Privacy policy

The controller of your data is Vitaliy Melnyk, Individual Entrepreneur (FOP), doing business as Madency, Ukraine. For privacy matters, contact us at [email protected].

We collect information you choose to provide through the contact form, such as your name, work email, company, role, company website, and project details. If you book a discovery call, our scheduling provider (Cal.com) collects the name, email, and time you enter.

The contact endpoint uses your IP address for rate limiting and may send it to Cloudflare Turnstile for abuse prevention. With your consent, PostHog receives usage data such as page views, page exits, page URL, browser and device information, and interaction events.

If you use the Ask AI assistant, the messages you send are transmitted to a third-party AI provider to generate a response, and technical traces may be sent to an observability provider. The chat is anonymous and not stored on our servers — but please do not share sensitive personal data in it.

We process your data on the following bases:

• Responding to your request and pre-contractual steps at your request — when you submit the contact form for us to get in touch
• Legitimate interests — managing the business relationship, protecting the website from spam and abuse, and improving the website
• Consent — for analytics, which is enabled only after you accept it
• Legal obligation — where required by law

We use the information we collect to respond to inquiries, evaluate whether Madency is a good fit for your project, provide requested services, prevent spam or abuse, and improve the website.

We do not sell personal information.

We use service providers for website operations: hosting infrastructure, Resend for contact-form email delivery, Cloudflare Turnstile for abuse prevention, PostHog EU Cloud for product analytics (with your consent), and Cal.com for scheduling discovery calls (it processes the name, email, and time you enter when booking).

For the Ask AI assistant, we use a third-party large-language-model provider (OpenRouter, which routes to model providers such as OpenAI) that processes the messages you send to the assistant, and an observability provider (Arize Phoenix) that may receive assistant request/response traces for reliability monitoring. These providers process information for the services they supply to us.

Some providers may process data outside your country, including in the United States. Where this happens, we rely on appropriate transfer mechanisms, such as standard contractual clauses (SCCs) or adequacy decisions.

We keep inquiry information for as long as needed to respond, manage the business relationship, comply with legal obligations, resolve disputes, and protect our rights. Analytics and security providers retain data according to their configured settings and applicable service terms.

You have the right to access, correct, delete, restrict, or object to the processing of your data, and the right to data portability. Where processing is based on consent, you can withdraw it at any time. You also have the right to lodge a complaint with a data protection supervisory authority.

To exercise these rights, contact us at [email protected].