MPStudio is an AI automation studio operated by Minh Pham, based in Hanoi, Vietnam. We build and maintain automated workflows for small and medium-sized businesses.
For any questions about this policy or your data, contact us at minh@mpstudio.dev.
This website collects minimal data. We do not use contact forms, account registrations, or marketing cookies.
Google Analytics. We use Google Analytics (GA4) to understand how visitors use the site: which pages are visited, how long visitors stay, and where traffic comes from. Google Analytics is loaded with consent denied by default, and only collects data after a visitor opts in via the cookie banner. When enabled, it collects data such as your IP address (anonymized), browser type, device type, and pages viewed. This data is processed by Google under their privacy policy.
Vercel Web Analytics. We use Vercel Web Analytics for a basic count of pageviews and traffic sources. It does not use cookies, does not track visitors across sites, and does not store personal data. IP addresses are hashed with a daily rotating salt before any data is recorded, so visits cannot be tied back to an individual. Because no personal data is processed, this analytics does not require consent. See Vercel Analytics privacy policy.
Email. If you contact us via email, we receive your email address and the content of your message. We use this only to respond to your inquiry.
Hosting. This site is hosted on Vercel. Vercel may collect standard server logs (IP address, request timestamp, page URL) as part of normal web hosting operations. See Vercel's privacy policy.
When you engage MPStudio for automation services, we may handle the following types of data as part of the project:
- Business data that flows through the workflows we build (e.g. invoices, employee records, customer lists, emails). This data passes through the automation platform (n8n) and is not stored separately by MPStudio.
- Credentials and API keys you provide so we can connect your tools. These are stored as encrypted credentials within the n8n platform.
- Project files such as proposals, workflow designs, and notes. These are stored on Google Drive and Notion.
- Development data. During active development, client data may be processed on secure local development environments to build, test, and debug workflows.
We do not sell, share, or transfer your data to third parties beyond what is necessary to deliver the agreed services.
We process data under the following legal bases:
- Contractual necessity. Client data (credentials, business data, project files) is processed because it is necessary to deliver the services described in our agreement.
- Legitimate interest. Website analytics (Google Analytics) help us understand how visitors use the site so we can improve it. We balance this interest against your privacy by using anonymized data.
We retain data only as long as there is an active reason to hold it.
| Data type | Retention period |
|---|---|
| Client credentials and API keys | Deleted within 7 days of project completion, handover, or maintenance expiration |
| Project files (proposals, designs) | 90 days after project completion or termination |
| Maintenance client data | Duration of active maintenance plan, plus 90 days after expiration |
| Communication records (emails, tasks) | 1 year after last interaction |
| Google Analytics data | Governed by Google's retention settings (default 14 months) |
| Vercel Web Analytics data | 1 month rolling window (Hobby plan default) |
If a maintenance plan expires and is not renewed, credentials are deleted within 7 days of expiration. If the client re-engages later, fresh credentials are provided as part of the new engagement.
We take reasonable measures to protect your data:
- Client credentials are stored as encrypted credentials within the n8n platform, not in plaintext.
- Access to client environments is limited to MPStudio personnel directly involved in the engagement.
- Project files are stored in access-controlled cloud services (Google Drive, Notion).
- Local development environments are secured and used only during active development.
No system is perfectly secure. If we become aware of a data breach that affects your information, we will notify you promptly.
In delivering our services, your data may be processed by the following third-party platforms:
- n8n (workflow automation platform): processes workflow data and stores encrypted credentials.
- Google Workspace (Drive, Gmail): stores project files and handles communication.
- Notion: stores project tasks and notes.
- Vercel: hosts this website and provides Vercel Web Analytics (cookieless, no personal data).
- Google Analytics: collects anonymized website usage data, only after explicit consent.
Each of these services has its own privacy policy. We select services that maintain reasonable security standards, but we are not responsible for their data practices beyond our control.
If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the General Data Protection Regulation:
- Right to access. You can request a copy of the personal data we hold about you.
- Right to rectification. You can ask us to correct inaccurate data.
- Right to erasure. You can ask us to delete your data. We will comply unless we have a legal obligation to retain it.
- Right to restrict processing. You can ask us to temporarily stop processing your data while we resolve a concern.
- Right to data portability. You can request your data in a structured, machine-readable format.
- Right to object. You can object to processing based on legitimate interest (e.g. analytics). We will stop unless we have compelling grounds to continue.
To exercise any of these rights, email minh@mpstudio.dev. We will respond within 30 days.
You also have the right to lodge a complaint with a supervisory authority in your country of residence.
This website only sets cookies if you grant consent via the cookie banner. The only cookies used are those set by Google Analytics to distinguish users and track sessions. No advertising or marketing cookies are used.
Vercel Web Analytics, which we also use, does not set any cookies and does not require consent.
You can control cookies through your browser settings. Declining or disabling cookies will prevent Google Analytics from tracking your visit but will not affect the functionality of this website.
Our services are designed for businesses, not individuals under 18. We do not knowingly collect data from children. If you believe we have collected data from a minor, contact us and we will delete it promptly.
We may update this policy from time to time. The latest version is always available on this page. Material changes will be noted with an updated date at the top and bottom of the policy.
Last updated: May 7, 2026