy explains what happens to information you send to XIYÀTO through this website. It covers this website only.

What this website collects

We collect information through our project enquiry and talent forms, as well as operational telemetry necessary to evaluate inbound commercial enquiries:

When you submit a project enquiry, you may provide:

• Your name and business email address (required to respond)
• Your company, role, telephone number, country, and sector (optional)
• The service area and delivery timeframe you select
• Your project brief and description
• Optional project drawing packages, CAD files, or specification documents (PDF, DWG, DXF, ZIP, images up to 50MB)

When you submit to the talent network, you may provide:

• Your name, email address, discipline, and portfolio link
• A summary of your technical production experience

Operational telemetry and attribution:

When you arrive via a marketing link or directory listing, campaign identifiers (such as utm_source, utm_medium, and utm_campaign) are read from the URL to identify which channel referred your visit. When you click direct communication links (WhatsApp, telephone, or email), our site logs a first-party event signal to measure channel performance.

What we do with it

Submissions and attachments are used solely to evaluate project feasibility, provide technical drafting or CGI quotations, and communicate with you about your request. We do not sell your information, we do not share it with advertising networks, and we do not use your details for unsolicited consumer marketing lists.

How it is transmitted and stored

All communications are encrypted in transit using standard Transport Layer Security (HTTPS). Form submissions are processed through secure server-side pipelines and delivered directly to the studio's operational inboxes.

Project specification files uploaded through the contact form are retained solely for technical assessment during the scoping period and are permanently deleted after 30 days unless an active commercial engagement is commissioned under separate contract.

Browser storage and cookies

This website does not set third-party advertising cookies or cross-site tracking pixels.

To preserve referral attribution while you navigate between pages during a single visit, incoming campaign parameters may be temporarily held in your browser's session memory (sessionStorage). This data contains no personal identifiers, is never shared with third-party data brokers, and is automatically erased by your browser as soon as the tab or window is closed.

Our hosting infrastructure (Vercel) logs standard server access requests (including IP address, user agent, and request path) for infrastructure security, DDoS mitigation, and operational monitoring.

Links to other sites

This website links to external platforms, including messaging and social channels. Once you follow such a link, the privacy practices of that platform apply rather than ours.

Your rights

Depending on where you are located, you may have the right to ask what information we hold about you, to have it corrected, to have it deleted, or to object to how we use it. To make any of these requests, contact us through the contact page.

Changes

If what this website collects or how it is handled changes, this page will be updated and the date at the top will change with it.