Privacy Policy

Who operates this website

This website is operated by Calvin Jude Ataide trading as CJAX Labs. Questions about this policy or personal data can be sent to calvin@cjaxlabs.com.

CJAX Labs asks only for what it needs to answer a request, protect its enquiry form and understand whether this site is doing its job. It does not sell personal data or add an enquiry to a marketing list.

Information collected

When you submit a project enquiry, CJAX Labs collects the information you provide: your name, email address, contact preference, the service you are interested in, the problems you say need fixing, your intended go-live timing, your approximate budget range, optional phone or WhatsApp number, optional business name, optional website or social profile, an optional project note and your privacy acknowledgement.

If you submit a form, the notification also records the referring website's origin, the first CJAX Labs page you opened and any campaign labels CJAX Labs added to the link. It never includes the referring page or a search query. This limited attribution is attached only to the request you chose to send, contains no analytics identifier and is used to understand which channels bring genuine enquiries.

When you book a call, CJAX Labs collects the contact and scheduling details you provide, and HubSpot records the contact and meeting.

On the launch hub, you can send general feedback, a bug report or a suggestion. CJAX Labs collects the surface you were looking at, your message and, only if you provide them, your name and contact details. You can also introduce yourself as a potential collaborator by providing your name, contact details, area of interest, a public link to your work and an optional short message. This is an open introduction, not a job application or a promise of employment. Each launch form also carries one random submission reference used only to stop an exact retry creating a duplicate row. It is not an analytics identifier and rotates after a confirmed submission or an edit.

The hosting platform may also process basic technical request data such as IP address, browser information, timestamps and security logs. None of it is used to make automated decisions about you.

Analytics and advertising

Why this exists. CJAX Labs is a small studio. Analytics is how it knows whether the work on this site reaches anyone: which pages get read, which link brought someone here and how fast the site runs on a real phone. This site currently carries no third-party advertising and sells nothing to advertisers. If that model changes, this policy and any choice required by law will change before personal data is used for it.

What Google Analytics records. Page views, the campaign link you arrived from, a service tier you select, when an enquiry is started and completed, launch-hub destination and social link clicks using a short fixed category, successful launch feedback and collaboration form submissions, and Core Web Vitals. Form-success events contain no form answers or contact details. Google Analytics stores its own identifiers in your browser so that a returning visit is not counted as a new person.

Cookie-free site count. Vercel Web Analytics records anonymous page views and limited context such as the page, referrer, approximate region, browser and device type. It uses no cookies, keeps no identifier that follows you across days or websites and is used only for aggregate site statistics. This count runs independently of the Google Analytics and Clarity switch below.

Never. Your name, email address, phone number, business details, work or portfolio link, bug description and anything else you type into a form are never sent to analytics or to any advertising system. CJAX Labs does not sell your data.

Advertising. CJAX Labs may advertise its own services, including showing this site again to someone who has visited before. Where it does, Google's consent settings control the advertising cookies and identifiers used for remarketing and aggregated demographics or interests reporting. It is only ever CJAX Labs advertising CJAX Labs. You can switch ad personalisation off across everything Google shows you at My Ad Center, or opt out of participating advertisers generally through the NAI opt-out.

Understanding how pages are used. Microsoft Clarity shows CJAX Labs how people move through the site: how far they scroll, which links they click and where a page confuses them. It puts that together as an anonymised replay of the page itself, so a layout problem can be seen rather than guessed at. Anything you type is hidden before it leaves your browser, and the launch-hub forms are explicitly masked as a whole, so form fields, numbers, links and email addresses never reach it. It starts only once you begin looking around, and it is never used to identify anyone.

Where consent comes first. In the European Economic Area, the United Kingdom and Switzerland, Google Analytics and Clarity store nothing on your device and no Google advertising signal is sent until you allow them. The anonymous Vercel page count described above remains on. Everywhere else, including India, analytics and the advertising features above run by default, and you can switch them off whenever you like, with the control below or the same one in the footer of every page. That choice is kept in local browser storage and a first-party cjaxlabs.com cookie so it follows between the main website and the launch hub; the choice contains only its state and the time it was made.

Before you choose, in those regions. While it waits for your answer, the Google Analytics tag loads with every kind of storage switched off, so CJAX Labs can see roughly how many people visit. It sets nothing on your device, creates no analytics identifier and cannot recognise you on a later visit or on another website. What reaches Google is one request carrying your IP address, your browser type and the page you are on, which counts a visit without identifying who made it.

If you switch it off. Google Analytics stops entirely for you, using Google's own per-property opt-out, so it sends nothing further rather than sending less. Clarity does not start. If it had already started on that page it stops setting identifiers and stops recognising you on any later visit. The anonymous, cookie-free page count described above continues. Switching Google Analytics and Clarity off has no effect on the website, the enquiry form or anything else you can do here.

What changes on 13 May 2027. Section 6(9) of India's Digital Personal Data Protection Act 2023, concerning registration of Consent Managers, commences on 13 November 2026. Sections 3 to 5, section 6(1) to (8) and (10), and sections 7 to 17 commence on 13 May 2027. From that later date this site asks before analytics loads in India, exactly as it already does in Europe. That change is built and dated in the site's own configuration, so it does not wait for anyone to remember.

How the information is used

Enquiry information is used to review your request, contact you about it, assess whether CJAX Labs can help, prevent abuse, maintain operational records and comply with applicable legal obligations. Submitting an enquiry does not add you to a marketing list.

Launch feedback is used to review and improve the relevant CJAX surface, investigate a reported problem and reply only where you ask for or reasonably expect a response. A build-with-CJAX introduction is used to look at the work you chose to share and consider whether a future collaboration may make sense. Neither form creates a CRM deal, applicant record, automated outreach or marketing subscription.

CJAX Labs does not repurpose personal data for an unrelated use. If a materially different use would require fresh notice or consent, CJAX Labs will provide it before that processing begins.

An enquiry is not consent to future marketing. If CJAX Labs later offers a newsletter or other optional updates, joining will be a separate choice and leaving will be straightforward.

Data used in client work

Most enquiries do not involve personal data belonging to a client's customers or staff. If a later project genuinely requires CJAX Labs to process that kind of data on a client's behalf, the signed project agreement or a separate data-processing agreement will set the instructions, permitted purpose, access and security responsibilities for that work.

In that situation, the client is responsible for having the authority to provide the data and the instructions. CJAX Labs will use it only to deliver the agreed service or where applicable law requires otherwise. Project-specific terms govern that project data to the extent they are lawful and consistent with the protections in this policy.

Service providers and international processing

CJAX Labs uses a small set of established providers to run this site: Vercel for hosting and the cookie-free page count, Cloudflare Turnstile for form security, Google for Analytics, advertising measurement, the Workspace studio inbox and a private Google Spreadsheet used to store launch-hub submissions through a minimal Google Apps Script receiver, Microsoft for Clarity, Resend for project enquiry notification and acknowledgement email, HubSpot for project enquiry contacts, deals and meetings, and n8n Cloud for the optional project-enquiry automation between those services. Launch feedback and build-with-CJAX introductions are not sent to Resend, HubSpot or n8n.

Cloudflare Turnstile protects the website forms from automated abuse. It processes limited technical signals, including IP address and browser information, to assess whether a request is likely to come from a person rather than a script. It is a security check, not marketing analytics.

Each provider receives only the information reasonably needed for its role and processes it under its own terms and CJAX Labs' arrangements with that provider, where applicable. CJAX Labs remains responsible for the personal data processed on its behalf. Because these services operate internationally, limited information may be processed outside India, including in the United States and the European Union, where permitted by applicable law.

If you contact CJAX Labs through WhatsApp, your message is also processed by WhatsApp and Meta under their own terms. CJAX Labs may preserve or disclose the minimum information reasonably necessary to comply with applicable law or a valid legal request, protect a person or the service, investigate abuse, or establish and enforce legal rights.

If CJAX Labs is reorganised or transferred in the future, relevant business records may move with it subject to confidentiality, applicable law and the purposes explained in this policy. That is not permission to sell personal data to advertisers or data brokers.

Retention and security

Enquiries that do not become active business relationships are normally retained in the inbox and CRM for up to 12 months, then deleted unless a documented security, legal or dispute-related duty requires particular records to be kept. If an enquiry becomes a client relationship, relevant records are retained for the duration of that engagement and any required legal or financial retention period.

Launch feedback and build-with-CJAX introductions are normally kept in the private Google Spreadsheet for up to 12 months, then deleted unless an ongoing conversation, security issue, legal duty or dispute reasonably requires a particular record to be retained longer.

CJAX Labs uses reasonable technical and organisational safeguards and limits access to enquiry information. These safeguards include encrypted connections and provider access controls where appropriate. No internet transmission or storage system can be guaranteed completely secure.

If a personal data breach occurs, CJAX Labs will take reasonable steps to contain it, understand its impact and reduce the chance of it happening again. Affected people and the appropriate authority will be notified where applicable law requires it.

Your rights over your data

You can ask for a summary of the personal data CJAX Labs holds about you and who it has been shared with, ask for it to be corrected or completed, ask for it to be erased where it is no longer needed, withdraw a consent you previously gave and nominate someone to exercise these rights on your behalf if you die or become incapacitated.

The statutory access, correction, erasure, grievance and nomination rights under sections 11 to 14 of India's Digital Personal Data Protection Act, 2023 commence on 13 May 2027. Before then, CJAX Labs will generally offer the same practical route as a customer-care standard, subject to identity verification, technical feasibility, applicable law and the rights of other people.

Email calvin@cjaxlabs.com with enough information to identify your enquiry, launch feedback or introduction. CJAX Labs may ask for reasonable verification before acting on a request. Some records cannot be disclosed or deleted where doing so would expose another person's data or conflict with a legal, financial, security or dispute-related duty; CJAX Labs will explain if that applies.

Google Analytics and Clarity need no email to control: the Analytics settings option in the footer changes your choice immediately, and turning them off is as easy as turning them on. The anonymous, cookie-free Vercel page count remains as described above.

Complaints

If something about your data has gone wrong, tell CJAX Labs first: email calvin@cjaxlabs.com and describe what happened. A person will review the complaint, and CJAX Labs aims to resolve it within 30 days of receiving it.

From 13 May 2027, the Act asks you to give CJAX Labs that opportunity before escalating. If the matter is unresolved after that period, or you are not satisfied with the response, you may then complain to the Data Protection Board of India through the official channel it provides.

Children

This website and its forms are intended for adults and businesses. CJAX Labs does not knowingly seek personal information from children. If you believe a child has submitted personal data, email calvin@cjaxlabs.com so it can be reviewed and, where appropriate, deleted.

Changes to this policy

This policy may be updated when the website, enquiry system, analytics, service providers, legal identity or data practices change. The effective date above will be revised when a material update is published. Where a change introduces a materially different use that requires fresh notice or consent, CJAX Labs will provide it before that processing begins; continued browsing alone is not treated as consent to a new purpose.