Skip to content

Last updated: August 10, 2026

Privacy policy

This policy explains what information we collect through the Madency website, how we use it, and how you can contact us about your data.

Who we are

The controller of your data is Vitaliy Melnyk, Individual Entrepreneur (FOP), doing business as Madency, Ukraine. For privacy matters, contact us at [email protected].

Information we collect

We collect information you choose to provide through the contact form, such as your name, work email, company, role, company website, and project details. If you book a discovery call, our scheduling provider (Cal.com) collects the name, email, and time you enter.

The contact endpoint uses your IP address for rate limiting and may send it to Cloudflare Turnstile for abuse prevention. With your consent, PostHog receives usage data such as page views, page exits, page URL, browser and device information, and interaction events.

If you use the Ask AI assistant, the messages you send are transmitted to a third-party AI provider to generate a response, and technical traces may be sent to an observability provider. The chat is anonymous and not stored on our servers — but please do not share sensitive personal data in it.

If you start an Ask AI voice call and grant microphone access, your live audio is carried through LiveKit Cloud. Deepgram processes your speech to produce a temporary transcript, and ElevenLabs processes the assistant's generated text to synthesize its spoken reply. We do not enable LiveKit session recording, use the audio for voice identification, or persist audio or voice transcripts in Mastra Memory. We retain limited technical metadata such as a pseudonymous room identifier, duration, usage totals, and abuse-prevention counters. Voice observability sends metrics and timings to Arize Phoenix with trace input and output hidden; it does not send voice transcripts or spoken reply text. Please do not share sensitive personal data in a voice call.

Legal bases for processing

We process your data on the following bases:

  • Responding to your request and pre-contractual steps at your request — when you submit the contact form or use Ask AI in text or voice mode
  • Legitimate interests — managing the business relationship, protecting the website from spam and abuse, and improving the website
  • Consent — for analytics, which is enabled only after you accept it
  • Legal obligation — where required by law

How we use information

We use the information we collect to respond to inquiries, evaluate whether Madency is a good fit for your project, provide requested services, prevent spam or abuse, and improve the website.

We do not sell personal information.

Service providers

We use service providers for website operations: hosting infrastructure, Resend for contact-form email delivery, Cloudflare Turnstile for abuse prevention, PostHog EU Cloud for product analytics (with your consent), and Cal.com for scheduling discovery calls (it processes the name, email, and time you enter when booking).

For the Ask AI assistant, we use a third-party large-language-model provider (OpenRouter, which routes to model providers such as OpenAI) that processes the messages you send to the assistant, and an observability provider (Arize Phoenix) that may receive assistant request/response traces for reliability monitoring. These providers process information for the services they supply to us.

For Ask AI voice calls, we engage LiveKit Cloud, Deepgram, and ElevenLabs as data processors: LiveKit provides the realtime WebRTC connection and coordinates voice inference, Deepgram converts incoming speech to text, and ElevenLabs converts generated replies to audio. The LiveKit project is configured for EU processing where available. Audio recording is disabled, and audio and transcripts are processed only as needed to provide the ephemeral call. Voice workflow spans are marked internal, and exported agent traces use input/output redaction, so Arize Phoenix receives operational metrics and timings but not voice transcript or reply content.

International data transfers

Some providers, including providers involved in Ask AI text and voice processing, may process data outside your country, including in the United States. Where this happens, we rely on appropriate transfer mechanisms, such as standard contractual clauses (SCCs) or adequacy decisions.

Data retention

We keep inquiry information for as long as needed to respond, manage the business relationship, comply with legal obligations, resolve disputes, and protect our rights. Analytics and security providers retain data according to their configured settings and applicable service terms.

Ask AI voice audio is not recorded, and temporary voice transcripts are not stored in our application database or conversation memory. Pseudonymous session, duration, usage, security, and observability metadata may be retained for reliability, abuse prevention, and cost control according to our configured retention periods and the applicable providers' terms.

Your rights

You have the right to access, correct, delete, restrict, or object to the processing of your data, and the right to data portability. Where processing is based on consent, you can withdraw it at any time. You also have the right to lodge a complaint with a data protection supervisory authority.

To exercise these rights, contact us at [email protected].