MXDNA

Privacy Policy & Data Protection Notice

Effective Date: September 1, 2026 • Jurisdiction: United Kingdom (UK GDPR & DPA 2018) • Entity: MXDNA Systems

1. Introduction & Overview

MXDNA Systems ("we", "us", "our", or "MXDNA") operates the private enterprise cloud and distributed infrastructure hosted on mxdna.uk and its authorized subdomains. We are committed to absolute privacy, operational transparency, and data minimization.

This Privacy Policy explains what limited information we process, our strict zero-tracking stance, and how third-party integrations (including Google Cloud APIs) operate within our platform.

2. Zero-Tracking & No Cookies Stance

The public portal at mxdna.uk is engineered as a static, privacy-first interface:

  • No Analytics or Tracking Scripts: We do not load Google Analytics, Meta Pixel, advertising beacons, or third-party behavioral trackers.
  • No Marketing Cookies: We do not store marketing, profiling, or cross-site tracking cookies.
  • Self-Contained Assets: All scripts, stylesheets, and fonts are served directly from our hardened edge infrastructure with zero third-party CDN leaks.

3. Data Collection & Processing Scope

Data processing across MXDNA Systems is restricted strictly to necessary system administration and Zero-Trust identity authentication:

  • Identity & Authentication Data: For authorized clients and operators accessing internal dashboards (via Single Sign-On), we process usernames, cryptographic password hashes (Argon2id/Bcrypt), and Two-Factor Authentication (TOTP) credentials.
  • Server Diagnostic Logs: Edge web proxies maintain ephemeral access logs (client IP address, timestamp, request URI, user agent, HTTP response code) solely for perimeter defense, rate limiting, and DDoS mitigation. Logs are automatically rotated and purged.
  • DNS & Query Processing: Internal DNS requests routed through our private resolver are processed in-memory for local network resolution and security filtering, and are never logged externally or monetized.

4. Google Cloud OAuth & Third-Party Service Integration

MXDNA Systems integrates with Google Cloud APIs exclusively for automated, offsite disaster recovery synchronization. In compliance with the Google API Services User Data Policy:

  • Minimal Permission Scope: Our automated disaster recovery engine requests only the specific application data scope (drive.appdata or designated application folder access).
  • Zero Access to Personal Files: MXDNA has zero capability and zero authorization to view, search, index, or access your personal Google Drive documents, photos, or emails.
  • Client-Side AES-256 Encryption: All backup snapshots are encrypted client-side using military-grade AES-256 before transmission. Neither Google nor intermediate transit networks possess decryption keys.
  • No Data Sharing: OAuth tokens and backup payloads are never shared with, sold to, or processed by external third parties or AI model training pipelines.

5. Data Security & Storage Architecture

We implement defense-in-depth security to protect system integrity:

  • Zero Public Compute Surface: Core compute clusters and storage backends have no unauthenticated public ingress ports exposed.
  • Encrypted Mesh: All inter-node communication is encrypted end-to-end via secure cryptographic overlay networks.
  • Automated TLS: All public communication is enforced over TLS 1.3 with automated certificate lifecycle management.

6. Data Subject Rights (UK GDPR & DPA 2018)

Under the UK Data Protection Act 2018 and UK GDPR, you retain the following rights regarding any personal data processed:

  • Right to Access: Request confirmation of what personal data (if any) is held.
  • Right to Rectification: Request correction of inaccurate account credentials.
  • Right to Erasure: Request complete deletion of administrative credentials and associated logs.
  • Right to Restrict or Object: Restrict processing of identity credentials.

7. Contact Information & Data Controller

For any questions, verification inquiries, or data subject requests regarding this Privacy Policy, please contact: