Privacy Policy.

Last updated · October 2026

1. Scope of this Policy

This Privacy Policy applies to personal information collected through our website at www.metaas.shop (the "Site"), through email, telephone and other communications with our studio, and in the course of providing design services (the "Services"). It does not govern third-party websites or services linked from the Site, which are subject to their own privacy policies.

By using the Site or communicating with us, you acknowledge that you have read and understood this Policy. If you do not agree with it, please do not use the Site or submit personal information to us.

2. Information We Collect

2.1 Information you provide to us

• Inquiry data. When you send a design inquiry, email or call us, we collect your name, organization, email address, telephone number and the contents of your brief, including the discipline and the project described.
• Brief documentation. To perform the Services, we create briefs, design files, specs and sign-off records — documents that contain your contact information and project details.
• Source material. Reference images, brand assets and project documentation you provide for design work — handled under the confidentiality terms of the brief.
• Billing and payment data. Contact and invoicing details necessary to bill and settle commissions.

2.2 Information collected automatically

• Technical log data. When you visit the Site, our hosting provider may automatically record standard technical information such as IP address, browser and device type, referring page, pages viewed and access timestamps.
• Cookies. The Site is a static website and does not set tracking or advertising cookies. Our hosting provider (Firebase Hosting, operated by Google) processes technical data as described in Section 5.

2.3 Information we do not seek

The contact form is for design inquiries — do not send original artwork files, unreleased product imagery or confidential documents through it. Source material is exchanged through the studio's designated channels once the brief is signed.

3. How We Use Information

We use collected information to:

• Prepare brief proposals, design files and specs;
• Perform the design work described in commissions;
• Coordinate with the client and, where applicable, makers and fabricators;
• Issue invoices, receive payments and maintain studio records;
• Communicate about scope, progress, reviews and sign-off;
• Operate, maintain and secure the Site;
• Meet legal, tax, insurance and recordkeeping obligations;
• Establish, exercise or defend legal claims.

We do not use personal information for automated decision-making or profiling, and we never sell personal information.

4. Legal Bases for Processing

Where applicable law requires a stated legal basis, we process personal information on the following grounds:

• Contract. Processing needed to quote, enter into a commission or perform design work under an agreement with you.
• Legitimate interests. Operating our design studio, documenting commissions and securing our systems, where not overridden by your rights.
• Legal obligation. Recordkeeping and disclosure required under tax, commercial and other applicable law.
• Consent. Where processing relies on consent, you may withdraw it at any time by contacting us.

5. How We Share Information

We do not sell, rent or trade personal information. Disclosure occurs only in these limited cases:

• Service providers. The Site is hosted on Firebase Hosting (Google LLC); email and business systems are handled by providers acting on our behalf under their own terms and safeguards.
• Makers and fabricators. Where a commission involves production, source material and specs are shared with the parties the client approves in the brief.
• Professional advisers. Attorneys, accountants, insurers and regulators receive information where necessary for services or compliance.
• With your direction. Design files and deliverables are shared with the parties you name in the brief.
• Legal requirements. We may disclose information where required by law, regulation, legal process or governmental request, or to protect the rights, property or safety of METAASA LLC, our clients or others.
• Business transfers. In a merger, acquisition or asset sale, information may transfer as part of the transaction, subject to this Policy.

6. Data Retention

Personal information is kept only as long as needed for the purposes in this Policy. Inquiries that do not lead to a commission are generally retained for up to twenty-four months. Briefs, design files, specs and sign-off records are retained for the period required by commercial recordkeeping obligations — typically seven years or longer. Information no longer needed is deleted or anonymized.

7. Data Security

We maintain reasonable administrative, technical and physical safeguards, including encrypted transport (HTTPS) on the Site, access controls on design files, and limiting file access to staff who need it. No transmission or storage method is fully secure; if we become aware of a breach affecting your personal information, we will notify you and regulators as required by law.

8. Your Rights and Choices

Depending on your state of residence, you may have some or all of the following rights:

• Access. Request a copy of the personal information we hold about you.
• Correction. Request correction of inaccurate or incomplete data.
• Deletion. Request deletion, subject to legal and record-retention requirements.
• Restriction & objection. Request limits on, or object to, certain processing.
• Portability. Receive your data in a structured, commonly used format.
• Non-discrimination. Exercise your rights without discriminatory treatment.

Residents of states with comprehensive privacy laws — including California, Virginia, Colorado and Connecticut — may exercise these rights by writing to sun.yichen@metaas.shop. We do not sell personal information or share it for cross-context behavioral advertising, so there is no sale or sharing to opt out of. We verify requests and respond within the legally required period.

9. Children's Privacy

The Site and our Services are intended for businesses and adults. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

10. International Visitors

We are located in the United States and process information in the United States. If you access the Site or contact us from abroad, you understand your information will be transferred to and processed in the United States, whose data protection laws may differ from yours.

11. Third-Party Links

The Site may link to third-party websites. We are not responsible for their privacy practices and encourage you to review their policies.

12. Changes to this Policy

We may update this Policy to reflect changes in our practices, the Site or applicable law. The "Last updated" date above shows the current version. Material changes are posted here; continued use of the Site after a change constitutes acceptance.

13. Contact Us

Questions, requests or complaints about this Policy or our data handling may be directed to:

METAASA LLC
5540 Centerview Dr, Ste 204
Raleigh, NC 27606, United States
Email: sun.yichen@metaas.shop
Telephone: +1 620 733 5487