Privacy Policy
Your privacy matters. This policy explains how MavenCode collects, uses, and protects your information.
Effective Date: January 1, 2026 | Last Updated: August 5, 2026
MavenCode LLC ("MavenCode," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you visit our website at mavencode.com (the "Site"), engage our consulting services, or otherwise interact with us.
By accessing or using our Site, you agree to this Privacy Policy. If you do not agree with the terms of this policy, please do not access the Site.
1. Information We Collect
1.1 Information You Provide Directly
We may collect personal information that you voluntarily provide when you:
- Fill out a contact or consultation request form
- Subscribe to our newsletter or insights publications
- Engage us for consulting, engineering, or advisory services
- Communicate with us via email, phone, or other channels
- Apply for employment or contractor positions
This information may include your name, email address, phone number, company name, job title, project details, and any other information you choose to provide.
1.2 Information Collected Automatically
When you visit our Site, we may automatically collect certain information, including:
- Device Information: Browser type, operating system, device identifiers
- Usage Data: Pages visited, time spent on pages, referring URLs, click patterns
- Network Information: IP address, approximate geographic location, internet service provider
- Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to enhance your experience and gather analytical data (see Section 9 below)
1.3 Information from Third Parties
We may receive information about you from third-party sources, including business partners, marketing partners, social media platforms, and publicly available databases, to supplement the information we collect directly.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Service Delivery: To provide, maintain, and improve our AI consulting and engineering services
- Communication: To respond to inquiries, schedule consultations, and provide project updates
- Marketing: To send newsletters, case studies, insights, and promotional materials (with your consent)
- Analytics: To understand how our Site is used, improve user experience, and optimize content
- Security: To detect, prevent, and address technical issues, fraud, and unauthorized access
- Legal Compliance: To comply with applicable laws, regulations, and legal processes
- Business Operations: To manage our business, including invoicing, contract administration, and internal reporting
3. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
- Service Providers: With trusted third-party vendors who assist us in operating our Site, conducting our business, or providing services to you (e.g., cloud hosting via Google Cloud Platform, email delivery, analytics)
- Business Partners: With technology partners (such as Google Cloud, AWS, and Databricks) only as necessary to deliver our services
- Legal Requirements: When required by law, regulation, subpoena, court order, or other governmental request
- Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets
- With Your Consent: When you have given us explicit permission to share your information
- Protection of Rights: To protect the rights, property, or safety of MavenCode, our clients, or others
4. Legal Bases for Processing
Where the EU General Data Protection Regulation (GDPR), the UK GDPR, or a comparable law applies to our processing of your personal data, we rely on one or more of the following legal bases:
- Contract: To take steps at your request before entering into a contract, and to perform a contract with you or the organization you represent
- Legitimate interests: To operate, secure, and improve our Site and services, to understand how our Site is used, and to communicate about services relevant to your business. We balance these interests against your rights and freedoms
- Consent: For non-essential cookies, analytics, and marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal
- Legal obligation: To comply with applicable law, regulation, or a binding request from a public authority
Where we rely on legitimate interests, you may request further information about that assessment using the contact details in this policy.
5. Your Rights Under Texas Law
As a Texas-based company, MavenCode complies with the Texas Data Privacy and Security Act (TDPSA), Chapter 541 of the Texas Business and Commerce Code, effective July 1, 2024. If you are a Texas resident acting for yourself and not in a commercial or employment context, you have the following rights regarding your personal data:
- Right to Know and Access: You may confirm whether we are processing your personal data and access that data
- Right to Correct: You may correct inaccuracies in your personal data, taking into account the nature of the data and our purpose for processing it
- Right to Delete: You may delete personal data provided by or obtained about you, subject to the exceptions in the statute
- Right to Data Portability: Where processing is carried out by automated means, you may obtain a copy of the personal data you previously provided in a portable and, to the extent technically feasible, readily usable format
- Right to Opt Out: You may opt out of processing for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of a decision that produces a legal or similarly significant effect concerning you
5.1 Categories of Data, Purposes, and Recipients
The TDPSA requires us to tell you what we process and who receives it. The categories of personal data we process, and the purposes for which we process them, are set out in Sections 1 and 2 of this policy. The categories of personal data we share with third parties, and the categories of those third parties, are set out in Section 3. We process no more personal data than is reasonably necessary and proportionate for those disclosed purposes.
5.2 Sensitive Personal Data
We do not seek or knowingly collect sensitive personal data as the TDPSA defines it, which includes personal data revealing racial or ethnic origin, religious beliefs, mental or physical health diagnosis, sexuality, or citizenship or immigration status; genetic or biometric data processed to uniquely identify an individual; personal data collected from a known child; and precise geolocation data. We do not process such data without your consent, and where the data concerns a known child we handle it in accordance with the Children's Online Privacy Protection Act.
We do not sell personal data, sensitive personal data, or biometric personal data. Because we do not sell data in either of those categories, the specific notices required by Section 541.102(b) of the Texas Business and Commerce Code do not apply to us. If that ever changes, we will post the required notice on this page before doing so.
5.3 How to Submit a Request
Email privacy@mavencode.com stating which right you wish to exercise. We will act on your request without undue delay and within 45 days of receipt. Where reasonably necessary, taking into account the complexity and number of requests, we may extend that period once by a further 45 days and will tell you why before the first period expires. There is no charge for your first two requests in a twelve-month period. We may decline to act on a request that is manifestly unfounded, excessive, or repetitive, and will explain why if we do.
We must be able to authenticate your request using commercially reasonable means. If we cannot do so, we may ask for additional information reasonably necessary to authenticate you, or decline the request and tell you why. Requests relating to a known child may be submitted by that child's parent or legal guardian.
5.4 How to Appeal
If we decline to act on your request, we will tell you why within the 45-day period, and you may appeal that decision by replying to privacy@mavencode.com with the word "Appeal" in the subject line. We will respond in writing within 60 days of receiving the appeal, setting out the reasons for our decision.
If we deny your appeal, you may submit a complaint to the Texas Attorney General, who enforces the TDPSA. Complaints can be filed through the Consumer Protection Division at texasattorneygeneral.gov/consumer-protection/file-consumer-complaint.
5.5 Universal Opt-Out Signals
From January 1, 2025, the TDPSA requires us to honour opt-out preference signals sent by a platform, browser, or extension on your behalf, such as Global Privacy Control. Where we receive such a signal from your browser, we treat it as a request to opt out of targeted advertising and the sale of personal data for that browser. As stated above, we do not sell personal data or use it for targeted advertising in any event.
6. Your Rights Under California Law
If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) gives you the following rights:
- Right to know: To request the categories and specific pieces of personal information we have collected, the sources, the business purpose, and the categories of third parties to whom we disclose it
- Right to delete: To request deletion of personal information we collected from you, subject to statutory exceptions
- Right to correct: To request correction of inaccurate personal information
- Right to opt out: To opt out of the sale or sharing of personal information, and of cross-context behavioral advertising
- Right to limit: To limit the use and disclosure of sensitive personal information
- Right to non-discrimination: We will not deny services, charge different prices, or provide a different level of service because you exercised any of these rights
In the twelve months preceding the date of this policy, we have collected the categories of personal information described in Section 1, namely identifiers, commercial information, internet or network activity, and professional or employment information.
We do not sell personal information, and we do not share personal information for cross-context behavioral advertising as those terms are defined by the CCPA/CPRA. We do not knowingly sell or share the personal information of consumers under 16 years of age.
To exercise these rights, contact us at privacy@mavencode.com. We will verify your request using the information we already hold about you, and will respond within 45 days. Where reasonably necessary we may extend that period by a further 45 days and will tell you if we do. You may use an authorised agent to submit a request on your behalf.
7. Your Rights Under European and UK Law
If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights in relation to your personal data:
- Access: To obtain confirmation of whether we process your personal data and a copy of that data
- Rectification: To have inaccurate personal data corrected and incomplete data completed
- Erasure: To have your personal data deleted where one of the grounds in Article 17 applies
- Restriction: To restrict our processing in the circumstances set out in Article 18
- Portability: To receive personal data you provided to us in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where technically feasible
- Objection: To object to processing based on legitimate interests, and at any time to processing for direct marketing
- Withdraw consent: To withdraw consent at any time where processing is based on consent
- Automated decisions: Not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. We do not make such decisions about visitors to our Site
MavenCode is the controller of the personal data described in this policy. To exercise any of these rights, contact us at privacy@mavencode.com. We will respond within one month, and may extend that period by two further months for complex requests, telling you the reason for the delay.
You also have the right to lodge a complaint with your local supervisory authority. In the United Kingdom this is the Information Commissioner's Office (ico.org.uk). In the EEA, a list of national authorities is published by the European Data Protection Board (edpb.europa.eu).
8. Your Rights Under Federal Law
In addition to Texas state law, MavenCode adheres to applicable federal privacy regulations:
- CAN-SPAM Act: We comply with CAN-SPAM requirements for commercial email communications. You may opt out of marketing emails at any time by clicking the "unsubscribe" link in any email or contacting us directly.
- Children's Online Privacy Protection Act (COPPA): Our Site and services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.
- FTC Act Section 5: We do not engage in unfair or deceptive practices in the collection or use of personal information.
9. Cookies and Tracking Technologies
We use cookies and similar technologies for the following purposes:
6.1 Essential Cookies
Required for the Site to function properly. These cookies enable core functionality such as security, session management, and accessibility. They cannot be disabled.
6.2 Preference Cookies
Used to remember your settings and preferences, such as your theme preference (light/dark mode) and language settings. These cookies enhance your experience but are not strictly necessary.
6.3 Analytics Cookies
Used to understand how visitors interact with our Site. We use this data to improve our content and user experience. Analytics data is aggregated and anonymized where possible.
6.4 Managing Your Cookie Preferences
When you first visit our Site, you will be presented with a cookie consent banner. You may accept or decline non-essential cookies. Your choice is stored in a cookie so we do not ask again on every visit, and you can change it at any time by clearing that cookie in your browser settings.
Essential cookies are set on the basis of our legitimate interest in operating a secure and functional Site, and cannot be disabled. Preference and analytics cookies are non-essential: where the GDPR, UK GDPR, or the ePrivacy Directive applies, we set them only after you have consented, and declining them will not restrict your access to the Site. Disabling cookies through your browser may affect Site functionality.
10. Data Security
We implement industry-standard technical and organizational measures to protect your personal information, including:
- Encryption of data in transit (TLS 1.2+) and at rest
- Access controls and role-based permissions
- Regular security assessments and vulnerability testing
- Secure cloud infrastructure hosted on Google Cloud Platform
- Employee training on data protection and privacy best practices
While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
11. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law. Specifically:
- Contact and inquiry data: Retained for up to 3 years after your last interaction with us
- Client engagement data: Retained for the duration of our business relationship and up to 7 years thereafter for legal and compliance purposes
- Analytics data: Retained in aggregated, anonymized form indefinitely
- Cookie data: Retained according to the cookie type and duration (see Section 9)
12. Third-Party Links
Our Site may contain links to third-party websites, services, or applications that are not operated by MavenCode. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.
13. International Data Transfers
MavenCode is headquartered in Texas, United States. If you access our Site from outside the United States, your information may be transferred to, stored, and processed in the United States, where data protection laws differ from those in your country of residence.
Where we transfer personal data out of the European Economic Area, the United Kingdom, or Switzerland, we rely on an appropriate safeguard recognized under Article 46 of the GDPR. In practice this is the European Commission's Standard Contractual Clauses, together with the UK International Data Transfer Addendum where the UK GDPR applies, and any supplementary technical and organizational measures a transfer risk assessment identifies as necessary.
You may request a copy of the safeguard we rely on for a particular transfer by contacting privacy@mavencode.com.
14. Do Not Track and Opt-Out Preference Signals
Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want to have your online activity tracked. There is still no uniform technology standard for DNT, and we do not respond to DNT browser signals.
Opt-out preference signals are a separate and more recent mechanism, and we do treat them as a valid request. Where your browser or an extension sends a recognized universal opt-out signal such as Global Privacy Control, we process it as an opt-out of targeted advertising and of the sale of personal data for that browser, as required by the Texas Data Privacy and Security Act and by comparable state laws. We do not sell personal data or use it for targeted advertising in any case.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, provide additional notice (such as a banner on our Site or an email notification).
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.
16. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Email: privacy@mavencode.com
Website: www.mavencode.com
