Start a project

Privacy Policy

Last updated: September 2026

Exolvist (“we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy outlines what information we collect, how we use and safeguard it, and the rights you have regarding your data when you visit our website or communicate with us.

1. Information we collect

A. Information you provide directly

When you submit a contact form or get in touch with us directly, we collect the information you voluntarily provide, which may include:

  • Contact information: name, email address, and company name.
  • Project details: message content, project discipline, and estimated budget (if provided).

B. Automatically collected data (privacy-first analytics)

With your permission, we use cookieless, privacy-focused analytics to understand website performance and improve user experience. The first time you visit, a banner asks whether you accept. Measurement only runs if you choose Accept. Your choice is saved in your browser’s local storage (not in a cookie), and you can change it at any time using the “Cookie settings” link in the site footer. This system:

  • Does not set persistent cookies on your device.
  • Does not collect unique identifiers or IP addresses in identifiable form.
  • Does not track you across other websites or construct personal advertising profiles.
  • Only records aggregate metrics such as general geographical region, device/browser type, pages visited, and referral sources.

2. How we use your information

We process your data strictly for legitimate business operations, specifically to:

  • Respond to your inquiries and evaluate prospective engagements.
  • Fulfill contractual obligations and manage active project workflows if we work together.
  • Maintain the security, functional performance, and stability of our website.
  • Comply with legal, accounting, and regulatory compliance obligations.

3. Legal basis for processing (GDPR & international frameworks)

As a business operating from the Philippines, we process personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.

If you are accessing this site from the European Economic Area (EEA), the UK, or similar jurisdictions, our legal bases for collecting and processing your personal data are:

  • Contractual necessity / pre-contractual measures: to respond to your inquiry or execute an agreement with you.
  • Legitimate interests: to run an efficient, secure digital agency infrastructure and analyze aggregate site usage.
  • Legal obligation: where required by law to retain specific business or financial records.

4. Data sharing and third parties

We do not sell, rent, trade, or monetize your personal information. We do not run third-party advertising trackers, remarketing pixels, or social media tracking scripts.

We only share information with trusted third-party service providers (data processors) who assist us in operating our business:

  • Vercel — website hosting and infrastructure.
  • Resend — delivering our replies to your inquiries by email.
  • Cloudflare — bot verification that filters automated form submissions.

These providers are bound by their own data processing agreements and are authorized to use your data only as necessary to provide services to us.

Some of these providers may process or store data outside your country of residence, including in the United States. We only work with providers that maintain appropriate data protection standards.

5. Data security

We implement technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or alteration. These measures include:

  • Full-site TLS/SSL encryption for data transmitted across our website.
  • Access-restricted environments for inbound inquiries and project records.
  • Routine security reviews of our hosting and software stack.

While no electronic transmission or storage system can be 100% secure, we continuously update our practices to meet industry standards.

6. Retention of data

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected:

  • Inquiries: correspondence from contact form submissions is retained for as long as needed to address your request and follow up.
  • Client engagements: if we enter into a business relationship, engagement records are retained for the duration of the project plus our standard business, tax, and legal retention periods.
  • Unneeded data is securely deleted or permanently anonymized.

7. Your data rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

  • Access: request a copy of the personal data we hold about you.
  • Correction: request that we update or correct inaccurate or incomplete data.
  • Deletion: request the erasure of your personal data (“right to be forgotten”), subject to statutory record-keeping exceptions.
  • Restriction or objection: request that we limit or cease processing your data.
  • Data portability: request a copy of your data in a structured, commonly used machine-readable format.

To exercise any of these rights, email us directly at dev@exolvist.com. We will respond within applicable statutory timelines.

8. Third-party links

Our website may contain links to external websites, portfolio showcases, or partner platforms. We are not responsible for the privacy practices or content of third-party sites. We encourage you to review the privacy policies of any third-party services you visit.

9. Children’s privacy

Our services and website are intended for business professionals and are not directed at children under 16 years of age. We do not knowingly collect personal information from children.

10. Updates to this policy

We may update this Privacy Policy periodically to reflect changes in technical infrastructure, operational practices, or legal requirements. The updated version will be indicated by the “Last updated” date at the top of this page.

11. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us: