Privacy Policy

GlyphNode Studio ("we", "us") is a typography engineering atelier operating under the laws of [Jurisdiction]. For any question about this policy or about data we hold, contact us at jobs@nivalis.store.

Information you provide. Name, work email address, organisation, and the contents of your project brief when you submit an enquiry or correspond with us by email.

Project materials. Font binaries, source files (UFO, .glyphs, designspace), specimens, build logs, and written specifications you send us for audit or engineering work.

Contract and billing data. Signed agreements, purchase orders, invoice records, and payment references. We do not receive or store full payment card numbers.

Technical data. Server logs generated when you visit this website, including IP address, user agent, requested URL, and timestamp.

• To respond to enquiries and prepare scopes, estimates, and defect reports.
• To perform the engineering work described in a signed agreement.
• To issue invoices and maintain accounting records.
• To maintain the security and availability of this website.
• To comply with legal, tax, and audit obligations in [Jurisdiction].

We do not sell personal data, and we do not use your project materials to train machine learning models.

Where the data protection law of [Jurisdiction] requires a legal basis, we rely on: performance of a contract for project delivery; legitimate interests for responding to enquiries and securing our systems; legal obligation for tax and accounting records; and consent where we ask for it explicitly, such as permission to publish a case study.

Unreleased typefaces are treated as confidential by default. Access is limited to the engineers assigned to your project. We do not display, publish, or reference an unreleased family without your written approval, and we will sign your own non-disclosure agreement on request.

We share limited data with providers that support our operations: email and file transfer hosting, source control and build infrastructure, accounting software, and payment processing. Each is bound by contract to process data only on our instructions. A current list is available on request.

Our providers may process data outside [Jurisdiction]. Where that occurs, transfers are made under the safeguards recognised by the law of [Jurisdiction], such as standard contractual clauses or an adequacy decision.

Enquiries that do not become projects are deleted within 12 months. Project materials and delivered sources are retained for 24 months after final acceptance so we can support rebuilds, then deleted on request or on schedule. Contract and invoice records are kept for the statutory period required in [Jurisdiction]. Web server logs are kept for 90 days.

Project files are stored on encrypted volumes with access limited to named engineers. Transfers use encrypted channels. Build systems require multi-factor authentication. No system is perfectly secure; if a breach affects your data, we will notify you and any regulator required under the law of [Jurisdiction] without undue delay.

Subject to the law of [Jurisdiction], you may request access to the personal data we hold about you, correction of inaccurate data, deletion, restriction of processing, a portable copy, or objection to processing based on legitimate interests. Write to jobs@nivalis.store and we will respond within the statutory period. You may also complain to the supervisory authority in [Jurisdiction].

This website does not use advertising or cross-site tracking cookies. Any cookie we set is strictly necessary for the site to function and expires at the end of your session.

Our services are offered to organisations and professionals. We do not knowingly collect personal data from children as defined by the law of [Jurisdiction].

We will update this page when our practices change and revise the "last updated" date. Material changes affecting an active project will be notified by email.